Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3332203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32332d3332203d3e20323636343333.roa (raw, json)
Hash identifier:          dbB0PR4zwcGgyuQLm8JC5K0hsST5sF9zhLxFbbWic1E=
Subject key identifier:   CD:78:E8:EB:11:E3:1A:BD:17:10:C9:B7:3B:35:30:3F:66:C9:46:A5
Certificate issuer:       /CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
Certificate serial:       601C3807EA05C9BB5DC674692C6ED7B14FA8BA04
Authority key identifier: C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3332203d3e20323636343333.roa
Signing time:             Thu 04 Jul 2024 22:04:02 +0000
ROA not before:           Thu 04 Jul 2024 21:59:02 +0000
ROA not after:            Thu 03 Jul 2025 22:04:02 +0000
asID:                     266433
IP address blocks:        131.108.252.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1c:38:07:ea:05:c9:bb:5d:c6:74:69:2c:6e:d7:b1:4f:a8:ba:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFF141530D91097156CCAECCDD429D2C9F5738
        Validity
            Not Before: Jul  4 21:59:02 2024 GMT
            Not After : Jul  3 22:04:02 2025 GMT
        Subject: CN=CD78E8EB11E31ABD1710C9B73B35303F66C946A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a2:02:87:07:83:7d:7d:52:2b:9a:84:61:15:
                    de:9f:71:4f:95:e6:da:df:70:86:0a:49:c5:c7:8d:
                    b7:c7:a5:9b:ac:51:55:94:1b:1b:be:a3:62:b5:d9:
                    f8:b5:1f:82:e3:c7:e6:41:68:f0:7b:c6:96:58:97:
                    30:df:8c:6f:f5:db:1a:44:5f:cf:94:b0:6c:8c:d8:
                    ef:bf:e8:a3:8f:11:a2:fe:f5:21:e3:62:1e:8c:0b:
                    01:45:77:1e:02:e6:90:ca:af:1f:20:d0:32:d1:50:
                    99:22:e2:ab:0e:37:92:ef:02:d0:bd:14:ce:77:ff:
                    af:7b:da:c3:71:fa:c1:11:b0:9b:61:70:7b:41:81:
                    e5:b6:44:59:68:cd:0d:16:81:71:9a:ce:fd:58:69:
                    98:29:6a:a9:e9:50:15:4d:05:c5:28:09:34:d5:22:
                    ff:70:8c:0f:e1:fd:66:77:c0:f9:b2:28:b7:5f:a0:
                    7b:b8:0b:fa:95:f6:cc:78:ea:45:d1:f5:90:19:fd:
                    d6:56:0b:0b:3d:18:e0:66:9b:6a:e1:a0:69:eb:5c:
                    29:67:e4:b4:76:ac:c7:8e:9e:52:45:7c:6b:13:41:
                    d5:1c:b6:07:01:8f:3e:df:93:44:70:f7:f4:4b:26:
                    e4:09:49:c7:d7:9f:d7:f6:1a:39:f3:91:6c:08:8c:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:E8:EB:11:E3:1A:BD:17:10:C9:B7:3B:35:30:3F:66:C9:46:A5
            X509v3 Authority Key Identifier:
                keyid:C3:AF:F1:41:53:0D:91:09:71:56:CC:AE:CC:DD:42:9D:2C:9F:57:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/C3AFF141530D91097156CCAECCDD429D2C9F5738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3AFF141530D91097156CCAECCDD429D2C9F5738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32332d3332203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:f6:56:ee:35:a3:b8:ce:d7:2f:e4:0e:dc:89:f5:a4:56:93:
         d7:60:71:72:82:88:f9:88:02:a9:b8:07:94:7e:8b:36:d9:d4:
         6c:60:6c:2d:78:2c:b3:c6:2a:9a:cc:5d:42:f6:e3:43:b3:52:
         8d:64:c3:bd:c7:32:a5:90:86:f9:42:d8:53:63:51:41:58:1e:
         2f:70:69:83:47:9a:f6:0a:73:7a:56:ea:6b:60:e6:47:d4:38:
         19:09:09:c1:bb:49:78:90:db:48:e7:34:2f:d6:b6:04:1a:a7:
         8a:c6:e7:c9:9a:7d:ff:2a:5e:49:86:c9:79:77:0d:f0:2b:a3:
         1e:c9:2c:bb:c7:f6:eb:08:b0:fe:04:f8:59:07:f3:cc:2b:99:
         17:a6:83:ae:f3:6f:f3:75:cf:51:54:b7:a6:c5:a9:46:0f:10:
         a6:bc:5e:fc:a3:6e:d3:f5:0f:00:64:ed:c4:b1:67:75:c8:95:
         77:54:e6:52:fd:53:3f:ab:c1:25:96:17:27:ba:fa:94:99:ce:
         32:0c:d9:fa:96:b0:6e:d0:a2:84:1d:f0:89:b0:25:10:a5:de:
         6f:60:a1:1a:98:c4:ce:dd:d1:6f:52:08:e1:00:b2:29:45:47:
         b2:1a:65:ef:98:33:ff:43:d7:54:0d:3e:40:d3:c0:4b:c4:75:
         95:a0:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 23:46:42 2024 by rpki-client on console-fra.rpki-client.org