Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          ooOW09yEtUlJgCEre4+atIOnC5wrLW/9pBzjrBV9UUw=
Subject key identifier:   83:F9:37:0B:FC:F4:AC:5B:CA:A6:C0:EC:CD:BE:16:0B:46:3C:8C:A8
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       517D59F83D11E64043FF65D44CD16ADCED67E476
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
Signing time:             Fri 30 Jun 2023 18:11:15 +0000
ROA not before:           Fri 30 Jun 2023 18:06:15 +0000
ROA not after:            Fri 28 Jun 2024 18:11:15 +0000
asID:                     61672
IP address blocks:        131.108.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7d:59:f8:3d:11:e6:40:43:ff:65:d4:4c:d1:6a:dc:ed:67:e4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Jun 30 18:06:15 2023 GMT
            Not After : Jun 28 18:11:15 2024 GMT
        Subject: CN=83F9370BFCF4AC5BCAA6C0ECCDBE160B463C8CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:da:39:ae:35:61:44:54:b2:88:e5:d4:e4:
                    47:4f:3c:3d:66:9f:ce:11:3e:89:e5:75:61:45:9c:
                    08:98:2b:5a:2c:ca:3e:0c:54:3d:fd:31:bf:53:5b:
                    91:81:a2:0b:db:86:cd:69:42:49:16:35:00:48:b2:
                    79:8c:8e:ad:2f:39:bb:3c:ad:81:fd:06:1c:9b:c2:
                    58:db:2c:6b:7f:5a:fa:8a:58:36:10:07:48:13:0d:
                    35:8d:ad:48:9b:0b:39:21:1e:93:94:2f:1b:9c:86:
                    6e:e2:44:05:3f:3f:06:69:79:2a:26:75:45:be:da:
                    33:26:77:95:ab:17:aa:45:99:25:53:94:5f:09:9b:
                    be:5e:93:bf:46:4c:51:b5:87:20:49:81:e9:19:4d:
                    63:76:c5:d1:1c:37:81:41:4d:ab:10:9f:c0:a2:6c:
                    fd:b1:1f:e1:9b:55:91:a5:5c:c5:ab:b6:0a:d6:76:
                    60:06:78:04:44:f1:5e:dc:d1:59:78:08:8b:77:e4:
                    f1:82:cc:70:a9:8e:c4:7e:5d:90:34:8d:71:80:b2:
                    d5:10:87:93:b4:8e:a8:ff:8c:3a:b2:2b:cd:56:4b:
                    82:3d:56:86:88:71:d2:2a:be:40:e1:c8:b1:cd:dd:
                    a9:c0:ea:84:1d:b2:fc:7c:de:ca:64:e0:4d:02:82:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:37:0B:FC:F4:AC:5B:CA:A6:C0:EC:CD:BE:16:0B:46:3C:8C:A8
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:1f:36:41:8e:77:ab:5d:8f:60:b6:ee:ac:5f:e6:44:83:
         76:0b:90:34:0d:67:86:31:aa:09:2d:e2:95:52:07:04:ca:2e:
         df:b7:e2:b4:4f:c9:79:cc:be:45:f7:55:95:9e:70:bf:e1:80:
         62:78:be:c5:c7:76:6a:ce:cb:2b:17:ce:fe:de:6f:7c:d8:a3:
         a7:17:a3:b7:a3:f2:7f:6c:1a:4f:9e:6a:f5:52:a5:86:26:26:
         68:44:63:2a:33:b0:ac:1e:4f:87:50:66:ae:ec:34:ab:21:91:
         c4:53:6d:95:e2:84:b3:69:40:ca:34:c5:52:76:4c:d4:86:af:
         2b:d7:81:ad:d7:27:5d:6a:37:0b:03:47:d8:7a:11:c1:5a:76:
         37:61:05:2c:66:60:38:2c:1b:1f:03:9e:69:c2:3c:dc:5b:61:
         9b:80:28:a7:d1:34:76:e5:b8:33:a4:37:7d:48:62:40:4d:8b:
         35:9a:99:25:e1:19:9a:30:c2:90:b8:a6:98:78:23:a3:23:a5:
         06:c9:a6:87:4d:e3:a1:e7:86:de:c6:bd:2d:78:86:30:f7:58:
         44:de:da:1e:45:72:49:0c:ba:6d:6e:c6:22:b6:5e:47:12:9c:
         30:97:31:a0:3f:3c:45:6c:43:27:83:26:e7:6b:e6:b9:b3:e9:
         28:a7:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org