Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          s4dqB6pEJSDFmJ3Z9uKnVz265BjwwCWOMavcMhEqt0s=
Subject key identifier:   1E:2F:BC:9C:52:BA:0F:87:EC:FB:5F:D7:56:7F:6F:CE:F7:67:CC:D8
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       7B96264F8F3E7D11044DB7777717A6DA692F7A9D
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa
Signing time:             Fri 30 Jun 2023 18:11:00 +0000
ROA not before:           Fri 30 Jun 2023 18:06:00 +0000
ROA not after:            Fri 28 Jun 2024 18:11:00 +0000
asID:                     61672
IP address blocks:        131.108.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:96:26:4f:8f:3e:7d:11:04:4d:b7:77:77:17:a6:da:69:2f:7a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jun 30 18:06:00 2023 GMT
            Not After : Jun 28 18:11:00 2024 GMT
        Subject: CN=1E2FBC9C52BA0F87ECFB5FD7567F6FCEF767CCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:a5:2d:c0:ea:a9:f7:4b:ac:1e:23:7c:92:
                    95:76:a0:8b:81:fa:ea:0d:c1:b3:c8:ac:89:e0:8b:
                    c1:e9:4b:00:4b:17:5e:47:eb:16:2f:8b:84:00:a8:
                    80:a8:c7:42:3b:66:8d:48:b5:08:12:a1:8d:55:55:
                    bd:58:3f:c3:33:8e:cc:64:8d:eb:96:14:b2:b7:a4:
                    ff:74:e9:cf:fe:25:55:cd:ee:c7:ff:b1:43:bb:69:
                    0a:39:77:f8:12:c9:f3:4a:5d:f2:0b:e6:83:08:f2:
                    91:8b:77:9e:0f:c0:42:91:94:b1:97:3e:1a:cd:21:
                    f3:b8:0c:c4:72:2e:e5:73:eb:65:49:bf:5f:11:9c:
                    28:17:ad:af:a4:3f:b6:43:6f:51:fa:f0:a3:b7:bf:
                    f7:67:a0:1a:ed:38:2c:7b:26:60:9b:00:c3:4d:f8:
                    64:6f:ab:1c:78:d7:da:48:a8:95:4c:75:4d:62:55:
                    e7:ff:59:21:7d:65:b7:44:e2:bb:e5:42:32:a1:1d:
                    8d:2e:19:6a:fa:18:ef:8f:ab:bb:18:aa:a9:be:00:
                    08:a3:2a:58:71:1d:85:3b:3e:6a:df:23:84:3a:8a:
                    1f:1e:e0:f0:47:3d:96:94:4e:da:18:83:90:51:87:
                    83:4a:e6:a2:27:30:7b:13:69:ae:d5:70:70:1e:14:
                    7e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:BC:9C:52:BA:0F:87:EC:FB:5F:D7:56:7F:6F:CE:F7:67:CC:D8
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130312e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:00:e8:4a:ab:50:63:06:ba:c9:61:33:2c:e9:df:91:31:27:
         b3:fe:f3:9d:60:e8:1a:2b:40:d5:7e:be:0b:20:1a:85:8e:97:
         7e:c3:fb:8d:84:2b:10:e9:a0:0d:13:18:7c:00:11:c1:77:12:
         ca:0a:48:dc:a1:4f:fd:da:86:3f:7a:77:94:13:f6:1c:4c:8e:
         a1:ea:7d:26:85:3a:26:84:54:1d:a2:c2:9d:38:50:47:6d:bd:
         ff:2b:a8:36:ec:70:66:e5:d6:58:21:f5:bb:67:9c:3b:62:c0:
         ed:1f:d2:40:ce:40:d9:3a:51:3a:ae:e2:5e:70:5b:31:d6:2c:
         15:e5:79:a6:08:01:de:aa:1a:79:e0:c4:96:6b:22:7f:1f:fc:
         36:f8:2c:07:c2:71:01:04:ac:86:26:82:3c:16:4d:22:26:98:
         79:b6:76:80:2f:ae:b4:ec:42:03:03:6e:dc:fa:56:35:5c:e8:
         6f:19:4d:19:bb:6d:70:aa:91:74:8c:e8:5f:33:84:4d:c4:b4:
         94:ae:82:7f:9b:12:59:21:d8:7e:12:f6:1e:66:9e:68:f7:a9:
         28:92:2a:ca:a0:f3:83:52:54:af:63:1d:76:84:9f:80:60:bc:
         4d:35:e5:08:0a:a2:f6:3d:54:ef:63:44:41:28:58:23:fa:e3:
         37:64:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org