Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
File:                     3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          jzdRwUM1lLybbElWS6j0dYOxOkNQmO8pihnGvS0cBCg=
Subject key identifier:   D5:A9:3F:72:64:6B:EA:CD:32:BF:2D:4C:E4:8D:1C:19:A7:56:DB:87
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       47DA5A131EA784BAF221BAB8D65741FAAA87954B
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:05 +0000
ROA not before:           Thu 04 Apr 2024 01:58:05 +0000
ROA not after:            Thu 03 Apr 2025 02:03:05 +0000
asID:                     61942
IP address blocks:        201.131.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:5a:13:1e:a7:84:ba:f2:21:ba:b8:d6:57:41:fa:aa:87:95:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:05 2024 GMT
            Not After : Apr  3 02:03:05 2025 GMT
        Subject: CN=D5A93F72646BEACD32BF2D4CE48D1C19A756DB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:52:e1:00:5b:4d:77:3a:21:3f:c1:9a:0a:
                    d3:f0:95:b3:ec:3a:e3:c3:fa:f5:25:9d:f0:5d:38:
                    a6:02:4e:7b:6e:54:d7:99:e1:d9:a3:e9:62:c7:63:
                    87:e5:f3:a9:09:1c:3d:3d:86:8a:4d:1a:fe:21:25:
                    82:71:a7:7f:fb:21:a6:6e:6e:13:d2:88:25:7e:4c:
                    bb:d1:a5:c1:5c:f8:bd:93:fb:d8:02:84:42:8b:da:
                    3e:61:b6:6e:28:0d:02:b5:24:1b:6d:f7:b7:e6:06:
                    de:21:20:44:31:bb:2a:a2:8c:36:f9:54:4c:66:21:
                    17:9d:87:1e:dc:c5:98:15:09:6d:e8:be:2b:a8:5f:
                    37:cf:94:6a:07:98:cc:76:8a:9f:63:6b:30:8d:5a:
                    2e:47:50:d1:dc:7e:0e:ae:7d:c9:bb:95:6c:28:3b:
                    28:6a:c9:3f:16:cf:88:31:9b:05:c3:35:54:e9:b1:
                    36:c9:8f:8b:1d:a4:6e:48:91:9d:a7:3f:52:ff:79:
                    e9:ef:39:00:8a:8e:4f:7e:ba:cd:2d:8d:0f:2f:0e:
                    e2:92:24:4f:1c:12:55:86:07:41:56:8b:8b:d1:2f:
                    ba:e0:32:5d:32:b0:eb:17:ad:a6:4d:b6:2b:89:2f:
                    82:e1:d7:3e:9f:31:e2:71:db:e6:36:0d:db:85:1e:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A9:3F:72:64:6B:EA:CD:32:BF:2D:4C:E4:8D:1C:19:A7:56:DB:87
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:99:ed:01:75:ea:47:98:0d:8c:31:09:5e:c4:f0:b0:59:
         4d:85:40:59:91:1b:39:61:5b:ec:09:c9:18:0d:24:ea:92:d9:
         ed:a1:31:25:eb:a2:53:85:11:6c:de:da:1c:43:dc:f6:9d:5e:
         20:bd:05:7e:7c:c0:2c:fa:cc:ca:ce:71:9a:87:37:98:f4:e5:
         c7:41:69:29:14:ee:80:3d:af:8c:25:65:a4:a1:f7:a2:e0:31:
         df:c3:3c:b0:a4:d5:35:89:31:58:54:a2:7d:0c:96:69:3b:f4:
         11:05:0e:75:13:e4:e6:5c:4c:c6:91:7d:9c:98:7f:51:6d:0b:
         a8:35:e7:37:50:6b:7c:de:03:3b:46:b7:a8:f6:99:3d:e6:e4:
         f6:d8:eb:df:cf:a4:72:77:02:4a:59:17:c5:de:f1:94:e0:bf:
         0e:6e:55:90:d3:e3:63:57:c3:4b:1b:41:95:a8:ce:ef:11:16:
         99:dd:b5:7f:5c:58:43:02:22:67:1e:1c:35:05:94:60:e1:32:
         2c:6c:83:45:e3:bc:e9:07:e5:64:c1:79:8c:78:59:f6:af:b7:
         ba:72:32:77:72:f0:ec:76:db:67:c7:51:08:b8:1a:24:ae:20:
         65:c7:e0:eb:31:82:e8:83:a1:09:e4:df:3f:99:34:08:8a:e5:
         75:4b:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org