Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/3133312e302e34382e302f32322d3234203d3e203631383832.roa
File:                     3133312e302e34382e302f32322d3234203d3e203631383832.roa (raw, json)
Hash identifier:          f8pRf9a5oKvFKLpz4UpmUuxOHtpDUQ8sLtQQfxX4Tl4=
Subject key identifier:   0D:47:72:83:C6:B5:74:B2:F9:59:15:85:B4:C0:B9:44:07:58:AE:C1
Certificate issuer:       /CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
Certificate serial:       61C011BCB9BC665DAB5158D8EE00851D70384939
Authority key identifier: 0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/3133312e302e34382e302f32322d3234203d3e203631383832.roa
Signing time:             Mon 08 Apr 2024 19:24:16 +0000
ROA not before:           Mon 08 Apr 2024 19:19:16 +0000
ROA not after:            Mon 07 Apr 2025 19:24:16 +0000
asID:                     61882
IP address blocks:        131.0.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c0:11:bc:b9:bc:66:5d:ab:51:58:d8:ee:00:85:1d:70:38:49:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73309BD187659C71CCBDC81E84964AD6C5AEEA
        Validity
            Not Before: Apr  8 19:19:16 2024 GMT
            Not After : Apr  7 19:24:16 2025 GMT
        Subject: CN=0D477283C6B574B2F9591585B4C0B9440758AEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:5e:93:ac:ec:99:ae:ef:12:8e:2b:4f:09:
                    c8:c7:1c:c8:e2:ca:ec:a9:d2:bf:ab:3a:a5:45:a8:
                    14:4a:2a:f3:87:04:9b:a4:d3:89:91:ad:4f:67:dc:
                    20:97:68:82:65:20:42:20:ed:ec:99:ae:70:74:16:
                    f5:bc:43:a6:11:ce:bf:d3:ca:c8:39:e5:6d:a3:36:
                    db:16:c8:7a:c9:af:bb:b5:c6:19:8b:26:84:7e:7f:
                    60:44:cd:d9:9f:b0:0b:54:6f:df:a5:70:9d:c5:15:
                    36:05:91:25:32:2f:23:12:ce:e6:6c:04:07:6b:70:
                    65:2b:24:1c:6d:5b:94:1c:05:9f:4a:1b:9f:49:6d:
                    07:ec:01:95:a8:4e:da:cc:5b:21:6d:1e:b3:23:e8:
                    35:04:3e:0c:ae:dc:e3:b8:fb:92:dc:7a:d8:91:bd:
                    4d:f3:98:a5:74:bd:8a:94:e0:5a:54:81:72:a0:e6:
                    f5:b4:f7:85:b1:a4:4c:db:3e:6e:3e:37:f5:b8:d3:
                    4f:97:5d:72:db:e7:9d:c1:6c:2d:53:8a:80:ab:57:
                    fa:c5:45:d7:1c:e6:d7:a4:6a:f7:bd:99:bd:1b:08:
                    9c:e4:aa:d2:17:41:50:44:00:33:80:12:44:02:01:
                    bf:57:72:9c:79:45:e7:64:91:42:9d:7a:62:0f:c6:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:72:83:C6:B5:74:B2:F9:59:15:85:B4:C0:B9:44:07:58:AE:C1
            X509v3 Authority Key Identifier:
                keyid:0F:73:30:9B:D1:87:65:9C:71:CC:BD:C8:1E:84:96:4A:D6:C5:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F73309BD187659C71CCBDC81E84964AD6C5AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/1/3133312e302e34382e302f32322d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:da:18:59:85:47:95:fd:e3:f5:6f:2b:8a:f2:ce:d3:d4:42:
         b6:4a:9c:bd:8e:a1:4c:e6:d4:b9:4f:76:96:34:e0:75:02:b7:
         03:56:96:ed:6f:82:81:fb:6e:f4:bf:7c:97:5a:59:a8:e0:15:
         42:9d:cf:3b:e1:c9:7b:a9:51:1f:38:43:19:b8:9a:9b:86:29:
         9c:09:9a:52:f8:25:80:f5:9f:a2:f4:5e:ea:26:02:71:74:f5:
         82:7e:44:3b:e1:4f:92:68:ef:c8:8e:2c:f7:fb:5b:33:90:88:
         41:65:d6:a7:6e:d2:26:1d:09:e4:18:cb:8a:e3:c5:12:57:42:
         93:bc:87:43:e3:1f:38:fe:7f:65:69:3d:fb:b6:f8:ed:4d:ea:
         a1:e7:8c:1a:92:27:79:25:c0:d4:5e:ad:e6:87:47:7b:74:10:
         5f:40:b6:fe:c3:4c:64:63:54:cb:89:36:78:f3:36:29:a5:98:
         ab:2d:22:fc:64:44:b1:ea:78:3d:03:96:3a:f8:8e:d8:f3:b3:
         f6:2e:57:5b:49:e3:d0:76:c7:85:84:ae:25:f4:13:1d:93:db:
         94:d9:d2:c8:24:b7:59:8f:b8:90:2d:50:4c:4e:86:b2:3b:67:
         7a:9b:72:da:d4:15:2e:84:38:57:8c:68:c4:69:77:79:ff:a9:
         11:9a:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org