Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136342e302f32332d3233203d3e203631363738.roa
File:                     3133312e3130382e3136342e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          ODmFnr+R31X11Nex7tMi67Aws4sTMAyw7226IUGDnGU=
Subject key identifier:   3D:B0:42:35:32:82:3C:F2:5A:3E:29:1E:34:5F:AB:01:08:49:3B:94
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       52669E426188109324660DD06191EB9D32227731
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136342e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        131.108.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:66:9e:42:61:88:10:93:24:66:0d:d0:61:91:eb:9d:32:22:77:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=3DB0423532823CF25A3E291E345FAB0108493B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:ed:a6:7f:81:15:56:ed:52:49:7a:ec:01:
                    42:06:6c:2d:3d:5a:2b:f2:38:46:11:fe:f3:ba:7e:
                    a4:c9:c2:2a:47:15:31:fe:52:29:32:ec:21:fb:18:
                    b5:6b:1a:ba:62:49:83:b8:ff:11:b3:7a:d6:89:e7:
                    ea:ed:7a:db:96:9f:aa:41:fa:00:76:80:e3:4d:7c:
                    a9:43:83:81:67:54:4d:41:a8:59:b3:4e:f0:5d:94:
                    86:a3:90:fd:af:3c:df:40:09:89:d5:b9:b3:96:0d:
                    ce:56:46:7f:f3:77:96:95:a3:5d:fb:b2:25:79:d8:
                    0f:4b:93:dd:da:4d:f1:75:47:82:4d:28:71:5f:8c:
                    3f:49:b3:95:58:2b:ae:f2:ce:cc:4c:84:53:eb:95:
                    a9:3b:c8:21:72:77:47:35:83:c8:b6:4e:8b:7d:13:
                    20:90:2c:e6:b1:94:71:9f:3d:d2:f0:f6:9d:a1:a3:
                    8d:82:bc:e2:09:98:b9:f9:7f:43:30:d5:01:3f:57:
                    d1:25:27:59:f2:0d:b8:be:a3:20:26:22:1d:30:45:
                    d4:21:98:4b:3b:be:8e:83:f1:7d:14:7e:74:5a:ca:
                    7a:af:b0:b6:1e:44:b5:ab:6d:41:14:28:4d:de:17:
                    ba:7e:27:9c:84:78:f1:aa:f1:6a:0c:44:53:8c:c4:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B0:42:35:32:82:3C:F2:5A:3E:29:1E:34:5F:AB:01:08:49:3B:94
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136342e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:76:2e:67:91:73:c3:d8:8c:fa:48:ff:1f:3e:72:53:ed:7a:
         4a:51:c2:5e:4c:17:07:5e:6d:8d:88:de:0b:42:9e:21:c1:ce:
         0e:0f:f1:0c:3c:a2:e5:cc:3d:5b:81:87:93:3c:37:f4:f2:b2:
         03:5f:3b:3c:52:1c:f1:a0:ce:2d:85:bf:bf:7e:c9:a3:d4:96:
         9c:ff:b4:fb:05:ef:9d:0a:39:7b:34:02:dd:6c:c5:8c:15:04:
         f4:f8:b1:03:d7:07:ab:67:a4:b9:db:cc:d1:4b:76:b2:4c:d9:
         a3:89:7a:9a:d2:36:ee:03:01:e6:c5:ee:af:1c:4a:7d:b9:a3:
         4d:f8:29:58:8f:8d:33:7d:16:c9:95:b6:6b:f3:15:42:69:24:
         bc:e8:52:83:f6:f8:d0:c2:63:ca:97:ab:0d:50:d7:03:33:65:
         b5:c1:66:97:c0:8a:d9:51:c3:6c:6b:2c:42:18:ad:40:6b:ea:
         d0:da:79:cc:f2:08:e5:b5:4a:d8:36:e1:fe:5a:6c:29:0c:dc:
         89:74:5d:60:2a:70:b6:a9:ae:8e:9e:1f:82:9a:f9:f6:80:04:
         fe:1f:d5:16:00:d7:2b:e6:b5:dc:44:c6:81:fd:70:5e:35:fd:
         54:04:9b:86:dc:9a:b7:74:12:39:2e:5a:00:91:61:53:ef:87:
         af:50:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:06 2024 by rpki-client on console-fra.rpki-client.org