Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa
File:                     3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          N/7nHRJbSAYgOZCHp8xFjUykj3iN48b49MPjuSOfdOc=
Subject key identifier:   56:14:BE:71:F9:80:46:FF:4D:D9:A5:13:75:EB:EE:45:E1:7B:93:4D
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       67B765D639E6C7CF7CBE8C253C66AF089FA09E0F
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa
Signing time:             Tue 06 Jun 2023 13:10:57 +0000
ROA not before:           Tue 06 Jun 2023 13:05:57 +0000
ROA not after:            Tue 04 Jun 2024 13:10:57 +0000
asID:                     61672
IP address blocks:        131.108.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b7:65:d6:39:e6:c7:cf:7c:be:8c:25:3c:66:af:08:9f:a0:9e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jun  6 13:05:57 2023 GMT
            Not After : Jun  4 13:10:57 2024 GMT
        Subject: CN=5614BE71F98046FF4DD9A51375EBEE45E17B934D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:c3:44:5b:d0:ea:d8:40:76:af:00:e4:c2:
                    df:d2:35:db:7f:fd:b6:1f:7e:7e:36:8f:4b:08:c9:
                    45:b4:74:ef:14:ab:3d:b8:bb:19:db:42:81:37:62:
                    30:b7:a4:ac:8e:91:07:5b:7d:f0:12:a3:d9:4a:7b:
                    79:4f:a7:78:2f:e1:cf:a6:d7:0d:0b:fc:9b:16:c8:
                    9c:ba:ac:ff:99:fa:83:f1:6d:0e:6b:91:df:37:16:
                    59:b9:4b:ab:12:f7:15:11:8d:fa:a5:f1:31:33:de:
                    71:44:9d:a2:fe:40:a2:ba:78:3b:4d:e4:a7:e6:2f:
                    15:61:fc:65:f4:05:3b:59:64:31:48:82:72:24:87:
                    c8:1e:e1:86:15:69:49:26:cb:27:e3:d0:fa:c1:bc:
                    a5:c9:ec:8a:86:dc:e0:ca:b6:bc:8c:b2:6d:eb:79:
                    f8:2c:88:c3:56:75:e8:be:84:c0:5f:50:23:e1:e1:
                    95:5d:d7:bb:6b:4f:a5:30:5c:6a:36:92:66:b2:6e:
                    38:b9:91:44:be:77:f5:2a:db:36:76:c9:5d:19:6e:
                    68:8c:a9:0c:ac:ff:90:93:26:30:c3:6c:5d:4c:d6:
                    85:8e:a5:56:44:21:0d:42:d7:fd:97:67:80:d6:4b:
                    a5:c5:1c:ea:65:1e:69:7a:f0:68:ba:2a:70:a1:26:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:BE:71:F9:80:46:FF:4D:D9:A5:13:75:EB:EE:45:E1:7B:93:4D
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:51:05:8f:ab:77:e9:36:c2:17:a9:c3:51:30:ce:ec:d6:6f:
         53:86:d2:22:e9:4b:42:37:24:fe:97:7f:42:bf:c7:c6:a1:b4:
         58:26:60:99:1f:69:cc:a5:c2:f9:32:f0:93:cf:48:cd:51:14:
         e9:cb:3a:0d:c7:ad:43:2c:e3:0d:e1:28:21:9a:6b:3d:40:26:
         28:af:26:39:b9:bf:ab:5d:ce:f0:c0:96:d8:d2:70:51:c3:f3:
         f1:26:6b:57:f9:c6:83:33:92:d2:ee:4f:76:9b:fe:c0:72:2f:
         6e:c3:76:be:31:0c:27:23:38:11:5f:66:d9:34:9e:b0:1f:0a:
         79:2f:aa:70:c4:ea:e1:b9:ac:22:8c:e7:c8:79:19:92:41:da:
         17:5f:51:9e:11:11:0c:ed:a3:ca:4c:0c:1b:00:66:0d:79:55:
         da:65:22:4d:2b:66:b4:7a:9a:50:d7:77:88:83:be:89:30:1f:
         b4:4f:8f:b9:0b:cd:08:45:27:0c:2d:19:ff:27:ec:ec:c0:bd:
         ac:ab:45:34:ce:99:f0:ad:ec:cd:05:85:ad:6f:01:c0:84:7d:
         80:83:96:4f:76:cc:66:c5:8f:8e:4e:cb:29:ff:12:0f:82:af:
         44:39:24:94:a5:e9:74:c1:93:8e:82:d3:55:5a:c6:46:bb:f6:
         50:91:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org