Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa
File:                     3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier:          66i1Lk1RGWoNZb2hKTKEuxP3J2SosJ2Z8p4iPolx+A4=
Subject key identifier:   BD:AB:A1:12:D8:1E:E3:34:C1:E1:FA:B3:B1:0A:E0:B2:36:F2:D0:89
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       785440E83599E2ADFA026F56E170679C144155E4
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:10 +0000
ROA not before:           Wed 02 Aug 2023 13:50:10 +0000
ROA not after:            Wed 31 Jul 2024 13:55:10 +0000
asID:                     61639
IP address blocks:        131.100.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:54:40:e8:35:99:e2:ad:fa:02:6f:56:e1:70:67:9c:14:41:55:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:10 2023 GMT
            Not After : Jul 31 13:55:10 2024 GMT
        Subject: CN=BDABA112D81EE334C1E1FAB3B10AE0B236F2D089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:4a:fc:bf:69:c4:1c:c2:7a:d5:c8:ac:ca:
                    02:ea:cb:08:b5:85:d7:55:18:09:69:7e:34:cd:7a:
                    e9:2c:32:b0:51:c8:8c:00:66:4d:c1:84:09:f1:f0:
                    f8:d2:91:2d:a1:f2:48:03:4b:0d:20:fe:84:6a:c0:
                    39:b7:09:29:2d:01:50:30:8d:02:2a:c4:13:ab:56:
                    ac:f7:b9:5c:ba:03:e1:7f:01:a0:ed:d9:11:d8:ab:
                    a4:4e:a4:b9:3c:a0:44:94:1f:90:7d:a0:28:6d:50:
                    dc:2f:67:ff:0b:9f:3a:d0:3a:dc:16:43:92:b1:10:
                    7b:05:b4:eb:69:34:9a:ba:eb:ac:12:e4:e2:b8:68:
                    ac:7d:e9:a7:21:37:ea:30:1a:14:78:a5:9c:22:17:
                    a7:ca:80:df:1f:ae:48:54:43:f6:2c:4d:3e:a6:6c:
                    d4:36:77:f0:a5:6f:06:25:d6:ba:d3:da:5a:57:6c:
                    39:0f:14:8a:91:ae:5b:aa:61:2f:46:c3:a3:8c:fa:
                    ed:60:28:c8:b6:45:73:67:58:94:f7:7c:e2:3a:a8:
                    54:d9:92:e8:80:b2:8b:bc:3f:35:0e:87:83:3d:f5:
                    d6:3f:a0:a7:2b:de:33:78:28:90:c6:bf:cf:3e:ff:
                    a8:a9:1a:f9:a8:b3:da:5e:03:70:af:af:3a:a6:77:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AB:A1:12:D8:1E:E3:34:C1:E1:FA:B3:B1:0A:E0:B2:36:F2:D0:89
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:4e:ee:63:4b:6f:0f:d6:04:8c:fd:68:8d:1d:54:5d:7a:
         ac:c2:3c:4b:d5:4e:d6:fe:bf:be:46:e4:b7:fb:cf:09:7d:ea:
         4d:1d:8b:88:b7:c8:26:ee:dd:56:3f:69:ef:ce:42:6c:a9:4c:
         6e:ed:af:99:ca:dd:2a:c8:5b:c3:fa:3d:8f:ed:bd:b9:25:cb:
         ff:9b:ed:7b:2b:bb:e7:69:e6:bb:b2:4e:75:88:86:9b:4c:06:
         6d:fa:17:e1:b7:e3:27:8b:38:0e:25:76:b1:f5:b4:d1:b1:b9:
         71:de:84:40:77:a1:a0:9f:7a:ae:62:fe:ea:90:9e:bf:59:65:
         d4:9b:cb:42:21:86:3b:dc:8f:50:96:fe:d0:c8:f5:69:6e:71:
         ed:a0:ce:42:48:83:48:14:1c:09:0c:01:e5:89:76:10:b2:84:
         22:ba:99:8f:39:20:52:9a:fc:24:1a:18:cf:d4:ff:7a:8d:fd:
         c8:83:ac:67:10:e1:c2:0b:4a:98:5f:94:f4:03:73:4f:b8:16:
         bc:4e:d1:29:4a:9c:b4:2b:e6:1a:60:f4:73:94:69:e0:cc:17:
         9e:bc:e5:a6:5e:6a:91:aa:98:21:f3:a3:7e:fc:17:44:f1:ba:
         20:0a:e4:3a:84:1b:27:b4:b0:4f:fb:da:08:47:db:b0:84:4d:
         f1:90:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org