Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133352e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133352e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          pzitaEsaALwGS9J7idDwB1qCfZu1bTWXLok4uCh7foQ=
Subject key identifier:   F0:C3:E9:A1:5D:6D:A7:D9:9E:E7:BB:CF:EA:B0:D6:01:86:EE:4B:BE
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       469329F75EE7E4873767D88D27490DFBC2473F7F
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133352e302f32342d3234203d3e203631363337.roa
Signing time:             Mon 05 Feb 2024 16:26:12 +0000
ROA not before:           Mon 05 Feb 2024 16:21:12 +0000
ROA not after:            Mon 03 Feb 2025 16:26:12 +0000
asID:                     61637
IP address blocks:        131.100.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:93:29:f7:5e:e7:e4:87:37:67:d8:8d:27:49:0d:fb:c2:47:3f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb  5 16:21:12 2024 GMT
            Not After : Feb  3 16:26:12 2025 GMT
        Subject: CN=F0C3E9A15D6DA7D99EE7BBCFEAB0D60186EE4BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:f4:da:dc:18:dc:ed:0e:b3:cf:9b:33:64:
                    20:92:2d:b9:77:6c:bf:0b:91:49:63:1d:9b:47:92:
                    db:6a:15:90:4a:ae:16:4b:db:5e:6f:f5:03:f0:99:
                    07:c3:89:f5:c3:bc:6d:ba:38:5e:df:95:ff:ff:72:
                    1e:54:3d:32:2c:56:14:14:34:1f:0c:88:93:96:43:
                    a4:c1:f3:48:ab:69:74:55:61:5f:fc:02:41:50:c6:
                    18:b6:e7:05:c6:67:fa:b3:49:c2:9e:e3:64:31:cd:
                    f2:23:66:c2:17:10:c0:f0:6f:f6:06:9d:f7:74:af:
                    06:c2:0f:8c:09:e0:f1:53:85:81:fd:19:c0:12:6d:
                    44:d1:cb:a8:25:d5:79:85:6c:14:1d:83:f3:8b:f8:
                    0d:bd:c1:f5:99:7d:a1:1d:cd:3a:39:da:e3:c9:7a:
                    bf:03:37:b7:9f:8f:54:2a:fb:16:6a:9e:54:70:a4:
                    52:25:f3:1e:43:db:74:6f:3d:63:94:3d:91:98:10:
                    c9:6f:47:e4:f0:9b:c3:91:e1:d8:e5:f5:02:ff:15:
                    a9:bf:36:55:51:84:f2:ac:ad:fc:0f:d0:86:66:b4:
                    e7:d6:b2:1b:8f:ff:c0:88:02:9d:c1:ce:6a:9b:ef:
                    02:c9:68:6e:b0:6a:fa:1e:ba:10:a6:10:99:89:04:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:E9:A1:5D:6D:A7:D9:9E:E7:BB:CF:EA:B0:D6:01:86:EE:4B:BE
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133352e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:64:45:2b:40:e1:b4:24:fb:c0:e9:55:6a:99:a7:f5:d8:6c:
         04:fb:b9:b5:49:a5:27:68:33:62:59:70:ad:2a:67:22:7e:72:
         80:9c:b2:95:1c:7b:22:02:d7:8a:cd:0a:ce:93:c0:38:f3:a8:
         1a:1f:17:17:dd:04:90:16:70:3b:65:3b:50:c4:f5:a7:06:fe:
         a1:a7:48:fb:4e:eb:ad:8e:e0:ee:5a:24:45:21:bc:c3:c5:50:
         f0:c1:1b:41:64:4b:7e:06:81:1d:a0:35:ce:7b:ef:6a:c1:8f:
         d0:de:b0:a2:aa:0e:ce:5f:fe:00:7d:6c:cd:03:c0:d0:d2:10:
         3e:79:bb:66:db:86:13:1b:b0:86:b5:1a:54:66:5b:e0:d3:9f:
         66:15:e8:ed:a8:8d:41:09:58:4d:45:6d:ea:55:4b:bb:af:44:
         fd:8b:59:b9:43:7d:ae:d1:51:fc:ea:7e:3c:1f:46:99:b2:77:
         13:e2:4e:72:a8:56:08:c8:9c:18:2c:b0:10:da:2e:a9:79:11:
         4d:fb:57:2c:f8:64:40:31:a6:ca:0c:c0:db:9e:27:10:b3:60:
         3c:a7:8a:1f:e1:e1:47:2b:03:cd:ef:63:4e:ff:b4:a7:f1:d7:
         75:12:c7:28:7c:01:8e:0f:0f:50:b5:07:dd:e1:91:0a:08:05:
         83:ab:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org