Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          TPIu/+B/wLjp81XNbotIDl64O4unDbpB54zCiUv2bMY=
Subject key identifier:   31:CA:1E:78:AD:C9:94:11:5E:F8:A2:C0:9E:3E:33:1F:09:A6:D3:1D
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       33B7C0251F0268FD4EBEA5BC2453223FEC08D651
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa
Signing time:             Fri 05 Apr 2024 11:26:59 +0000
ROA not before:           Fri 05 Apr 2024 11:21:59 +0000
ROA not after:            Fri 04 Apr 2025 11:26:59 +0000
asID:                     61672
IP address blocks:        131.108.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b7:c0:25:1f:02:68:fd:4e:be:a5:bc:24:53:22:3f:ec:08:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Apr  5 11:21:59 2024 GMT
            Not After : Apr  4 11:26:59 2025 GMT
        Subject: CN=31CA1E78ADC994115EF8A2C09E3E331F09A6D31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:4a:15:72:01:bf:e7:29:49:a9:ce:e7:b1:
                    25:f3:bf:ab:42:69:09:20:c1:e9:f1:e9:e6:4e:0e:
                    2d:e9:a6:37:9a:b4:35:5d:c3:1c:f2:15:1f:1d:a2:
                    a2:6d:d3:67:01:b3:c2:03:f3:91:13:b8:4a:17:ee:
                    bf:0e:7a:fb:f9:f6:b2:5b:2b:f7:c1:1d:b6:fb:e8:
                    66:24:eb:9d:88:84:6f:f1:4a:f3:0f:f1:a8:54:bd:
                    94:cf:a3:eb:2f:88:58:ab:d0:04:ba:04:65:72:3d:
                    2e:5b:45:4c:0f:ec:11:32:81:b3:64:c5:07:6f:cc:
                    57:4c:02:9f:cb:06:e0:a6:c3:c3:e7:66:10:bf:06:
                    ce:02:4d:af:77:28:59:e1:bf:7c:bf:75:29:1a:b7:
                    06:2b:92:28:75:72:0d:1b:cb:98:1d:f2:26:0d:ea:
                    0a:2c:b6:b4:94:09:cf:db:ed:3a:55:ad:5d:44:a2:
                    1b:0c:d6:d5:e7:8d:87:ed:cb:1e:68:fd:f9:eb:9c:
                    4d:46:f9:1a:00:e9:8d:ef:2c:12:fd:1c:f7:20:2c:
                    3a:d7:6f:50:1d:1c:39:b6:5d:f5:b9:dd:ca:80:c3:
                    28:46:e6:2a:b1:7d:22:1b:43:ba:bb:de:60:be:c6:
                    f0:78:79:ee:0a:b9:df:cb:f9:99:60:0b:63:c3:e0:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CA:1E:78:AD:C9:94:11:5E:F8:A2:C0:9E:3E:33:1F:09:A6:D3:1D
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:18:b8:50:94:92:6b:a0:ef:db:9c:c7:bf:cb:88:82:8e:92:
         6b:49:23:78:1a:73:88:a9:a6:ea:03:74:2f:f8:15:72:83:23:
         15:dd:0f:86:10:0d:16:dd:54:9b:1f:47:c4:68:d0:b9:c6:61:
         11:54:a7:be:58:18:7b:fa:89:3f:aa:33:94:c9:47:29:e5:c2:
         09:c0:76:38:30:7c:ea:27:5e:30:72:4a:55:06:3b:a1:13:a5:
         1d:11:b5:ca:b6:e1:6b:8b:24:7d:b7:de:ae:43:db:51:1c:95:
         3a:19:c0:08:3a:94:c2:86:35:2e:b1:35:80:7a:e2:50:e7:4c:
         03:f7:49:9c:36:2d:68:0d:8e:e9:45:58:85:6a:4b:dd:29:2e:
         8e:34:26:58:9e:71:92:3d:af:b2:81:b4:fe:19:a0:63:68:a0:
         92:5c:0f:0a:f8:d3:0d:a9:f5:a3:6d:62:85:6e:94:41:4a:ec:
         a5:16:cc:0b:60:c0:00:75:c4:73:55:ef:81:92:5a:49:6a:8d:
         b2:d9:77:53:ca:e1:74:38:c1:0c:1c:bb:4a:a0:d5:b9:3a:95:
         08:22:ed:08:6b:b3:41:52:8b:0c:81:0d:39:8e:f2:68:e9:67:
         fa:6e:eb:16:2c:2e:b2:3a:ee:6d:9a:93:76:ff:4e:5e:81:eb:
         fe:66:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org