Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32322d3233203d3e203532353634.roa
File:                     3133312e3136312e33362e302f32322d3233203d3e203532353634.roa (raw, json)
Hash identifier:          X2+0eRD4doY3jqfekEmbQK52JhEFi/fSCSSsuxtyxU4=
Subject key identifier:   39:14:22:75:DC:6E:56:C8:61:D6:2E:25:C5:10:09:62:78:48:D8:C2
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       386AF4105650A2EB17D5A494C2D1B5C498783B92
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32322d3233203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:42:45 +0000
ROA not before:           Tue 31 Oct 2023 20:37:45 +0000
ROA not after:            Tue 29 Oct 2024 20:42:45 +0000
asID:                     52564
IP address blocks:        131.161.36.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6a:f4:10:56:50:a2:eb:17:d5:a4:94:c2:d1:b5:c4:98:78:3b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:37:45 2023 GMT
            Not After : Oct 29 20:42:45 2024 GMT
        Subject: CN=39142275DC6E56C861D62E25C51009627848D8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:9e:07:f5:6e:85:da:6f:04:41:61:1c:bd:
                    0c:25:56:36:a7:20:67:17:00:d6:92:98:5a:ea:da:
                    83:f5:3c:3e:f1:dd:55:af:91:48:38:23:98:d5:6e:
                    b4:3e:ba:c0:3b:ad:53:f8:50:4f:f4:55:2b:b7:83:
                    0c:a4:f2:7d:d6:6b:4b:82:ec:91:da:dc:f8:5d:4d:
                    b7:82:44:55:08:9e:d8:58:9e:f4:a3:25:f0:b0:ef:
                    3f:fd:f0:56:de:32:cb:55:20:9e:80:45:14:bb:db:
                    1c:07:47:4d:8f:2f:5b:9a:ba:69:bd:ea:88:f0:d9:
                    8f:45:83:bd:6e:22:af:47:2f:8d:36:76:91:d9:13:
                    50:02:4e:db:ad:fa:63:9b:5b:14:cb:70:ee:8f:f9:
                    a6:a1:9a:4e:eb:81:e6:48:47:b4:76:b8:86:39:44:
                    14:36:bf:5e:51:27:e1:43:8c:f3:12:ec:9a:da:08:
                    b0:a4:e8:2b:ad:63:89:89:e9:5b:75:15:7b:d2:36:
                    b3:8e:9e:46:eb:e1:18:99:19:a0:48:eb:b0:98:52:
                    a2:c2:34:d3:a4:36:76:29:51:1a:7e:77:fe:57:eb:
                    95:64:cd:68:3d:bc:24:31:f5:72:d4:ee:58:ea:21:
                    7f:1b:41:02:16:ac:3e:0a:ac:5e:ac:25:22:96:7d:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:22:75:DC:6E:56:C8:61:D6:2E:25:C5:10:09:62:78:48:D8:C2
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33362e302f32322d3233203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:42:5a:03:65:87:63:47:0d:a8:e8:d3:82:1e:bd:30:c7:
         b4:2a:77:5e:2c:81:fa:9f:34:83:ea:b0:54:67:54:f8:8a:d3:
         bb:64:d8:82:97:fc:95:0d:a5:ac:c0:92:6f:0b:9b:d2:c8:32:
         f4:13:23:ae:d3:d4:33:42:5f:e1:fb:5a:ed:89:5e:08:f1:fd:
         35:20:3f:9d:60:e9:f5:45:69:9c:c2:b7:73:84:1b:81:3f:06:
         b6:b1:1a:1b:2c:58:1a:9b:ef:7f:95:bf:4e:6c:e7:32:05:6f:
         89:99:43:4b:dd:79:12:b4:23:9a:5c:9d:d7:33:77:19:74:66:
         68:77:6f:61:eb:4e:49:ef:b4:0c:06:69:95:82:af:c1:ba:2b:
         d0:9f:ee:69:fc:43:ef:48:b2:27:da:df:d7:fd:4c:c2:ce:cf:
         71:75:93:65:73:ef:49:8b:b8:7a:61:43:9e:6d:96:1c:5c:ce:
         48:32:86:ce:d4:6b:97:dd:2c:f1:61:43:04:0f:05:9c:e9:e8:
         30:a4:c0:51:99:3f:a3:2b:c5:77:b7:01:d7:b7:7c:55:19:71:
         b8:f6:8f:20:0b:9e:82:c4:69:7a:bf:8e:e1:92:5f:e1:67:55:
         2f:99:e7:8f:4b:6c:8b:16:96:88:7a:0f:58:c2:df:00:ac:ba:
         f9:2f:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org