Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32332d3233203d3e20323634333638.roa
File:                     3133312e3136312e34382e302f32332d3233203d3e20323634333638.roa (raw, json)
Hash identifier:          Szpb9ymQlT4hTbAwffGIsNb561tI3cUieOepp6xP3j4=
Subject key identifier:   19:87:BF:61:2D:01:90:C3:A8:69:88:AD:5A:34:DE:91:19:B5:6C:41
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       3F6CD41A5F85D68A6614F5DB306F777559339633
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32332d3233203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6c:d4:1a:5f:85:d6:8a:66:14:f5:db:30:6f:77:75:59:33:96:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=1987BF612D0190C3A86988AD5A34DE9119B56C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:07:58:82:fe:12:ee:57:c5:ee:8a:22:2c:
                    26:47:80:c4:8f:56:3a:fb:48:c3:25:34:f9:dd:92:
                    05:8b:1c:3e:45:1c:d0:57:14:57:db:e8:9b:5d:d8:
                    30:9b:a7:63:d2:8c:ed:4a:4d:1c:55:11:9c:71:64:
                    96:32:a6:09:e6:c1:da:e8:54:2c:b0:21:20:ba:1b:
                    e4:66:c1:11:28:98:b5:09:4c:7a:6f:af:38:5d:79:
                    7b:2d:ce:c1:8a:09:76:4d:da:6b:e8:ab:e1:ae:58:
                    c4:10:57:65:42:1c:65:b9:b9:6a:1a:c1:ab:3f:1a:
                    68:66:99:81:09:a3:6f:33:53:55:f5:2c:9f:5e:01:
                    c7:b4:34:f4:91:14:43:39:38:b2:98:1d:e3:c0:dd:
                    ce:bc:67:84:f8:4e:1a:af:d0:ae:3a:30:af:32:de:
                    72:39:40:bb:a3:8a:ef:30:e2:4e:fb:2a:50:21:f3:
                    b3:4e:b6:fe:fd:67:b3:59:88:1d:b7:f5:5c:2c:ac:
                    8c:b1:e2:e5:7f:48:cc:8b:2a:2f:ed:3e:d6:bf:57:
                    78:cf:10:dd:a9:09:8d:66:c3:0c:e5:9c:90:15:1b:
                    14:a4:0f:ee:b3:36:69:91:17:02:2b:57:0a:18:d4:
                    ad:01:97:1f:29:9e:1e:a9:18:45:8b:57:96:6f:55:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:BF:61:2D:01:90:C3:A8:69:88:AD:5A:34:DE:91:19:B5:6C:41
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32332d3233203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:d7:50:99:72:08:c4:62:40:05:ff:b9:0b:42:7b:60:dc:
         9c:ba:90:13:3e:60:c5:38:2b:cd:0e:dc:5a:72:7f:6f:c6:2d:
         f6:58:e2:9d:76:f9:97:ac:11:95:e3:63:34:70:84:f4:ee:71:
         29:2e:f6:76:af:85:e1:f5:d7:7d:9e:15:16:d2:6b:8c:82:00:
         33:72:93:ea:b2:b4:74:8e:85:1b:77:0b:92:00:3a:d2:e6:e5:
         59:5a:64:f9:0a:54:2c:c3:1a:a2:58:d4:b2:bf:ae:88:0b:5e:
         de:b7:9d:c8:ab:df:f2:68:5e:5d:4d:38:32:97:44:2e:16:bb:
         51:6e:80:5e:da:ef:8e:87:46:de:fb:69:8f:01:c5:99:7c:98:
         08:97:cb:23:30:c0:60:18:b1:a6:80:d5:11:69:3b:55:2a:d2:
         10:24:c9:6f:fa:92:fe:6d:ea:9e:90:7d:8a:f5:0b:2b:f9:74:
         15:f5:6b:c7:80:da:b5:1d:d0:b2:2d:e0:b5:ba:69:92:f8:93:
         6c:94:26:87:07:d6:64:a8:13:e4:1e:da:68:32:ab:9e:49:19:
         3a:39:a4:e7:5d:02:43:cc:05:ac:a9:8c:b9:c4:f3:f1:27:6d:
         7f:35:8f:ca:9b:66:cb:95:19:03:3a:dc:8c:18:4b:9a:6d:ae:
         1c:ba:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org