Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa
File:                     3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa (raw, json)
Hash identifier:          rbYB6+Fja7zCczBLOhp1vzXM/3WKvhkRr5tcOTuRyOk=
Subject key identifier:   E0:15:9F:B8:33:64:84:A3:E3:F6:AE:73:25:5F:FF:CF:18:E8:76:69
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       20E85ED3BC84BD4A2BE01C07F3FB47EB931F2210
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:11 +0000
ROA not before:           Wed 02 Aug 2023 13:50:11 +0000
ROA not after:            Wed 31 Jul 2024 13:55:11 +0000
asID:                     61639
IP address blocks:        131.100.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:5e:d3:bc:84:bd:4a:2b:e0:1c:07:f3:fb:47:eb:93:1f:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:11 2023 GMT
            Not After : Jul 31 13:55:11 2024 GMT
        Subject: CN=E0159FB8336484A3E3F6AE73255FFFCF18E87669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:76:df:e0:af:1f:3a:a4:20:6e:55:7e:3b:
                    4e:89:69:45:f7:85:39:d3:bf:f9:66:1b:f7:6c:c3:
                    e3:08:b2:ca:3d:68:48:62:e5:dc:74:67:23:e5:7b:
                    f0:bb:6c:fc:8c:ef:bf:9f:7c:65:53:f2:ef:20:18:
                    80:64:36:bf:2a:d0:07:27:52:96:dd:40:3a:79:e5:
                    17:19:4e:13:92:8e:a8:d9:c6:e1:f5:ac:65:c6:51:
                    26:93:7d:ad:0b:e3:52:9e:16:6f:18:74:02:2f:57:
                    c5:39:59:f2:70:b5:b9:b2:2f:26:3e:9f:e5:72:e5:
                    17:84:cd:d5:92:b7:7c:24:f6:ab:66:45:f2:57:e9:
                    99:72:0d:34:3a:c7:75:2f:bc:52:d6:00:16:a9:22:
                    f2:ba:2a:ba:19:0f:e6:b7:37:32:64:f2:7b:65:b9:
                    7c:bd:70:d4:45:f4:92:af:3b:7c:a3:0b:9b:80:01:
                    c5:be:86:87:c1:2e:f6:6e:30:07:9a:73:90:80:8b:
                    85:8b:07:d1:38:1f:55:54:5e:64:e6:d2:83:2a:e8:
                    d1:00:f5:5f:63:b7:cb:22:d4:bb:5e:93:4f:a6:52:
                    51:c3:8e:f2:1c:f0:92:6a:07:1f:22:d6:8a:46:d4:
                    9a:d8:1c:18:e6:b9:c1:11:6d:80:6e:09:75:0c:b9:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:9F:B8:33:64:84:A3:E3:F6:AE:73:25:5F:FF:CF:18:E8:76:69
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32322d3232203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:77:f0:31:ab:6b:cf:94:08:d7:f0:cc:24:c5:fd:29:8f:
         09:2b:36:08:12:7e:0e:aa:aa:9a:89:10:ac:12:88:a0:58:99:
         b3:b8:87:70:c4:05:c4:dd:21:45:f4:4a:54:48:13:e1:00:2b:
         18:7a:09:30:73:27:15:68:fe:02:a4:2c:31:26:68:c9:66:8e:
         2a:b1:30:44:1e:f7:36:86:2e:ec:ff:bb:10:b2:d9:eb:90:6d:
         e1:76:62:69:9c:46:99:88:ad:ab:ae:95:6b:59:3b:59:e7:cd:
         1f:b5:70:6d:e1:51:dc:cb:a1:2d:67:a5:82:55:bf:ad:7b:ee:
         ba:cd:b1:1a:01:f5:93:d9:50:4a:60:dd:94:83:30:92:77:f1:
         25:1a:24:45:15:05:12:0a:84:2f:0a:72:d6:fc:c5:e5:f6:b4:
         0c:cc:9a:09:d8:10:c2:aa:e9:c0:3b:19:2f:66:19:a9:0d:9d:
         15:2a:e7:9a:79:94:bb:06:35:30:cc:72:e6:ca:a2:aa:60:8f:
         ce:83:1f:24:40:8c:7d:0c:88:25:87:52:0c:fd:6f:3b:ae:11:
         a9:3b:68:3e:4d:eb:1d:31:8f:9f:cc:96:06:9d:9a:28:56:5b:
         76:64:81:c1:06:2b:e1:1c:12:18:6d:6f:98:83:04:40:0f:87:
         28:6d:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org