Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33372e302f32342d3234203d3e203532353634.roa
File:                     3133312e3136312e33372e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          CJNzexsD9TiZVJs17C095Jze5dl8Qn1J4iEEnHHqHd4=
Subject key identifier:   90:65:CB:C1:72:34:3D:4D:65:4F:2F:D4:78:01:4B:14:21:0E:96:AC
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       2238048A9DFBA62B77D74E4DFCEBD95F932B9EFE
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33372e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:17 +0000
ROA not before:           Tue 31 Oct 2023 20:27:17 +0000
ROA not after:            Tue 29 Oct 2024 20:32:17 +0000
asID:                     52564
IP address blocks:        131.161.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:04:8a:9d:fb:a6:2b:77:d7:4e:4d:fc:eb:d9:5f:93:2b:9e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:17 2023 GMT
            Not After : Oct 29 20:32:17 2024 GMT
        Subject: CN=9065CBC172343D4D654F2FD478014B14210E96AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:c6:24:20:53:0f:5f:0a:a5:70:02:db:07:
                    86:62:f4:52:14:55:ed:33:d8:1c:50:b4:cf:ee:8a:
                    05:c6:89:fe:52:a0:f7:9d:69:ac:7a:71:70:36:13:
                    c2:78:12:33:fa:25:1e:f4:2b:1c:af:92:cd:a8:14:
                    08:d7:d7:6b:ef:98:e2:22:55:57:85:88:43:0d:67:
                    27:69:b7:72:c1:e9:d7:72:68:5d:42:35:9f:48:ed:
                    56:21:db:f8:bd:cb:d8:96:1a:fe:57:c7:30:bc:16:
                    60:16:ad:75:d4:dc:77:fb:11:ec:c6:91:4d:37:fd:
                    f6:a9:f7:2f:05:ab:cb:35:19:ff:b6:22:01:09:e5:
                    d1:fb:38:8e:4b:6a:f7:cb:2b:58:e2:00:34:1e:b1:
                    0f:be:37:33:9d:dc:d7:5f:e9:0b:7d:4b:aa:26:de:
                    8b:54:f6:9f:51:c3:7b:4f:7e:ac:2e:fd:17:32:a2:
                    b4:4b:45:0f:b5:ad:fc:f6:71:61:45:6b:6d:99:29:
                    e8:60:75:7a:9c:b0:00:af:3e:03:20:0a:dd:dc:dc:
                    56:ea:51:63:b0:ae:72:f8:fd:c1:7e:9e:02:fa:cf:
                    ea:ad:fd:36:20:35:ad:9b:6e:73:d9:72:7c:0d:80:
                    e8:c3:39:00:5f:cd:10:d7:8f:00:a6:a0:81:79:d9:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:CB:C1:72:34:3D:4D:65:4F:2F:D4:78:01:4B:14:21:0E:96:AC
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33372e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:f7:64:08:23:02:94:66:ab:3b:cc:95:e4:fb:91:0e:54:
         c7:8e:67:38:2b:b9:4c:63:69:44:e4:a2:07:19:14:7a:ae:38:
         ea:c2:d3:44:c9:0f:2d:eb:57:dc:ce:93:70:18:b3:16:04:a4:
         2f:75:27:8d:91:bf:3c:fd:b8:40:31:49:3c:1d:d2:c4:7c:06:
         57:5a:9c:c6:81:53:ed:23:aa:15:d5:98:30:f7:2e:6e:5b:17:
         63:51:df:06:3c:db:57:f9:d1:6b:61:ab:6a:f1:fe:f0:f3:e7:
         72:74:e1:0b:34:47:57:63:98:da:68:ab:df:50:88:3f:39:3f:
         c1:96:62:b9:4f:14:41:0e:48:b9:3e:b4:04:ce:92:be:8c:d8:
         af:fb:60:de:ac:bf:cd:99:5e:e8:b4:35:d2:7e:e5:58:23:32:
         a4:86:8b:32:f4:20:8e:8a:3e:7a:37:09:f1:8e:06:69:24:07:
         01:0b:f4:96:8c:0c:f9:00:ae:ba:f8:93:74:17:32:79:7f:37:
         7f:68:33:2d:0c:ce:57:00:0f:36:1e:18:bb:57:f1:e1:f4:4c:
         f6:56:78:99:e3:32:42:93:81:fd:2d:22:71:3b:6c:1c:fc:8b:
         64:78:a7:61:1e:2f:83:c3:73:03:89:1c:48:ac:99:8d:d3:d5:
         5e:5f:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org