Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e33312e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e33312e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          j9fFHtApkD4z2VJdDf+6onol6AoyIWVmrSeVaBHmsUE=
Subject key identifier:   C5:37:12:38:56:87:EF:06:54:94:A0:BF:5A:C4:93:B0:08:39:FC:B8
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       5C14AB6A3E725E61E54CE15F7662AA34A0B23147
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e33312e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:16:02 +0000
ROA not before:           Mon 31 Jul 2023 18:11:02 +0000
ROA not after:            Mon 29 Jul 2024 18:16:02 +0000
asID:                     28139
IP address blocks:        187.49.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:ab:6a:3e:72:5e:61:e5:4c:e1:5f:76:62:aa:34:a0:b2:31:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:11:02 2023 GMT
            Not After : Jul 29 18:16:02 2024 GMT
        Subject: CN=C53712385687EF065494A0BF5AC493B00839FCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:d9:7e:d6:47:26:de:7c:83:51:f6:ac:71:
                    47:b0:a7:77:54:80:6e:4e:73:3e:05:50:7b:d5:60:
                    89:f2:92:83:da:6a:58:02:de:ab:4e:f3:54:4a:9c:
                    80:e0:29:48:c9:f0:12:e6:43:d9:ab:19:29:d0:2e:
                    8c:a2:ab:5c:0b:31:51:33:66:e5:64:5e:db:a0:6b:
                    c5:87:55:35:84:4c:0a:16:cb:d5:9c:8d:65:90:d0:
                    fd:48:f4:a0:0d:e7:11:f2:38:b2:7f:5d:59:fd:e8:
                    ba:62:f8:ed:35:c2:06:ff:0e:77:30:21:55:69:14:
                    ab:71:c8:3d:1d:50:21:97:fd:22:05:6a:4f:5b:b1:
                    27:34:77:70:01:36:76:33:e9:e5:7d:12:a6:26:cf:
                    92:4c:d0:58:a8:94:61:30:b4:a7:63:16:8e:7c:82:
                    c4:8f:81:b2:7e:da:79:6b:53:76:12:08:ee:2a:3f:
                    5e:39:7c:e9:df:88:4b:45:4c:b6:51:ad:77:1d:20:
                    3c:2b:96:01:ec:76:f5:2c:db:c0:97:68:16:98:11:
                    fe:92:02:c4:d6:d1:bf:8f:47:b4:b2:f9:5e:80:43:
                    d3:7c:66:9b:fd:cd:1a:54:5f:fc:1d:44:9c:f6:3a:
                    31:58:3b:84:e7:23:53:84:38:e5:d0:03:9a:c1:5b:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:12:38:56:87:EF:06:54:94:A0:BF:5A:C4:93:B0:08:39:FC:B8
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e33312e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:e1:1d:85:e8:74:8f:2f:02:0d:ef:96:a8:57:f8:61:fe:
         ee:b7:56:f6:aa:3e:a6:bd:f9:f8:f2:ab:a6:18:f0:ad:c7:48:
         ec:f7:e3:02:2f:fe:7f:29:61:a4:6e:d7:99:58:c6:5e:76:4e:
         64:05:fc:80:2d:6b:aa:8e:a6:63:52:bd:2d:99:f6:87:47:e0:
         3a:81:06:eb:59:10:1e:44:dc:5c:78:87:a4:64:fa:04:85:05:
         a6:41:6c:84:37:7d:72:b3:4b:c5:54:28:bb:cc:05:e5:e1:40:
         54:da:df:dd:cb:17:71:3e:c9:94:50:d9:e5:e1:3b:72:96:4a:
         93:b6:fa:2c:98:ef:8e:8a:30:99:68:12:f8:1d:eb:eb:cd:58:
         49:81:ec:ef:3d:b7:70:6f:27:8e:ad:da:00:c7:c3:33:1b:37:
         8f:8b:60:f9:e1:06:9b:5e:36:80:46:92:f2:0d:df:20:38:da:
         09:a2:3d:c2:6c:09:4e:b4:98:86:6f:3d:95:5f:e0:cb:61:c3:
         01:77:e7:c7:b7:70:27:57:99:33:cc:9e:c0:87:3a:86:c7:7c:
         1a:d1:7e:cd:c5:c5:b5:99:a4:ef:6d:d5:ce:73:d3:2a:19:80:
         c9:23:64:d9:c1:85:d2:b3:9a:3c:1d:5d:b4:d4:c7:d5:94:3c:
         6d:c4:94:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org