Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3232203d3e203631363738.roa
File:                     3133312e3130382e3136342e302f32322d3232203d3e203631363738.roa (raw, json)
Hash identifier:          xtlPrVn3WX7lFDcSBq1DXNp4yd9xrkodZSyqZk80om4=
Subject key identifier:   03:DE:97:28:D2:43:F6:E9:5B:24:8E:65:06:2B:2E:FE:C4:FC:86:2E
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       0D512039A6CE035D636ECF2CFE740B30D1F33FDA
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3232203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:44:16 +0000
ROA not before:           Tue 24 Oct 2023 12:39:16 +0000
ROA not after:            Tue 22 Oct 2024 12:44:16 +0000
asID:                     61678
IP address blocks:        131.108.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:51:20:39:a6:ce:03:5d:63:6e:cf:2c:fe:74:0b:30:d1:f3:3f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:39:16 2023 GMT
            Not After : Oct 22 12:44:16 2024 GMT
        Subject: CN=03DE9728D243F6E95B248E65062B2EFEC4FC862E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:8c:97:14:5b:aa:7d:08:83:12:ac:c2:4f:
                    e6:c1:5a:b3:13:52:18:41:65:db:55:8f:ce:3b:93:
                    3b:06:1e:4c:90:26:dc:74:26:28:40:a5:93:d0:f7:
                    0a:98:93:7c:a2:74:50:64:1c:91:4c:2f:e7:91:80:
                    80:70:7c:a8:4b:5d:ac:66:08:80:18:4d:3a:c7:24:
                    13:f0:f7:84:4b:d0:76:bd:7a:41:aa:16:e3:d8:e5:
                    4b:69:e1:58:7c:ce:e5:c2:1d:2d:a7:6b:f4:96:e5:
                    5a:8c:69:3f:fa:90:91:57:f7:35:8c:71:82:59:e1:
                    16:a5:de:a7:86:aa:20:d6:4d:87:7b:06:37:40:ed:
                    6e:78:f5:c7:5d:1b:bd:87:6f:0d:6c:ab:6e:f1:6c:
                    0d:86:7f:d8:83:eb:2d:39:7e:9f:0c:cd:09:10:c2:
                    40:67:ba:b6:5a:b8:1e:a6:51:97:c3:9c:5b:de:24:
                    0d:1e:06:d5:3c:d0:92:46:fe:ab:12:d9:4b:bb:0b:
                    43:16:0a:e3:1d:0d:7f:35:4e:a8:1b:88:8b:6b:f2:
                    9b:56:a1:00:a0:70:14:60:bb:a4:c6:13:2f:63:21:
                    9e:ee:c6:90:f3:ec:9f:fd:4c:1c:20:5b:4e:5b:09:
                    bd:da:8c:dd:08:52:07:3a:ed:95:3c:22:42:be:25:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:97:28:D2:43:F6:E9:5B:24:8E:65:06:2B:2E:FE:C4:FC:86:2E
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136342e302f32322d3232203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:66:75:3e:e7:c0:9c:b9:9b:ec:be:08:fe:ad:62:07:fb:
         df:81:2c:cb:56:f3:24:bc:fa:d7:6a:0a:c9:4f:4a:69:57:3f:
         8c:90:87:c1:76:06:a7:e4:96:fc:0b:50:41:de:c8:7f:83:b6:
         a0:3b:6d:af:79:1b:eb:03:12:ef:0a:e0:e6:dc:ab:6a:b2:00:
         98:19:ee:6b:bf:69:8b:a7:32:ae:7e:9a:db:af:17:3c:b4:4a:
         a0:a6:27:86:67:3b:16:d8:ea:b9:4d:e7:6e:14:ff:c0:ce:2e:
         60:cd:9b:f8:f6:08:27:43:06:43:99:8e:12:e1:77:58:15:a1:
         9e:d7:81:21:92:f8:93:6a:32:67:b9:ba:8a:24:f6:cc:55:ad:
         53:64:d6:4f:15:a9:8d:ac:5c:ff:30:20:45:9b:59:fb:c9:c2:
         5d:9a:ab:df:bd:03:87:8a:5f:55:c9:4c:4c:a1:6d:b8:42:71:
         07:63:b3:be:03:64:f1:48:7a:74:84:64:e2:8b:5d:d3:53:a8:
         c7:71:25:e8:e9:05:e3:93:70:ad:02:6a:5c:56:f1:00:9e:a0:
         dc:0a:bd:1e:83:d9:45:4b:05:93:85:34:b7:9f:06:cf:1e:f4:
         fc:5e:ff:23:67:53:d7:5a:e9:0c:94:47:63:68:5b:0a:dc:fc:
         f0:0d:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org