Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33382e302f32342d3234203d3e203532353634.roa
File:                     3133312e3136312e33382e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          0vLguC1g7e5IXXPgZTV1aDX67loRkD/kDhtm4HJDqFA=
Subject key identifier:   23:49:43:72:FF:95:6E:E5:A9:0C:4A:29:FD:48:D0:18:72:B9:FF:D0
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       5F943AA5812E72AE68C58552F71EA6BDE1633578
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33382e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:18 +0000
ROA not before:           Tue 31 Oct 2023 20:27:18 +0000
ROA not after:            Tue 29 Oct 2024 20:32:18 +0000
asID:                     52564
IP address blocks:        131.161.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:94:3a:a5:81:2e:72:ae:68:c5:85:52:f7:1e:a6:bd:e1:63:35:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:18 2023 GMT
            Not After : Oct 29 20:32:18 2024 GMT
        Subject: CN=23494372FF956EE5A90C4A29FD48D01872B9FFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:15:20:2a:77:2a:17:8d:17:79:c0:e3:d5:
                    22:08:6e:2a:ee:99:e4:30:b2:c4:06:89:e7:d1:66:
                    7b:4c:d5:4e:28:91:e7:02:d0:06:d9:60:60:5d:34:
                    c5:3b:ce:b7:1c:1a:13:0b:b5:6c:5c:fa:fd:1d:c0:
                    20:f8:9d:e9:39:93:cb:bd:29:c6:79:cc:39:b0:51:
                    46:21:72:d7:60:1d:95:f4:42:77:c2:c9:3a:6c:f8:
                    bb:78:42:ba:70:ae:7b:74:79:57:92:d2:2c:5f:cd:
                    4d:c7:7c:a8:0a:3a:bf:ec:b7:d4:04:ba:3c:ab:68:
                    a5:3a:73:ef:eb:60:10:55:b2:63:41:8a:bd:2a:42:
                    3a:b0:3d:d3:21:ca:cf:43:f2:98:e7:37:2e:cd:79:
                    21:7a:df:9e:ce:c9:2a:94:28:53:f2:bb:b9:be:0d:
                    39:56:69:a2:08:86:0e:25:30:27:06:b4:66:6f:c3:
                    f9:27:d1:a8:a0:dd:71:a9:d8:2a:27:35:8a:81:eb:
                    dc:8a:2d:17:63:13:10:6a:65:76:cd:f0:f9:d5:77:
                    af:c5:09:44:03:56:6c:52:a9:38:8c:44:a9:cc:a1:
                    a7:d7:0b:2e:8e:fc:75:4f:5d:6c:68:93:5a:b2:64:
                    35:00:6b:90:a1:bb:e3:8d:8c:50:9d:fa:1c:fa:1e:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:49:43:72:FF:95:6E:E5:A9:0C:4A:29:FD:48:D0:18:72:B9:FF:D0
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133312e3136312e33382e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:99:74:24:e0:2e:09:3d:65:1e:7f:ea:5d:84:23:a0:9c:0a:
         60:de:d0:58:35:ea:96:90:25:38:d0:6e:55:4a:64:c4:ce:12:
         f2:fa:dd:e0:42:aa:c4:34:d5:3d:e8:61:ee:6a:94:ee:94:8b:
         4c:c6:c0:50:0a:74:d9:ae:6c:01:8f:aa:9c:0a:af:41:b5:5e:
         8a:4e:0f:c5:d6:ac:ac:8b:8f:55:e0:b1:7f:6d:be:72:cd:64:
         4b:d4:4f:80:eb:4a:a1:c2:58:e3:cc:40:2a:98:19:b8:c2:35:
         06:ac:ea:2c:8f:96:78:33:3c:e7:5c:bc:bc:ba:60:22:0e:64:
         5e:1c:82:a9:d9:e1:5f:31:12:b7:9f:de:7a:1d:eb:35:1b:0a:
         39:78:6e:d9:1b:f9:12:ff:cb:5c:f8:ea:d4:10:7f:e3:86:9b:
         69:5a:b6:1a:9e:5a:0e:a5:c5:4d:51:d9:7e:e8:02:b9:11:ff:
         18:e0:35:59:d9:b9:c6:a5:87:40:91:44:f8:bf:71:a2:19:27:
         e4:5e:b3:c1:a3:ab:68:40:93:d9:ca:03:f2:b7:9c:9d:f6:b8:
         59:e8:bc:a5:4c:a7:ab:2f:a5:3c:85:34:63:ba:76:15:d4:ff:
         7b:0c:2a:ba:bf:cc:1f:91:00:f6:a6:26:81:13:a2:ce:eb:41:
         dd:ad:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org