Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
File:                     3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (raw, json)
Hash identifier:          raT2/qy2/COUjVt+FOy5TsPAeSfsYTpxEBY2AD66Erk=
Subject key identifier:   18:FF:B4:A3:74:78:0D:10:CC:CC:20:2F:81:96:E1:B6:52:7F:3C:D9
Certificate issuer:       /CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
Certificate serial:       79510A41FAE69D4AAA76C8149EE121503CF06A47
Authority key identifier: 62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
Signing time:             Tue 26 Mar 2024 19:51:03 +0000
ROA not before:           Tue 26 Mar 2024 19:46:03 +0000
ROA not after:            Tue 25 Mar 2025 19:51:03 +0000
asID:                     265913
IP address blocks:        131.196.148.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:0a:41:fa:e6:9d:4a:aa:76:c8:14:9e:e1:21:50:3c:f0:6a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7
        Validity
            Not Before: Mar 26 19:46:03 2024 GMT
            Not After : Mar 25 19:51:03 2025 GMT
        Subject: CN=18FFB4A374780D10CCCC202F8196E1B6527F3CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:18:61:2a:42:7d:58:8c:2c:a7:88:ef:ac:
                    34:f5:3d:a8:09:ca:2d:6a:88:7c:5c:99:93:2f:ff:
                    ee:ad:0e:02:12:af:2c:ce:72:d1:f9:2e:09:c9:da:
                    71:05:ae:89:20:ef:16:1d:9c:7e:f8:65:5c:0a:4a:
                    07:ab:32:e8:c6:9c:59:9d:88:97:3a:93:f8:92:31:
                    99:f7:0d:fa:61:09:fb:c3:c8:e5:f5:c5:5e:69:f5:
                    5b:87:de:5e:77:9d:b6:13:54:6a:a4:19:a4:f0:a4:
                    dc:d4:33:07:e3:d5:f3:5d:9a:82:38:f0:54:fa:3e:
                    53:5a:c6:62:ae:0c:77:bb:6d:d3:b1:9c:32:ae:3f:
                    d9:8c:f1:75:60:66:da:b6:1d:46:a1:2e:e7:be:b6:
                    97:de:95:7a:92:2a:ed:47:7c:39:36:54:a9:c1:5d:
                    d4:8a:9a:ea:95:c7:be:ad:a7:2a:5a:f9:2d:b1:3b:
                    cb:c6:df:74:06:e4:34:99:30:ea:17:73:1f:39:ce:
                    5b:cb:35:d5:c9:19:aa:25:e4:d8:19:fd:d6:c8:70:
                    83:4a:5c:d7:a0:b8:d7:dc:1f:90:32:36:fc:b5:0d:
                    1a:7e:02:dc:78:94:79:49:b4:37:ce:d3:ad:e5:68:
                    1a:90:02:d2:51:09:60:e5:ef:df:6b:ee:8a:f9:dc:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:B4:A3:74:78:0D:10:CC:CC:20:2F:81:96:E1:B6:52:7F:3C:D9
            X509v3 Authority Key Identifier:
                keyid:62:E3:44:D1:7A:5F:C9:38:1E:6A:72:18:D1:E6:D0:DE:C5:EB:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62E344D17A5FC9381E6A7218D1E6D0DEC5EB63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:c7:d6:ed:f2:ba:ac:c5:19:f9:2e:3c:f2:0b:60:c3:67:
         04:19:ae:cb:66:32:7f:b0:bc:b9:8d:f8:c6:e4:1e:9f:1d:fc:
         0f:c7:65:8e:64:77:f7:dc:be:ed:83:ed:1b:1a:f9:d8:e2:8a:
         fb:22:66:9a:37:02:0b:c3:f8:6a:13:7f:23:c0:bb:3a:02:46:
         5c:1f:4d:3d:17:57:3d:30:8c:4c:c8:5b:07:e0:7c:f4:e4:89:
         8f:07:96:06:4d:0e:40:2a:f4:47:18:d8:1a:ee:dc:13:a3:dd:
         8b:25:a1:c6:96:37:90:f7:6f:08:89:00:37:c9:c4:75:12:26:
         99:02:55:bc:6d:61:10:e8:51:83:35:e1:a7:54:62:d5:76:b1:
         10:37:a6:52:50:68:75:78:68:12:b3:02:1b:b4:76:44:6f:15:
         28:50:92:90:ec:6b:82:ec:14:3c:b3:78:d3:a6:c2:5e:39:38:
         16:39:4e:5a:1d:b3:65:63:b2:ad:bd:fa:93:b5:09:ca:2b:a0:
         09:a0:01:f9:1c:61:1c:42:57:d6:97:89:73:f9:2f:f0:c3:9a:
         50:07:00:77:04:f4:e9:ff:ce:20:0f:d9:98:11:d5:72:6f:fe:
         5a:43:7c:85:45:f7:b7:4c:a0:ae:ec:91:1b:11:4d:2c:74:1e:
         71:62:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org