Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3133312e3235352e36382e302f32322d3234203d3e203631393432.roa
File:                     3133312e3235352e36382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          Rh2bKgM4pv7Lnv0RmbID+Gtk1PKpxlN9LBiSB1b5RkY=
Subject key identifier:   D0:E7:15:D5:1F:AE:9E:29:92:C1:66:D7:4C:F1:BE:00:6C:1E:8E:03
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       4791E0A866283E2D7D903973A65BE2D1822B4E9B
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3133312e3235352e36382e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        131.255.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:91:e0:a8:66:28:3e:2d:7d:90:39:73:a6:5b:e2:d1:82:2b:4e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=D0E715D51FAE9E2992C166D74CF1BE006C1E8E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:ab:87:8b:99:bc:f0:57:e5:6e:28:f5:ee:
                    84:96:aa:7f:9e:c1:6e:20:d5:f6:26:50:7e:77:48:
                    df:ad:e4:37:9d:be:9f:be:8c:1f:21:47:7f:59:4e:
                    cc:f9:cd:69:d5:42:63:86:0b:97:c5:fe:63:3b:cc:
                    92:4b:d2:fd:4f:e8:fe:59:0c:ed:09:2c:67:19:de:
                    6b:2a:c5:39:cf:f9:5c:d5:1c:92:0a:4e:d0:e0:7f:
                    ab:0e:00:47:75:fa:cb:6e:fb:92:f5:27:11:06:83:
                    70:24:e8:75:e4:07:5a:11:4a:23:ba:af:b0:81:bc:
                    1d:70:26:01:44:91:95:f8:31:2b:54:6c:98:be:35:
                    8a:93:9b:c8:b8:6b:dd:e5:8c:ab:fd:52:15:bd:48:
                    49:04:07:29:bf:07:3b:fd:61:5c:c8:94:51:df:1e:
                    c8:7e:ff:12:cb:14:b9:2e:54:9c:a5:b7:db:15:62:
                    8a:36:ee:ce:6c:34:08:2e:84:08:d8:6c:34:2e:84:
                    07:cd:47:56:eb:43:5e:cc:1d:99:95:53:02:1a:6d:
                    73:4a:de:03:b4:e1:6e:ed:9e:3a:98:60:74:63:08:
                    28:c3:d2:30:b7:12:6e:6c:f5:f0:2a:ca:75:65:8d:
                    6d:92:2e:ab:98:2e:7e:37:61:70:ba:52:93:b8:ad:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E7:15:D5:1F:AE:9E:29:92:C1:66:D7:4C:F1:BE:00:6C:1E:8E:03
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3133312e3235352e36382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:81:4f:c1:07:a9:82:d2:41:ff:e1:ea:4b:e5:f2:49:e4:
         51:c4:ef:88:da:7c:0f:ed:9a:0b:38:20:8f:6f:ab:6e:23:16:
         87:60:a2:bc:06:46:6c:5c:a7:09:52:7e:a4:89:ae:f8:11:7d:
         26:1b:61:26:7f:5c:77:b1:5b:b7:72:2a:41:93:00:d4:54:c2:
         9e:d8:f5:0a:bc:4b:b5:86:48:c0:7f:49:d7:a5:4a:46:43:ba:
         11:ef:e3:ce:0f:91:7a:dc:0d:f7:c8:2c:c6:00:77:df:ed:74:
         99:79:2c:5c:a7:13:a1:44:a8:9e:6e:a1:ce:09:b9:80:95:c3:
         94:7b:46:9f:f5:77:86:0a:cb:2b:cc:0c:d7:aa:df:e9:2f:16:
         47:f9:ee:33:8e:ff:97:60:2e:97:07:e1:10:6f:f3:53:6d:94:
         c5:a2:3f:4e:6f:cf:34:de:df:92:6c:be:10:69:37:03:99:21:
         70:1f:15:72:31:b2:8e:9d:a6:87:9d:25:1c:f4:59:c4:22:53:
         b0:b1:7b:6f:9e:78:ea:9a:10:25:70:b7:8c:ce:ee:2e:68:2f:
         42:44:0c:d9:47:66:07:6c:15:c2:e7:09:ab:24:b1:ae:72:22:
         8a:56:c4:22:81:77:f0:77:19:b9:6a:ba:c8:88:ee:ff:2f:57:
         9b:1e:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org