Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa
File:                     3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          9+8TzG88jRZot7YZ6DMDP7R6CJUl55wYOHGY9MQPtQU=
Subject key identifier:   25:93:81:85:61:71:9A:2D:A6:34:FF:51:2C:34:9A:D8:DB:02:C0:E3
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       70218223D86AD49BCC8C3B588BC0D782C665B85F
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        131.108.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:82:23:d8:6a:d4:9b:cc:8c:3b:58:8b:c0:d7:82:c6:65:b8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=2593818561719A2DA634FF512C349AD8DB02C0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8f:62:b2:61:5d:fa:28:89:cc:00:33:93:a1:
                    ec:42:ee:f0:68:5b:00:88:17:cf:95:37:0c:76:bc:
                    2e:1d:b8:e2:6e:0f:ed:ea:82:e1:90:b0:19:cb:7e:
                    5a:80:51:90:18:34:bd:a8:fe:df:90:c9:25:dc:14:
                    ff:45:99:cb:14:a5:e0:49:dd:92:27:2a:03:a3:13:
                    1b:40:02:7d:4a:91:97:40:c3:c2:87:1e:9c:da:69:
                    27:82:bf:d1:c6:7b:83:26:72:53:27:e1:f6:77:46:
                    e3:d9:1c:e3:23:04:10:fd:b5:d0:1f:84:9f:b1:f8:
                    05:7d:62:43:81:c7:0c:21:7b:fb:6a:c8:38:be:f2:
                    9b:9a:75:20:5b:2c:be:dc:7a:9e:c3:44:05:5d:d0:
                    ad:2f:8d:50:b5:e5:d0:bd:62:58:aa:8f:1c:2a:a3:
                    bf:4d:a3:e3:6b:68:8c:a8:b1:fd:7b:f5:a7:5b:e2:
                    59:5d:00:98:ae:b4:13:95:cc:e8:7b:1d:b2:27:a4:
                    ea:b2:fb:74:a6:ec:47:bf:19:20:7e:1f:fe:61:44:
                    56:0b:0a:c3:a2:50:a0:49:fa:13:07:62:49:9d:4e:
                    7c:80:2b:b2:6b:66:91:15:42:ab:f9:bb:63:9d:eb:
                    7b:41:52:bb:0f:de:94:66:b3:40:ab:5f:2d:fe:e9:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:81:85:61:71:9A:2D:A6:34:FF:51:2C:34:9A:D8:DB:02:C0:E3
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:9e:4c:1e:45:87:df:ab:4b:62:cd:ba:40:90:54:81:47:
         d9:a6:c3:27:e3:8c:25:87:66:80:41:33:bd:5f:1f:6a:e7:a7:
         26:f6:d9:73:eb:e8:7b:f1:cc:af:74:57:1b:e6:8f:04:d1:23:
         28:b0:62:7f:27:30:7f:1e:47:2c:c2:57:89:c2:a5:aa:cf:c5:
         85:a0:58:0b:87:17:23:d6:8c:87:60:b5:e6:38:0e:70:28:0a:
         ed:0e:b4:59:bb:88:7c:33:be:37:a8:11:13:ea:b3:67:54:99:
         1c:43:9d:13:70:09:8b:e1:63:d8:19:fa:82:63:38:ea:d2:eb:
         19:51:c5:6b:ad:c9:84:27:6c:a0:7f:ad:57:16:c9:7e:ef:ee:
         80:04:4a:fd:e7:da:fa:0e:d2:7f:39:cf:97:cd:dc:3c:31:6c:
         d5:96:10:c8:a0:b4:32:9e:f2:e9:c5:98:9d:2d:da:7f:12:f4:
         ac:e8:32:78:e7:cf:a5:c1:8c:06:c6:25:4c:f0:fd:af:a4:78:
         92:d2:43:85:20:c3:5a:c9:b5:35:4d:33:a9:90:7f:fb:04:c1:
         53:95:be:d6:69:2f:ae:c7:09:54:dc:5a:36:00:7b:9b:09:2c:
         61:eb:51:e5:ae:e2:d9:75:61:24:cc:cc:44:4f:ba:32:99:65:
         e8:99:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org