Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133312e302e3234302e302f32322d3234203d3e20323632333830.roa
File:                     3133312e302e3234302e302f32322d3234203d3e20323632333830.roa (raw, json)
Hash identifier:          O4h46gJYnlG1dPBbIGDUwybKy+lNNxl2hPC0EVolb+Q=
Subject key identifier:   1A:55:F2:5B:0B:79:55:01:22:C8:6D:0B:FC:74:86:8C:C8:92:16:A6
Certificate issuer:       /CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
Certificate serial:       5F79065391A7B679D1A17402AB33AB633830FE0D
Authority key identifier: 76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133312e302e3234302e302f32322d3234203d3e20323632333830.roa
Signing time:             Wed 07 Feb 2024 14:22:56 +0000
ROA not before:           Wed 07 Feb 2024 14:17:56 +0000
ROA not after:            Wed 05 Feb 2025 14:22:56 +0000
asID:                     262380
IP address blocks:        131.0.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:79:06:53:91:a7:b6:79:d1:a1:74:02:ab:33:ab:63:38:30:fe:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765FFCEF80CB3600CD0EE5D290B92746FD98A9F6
        Validity
            Not Before: Feb  7 14:17:56 2024 GMT
            Not After : Feb  5 14:22:56 2025 GMT
        Subject: CN=1A55F25B0B79550122C86D0BFC74868CC89216A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:53:67:9f:4c:dd:2f:ce:b7:16:d1:1d:a8:
                    0c:60:eb:93:3a:35:ea:25:65:c7:1b:fc:e6:3e:4d:
                    14:8d:a5:54:5d:4f:54:a7:15:9f:39:42:f3:0b:ee:
                    c1:0a:4e:19:90:2d:3c:b0:ec:6a:be:07:f5:5e:29:
                    97:89:2e:46:78:39:93:98:c1:0e:43:6e:20:ce:b1:
                    4d:84:90:82:bd:41:59:f3:6f:a3:9f:7c:96:bf:67:
                    6f:8e:44:ef:35:11:3f:38:cc:5b:9f:a4:12:c9:67:
                    d8:84:d9:60:31:10:d7:57:cd:e2:bd:44:21:00:be:
                    4d:a4:28:8c:42:ca:71:cd:e3:df:5d:4a:17:b5:57:
                    c1:8a:62:40:ad:4b:c6:3a:da:78:15:a7:be:e2:68:
                    6a:be:aa:dc:aa:5d:c1:43:86:82:de:da:a1:54:c1:
                    77:f4:c8:52:b6:a3:f8:95:49:b9:34:03:62:2c:98:
                    9b:5d:87:c4:e8:aa:4f:1d:f7:de:65:00:98:91:8b:
                    72:54:5e:e2:1f:cd:6d:01:34:d3:9d:1f:a9:a8:02:
                    12:34:8e:94:37:b7:d7:5a:6b:45:4c:83:8b:c9:d7:
                    40:15:7e:4c:b6:56:16:0c:33:46:21:30:53:29:42:
                    8b:3b:31:5f:fb:ca:46:19:59:88:6a:0d:82:00:ea:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:F2:5B:0B:79:55:01:22:C8:6D:0B:FC:74:86:8C:C8:92:16:A6
            X509v3 Authority Key Identifier:
                keyid:76:5F:FC:EF:80:CB:36:00:CD:0E:E5:D2:90:B9:27:46:FD:98:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/765FFCEF80CB3600CD0EE5D290B92746FD98A9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5bh78nWKCbsoxzYgiUXPZjTxv2QCqPerpmZ1GqrhmDqf/0/3133312e302e3234302e302f32322d3234203d3e20323632333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:33:7e:83:ff:0d:9a:5c:56:12:c1:10:a0:00:e2:c1:73:84:
         f7:d8:81:5f:4a:f3:5e:e3:ce:c1:64:d5:df:f2:9f:23:9a:2d:
         a6:05:54:4e:43:66:75:ed:04:f5:6d:bb:4c:89:c1:0c:9a:26:
         b1:8a:0a:23:dd:c6:5e:e3:d1:dc:65:13:dd:12:27:c7:6c:19:
         f6:4f:86:e6:db:b3:b4:45:3d:6e:4b:ec:f8:05:29:62:5d:88:
         28:e6:c6:37:28:c7:fd:0b:e4:ea:2f:c4:41:45:11:df:18:87:
         fb:a2:08:48:89:21:51:6a:01:d2:ff:1f:39:21:1e:09:d4:34:
         b6:f7:2d:4f:87:14:49:1b:0b:ff:38:66:e1:50:52:65:3e:18:
         ed:b3:f9:75:ba:71:e6:a0:6d:dc:5e:4f:ad:7b:51:2e:f4:1d:
         4b:3b:02:a9:d3:ba:df:b6:61:96:47:ca:a9:00:39:ac:0c:ca:
         ce:55:04:04:91:f0:75:76:a9:26:f5:e6:28:65:d7:9c:3a:37:
         f1:fc:f2:31:e6:29:f5:c2:14:7e:83:89:5f:7a:cd:d5:54:3d:
         a9:a0:04:50:24:88:d1:38:0a:75:4a:3b:95:0c:02:4a:29:1d:
         f3:e5:50:22:77:09:96:18:75:69:eb:32:ca:2c:e9:d5:c3:1f:
         91:0a:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org