Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36352e302f32342d3234203d3e203631383537.roa
File:                     3133312e302e36352e302f32342d3234203d3e203631383537.roa (raw, json)
Hash identifier:          ycySBmmBxHnpLGz0GnFF1bQ2S6tuctc/hlAJLnrtpfc=
Subject key identifier:   8D:84:2A:4B:59:B1:A9:A1:C9:92:67:36:E7:F0:0B:AA:65:1D:F5:8C
Certificate issuer:       /CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Certificate serial:       503BB281C2B89064E77D9609C2B5CF4590168E4A
Authority key identifier: 38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36352e302f32342d3234203d3e203631383537.roa
Signing time:             Wed 17 May 2023 12:39:47 +0000
ROA not before:           Wed 17 May 2023 12:34:47 +0000
ROA not after:            Wed 15 May 2024 12:39:47 +0000
asID:                     61857
IP address blocks:        131.0.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3b:b2:81:c2:b8:90:64:e7:7d:96:09:c2:b5:cf:45:90:16:8e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
        Validity
            Not Before: May 17 12:34:47 2023 GMT
            Not After : May 15 12:39:47 2024 GMT
        Subject: CN=8D842A4B59B1A9A1C9926736E7F00BAA651DF58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:c1:f6:fd:dc:49:4b:02:81:54:4c:7b:4b:
                    09:c9:43:0d:ee:ff:a9:c6:18:f5:17:70:25:e5:51:
                    ec:67:3a:df:ba:b3:10:33:80:25:0c:99:19:df:2a:
                    ca:f6:a5:89:e6:05:d0:98:7f:f9:8c:78:a9:34:db:
                    5a:bc:4a:63:22:b1:8a:67:5a:69:be:49:af:85:3a:
                    83:3a:11:33:a3:5c:60:3a:a9:04:1f:9e:02:7e:50:
                    94:d7:1f:45:97:cd:8d:d5:cf:e7:08:d2:dc:8f:c2:
                    1b:dd:56:97:ce:11:e2:d0:33:a3:f0:8f:03:4e:ed:
                    6e:f6:92:54:7e:6f:2b:74:28:4e:78:19:8f:f8:66:
                    a1:16:5c:57:9d:c2:15:4d:ae:22:26:8c:32:78:3a:
                    44:6b:66:9e:f1:17:c3:52:2a:62:35:00:d2:b0:10:
                    e8:33:da:94:0b:8f:ed:f3:56:91:49:a4:38:2a:34:
                    ce:4b:33:e0:cd:83:7e:6a:2b:b3:5f:41:e3:e6:3a:
                    88:31:ea:86:94:2e:f6:6e:9b:c1:be:f2:9b:e0:c6:
                    85:6f:a5:4f:72:3d:85:bc:f2:27:eb:42:64:ac:93:
                    0d:3d:4d:dc:cd:87:37:af:94:e9:75:b9:f8:71:20:
                    32:98:04:70:2a:b6:c0:ef:5f:74:e9:8f:51:34:ba:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:2A:4B:59:B1:A9:A1:C9:92:67:36:E7:F0:0B:AA:65:1D:F5:8C
            X509v3 Authority Key Identifier:
                keyid:38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36352e302f32342d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:a4:d8:59:87:45:7b:41:92:36:ab:13:69:52:a0:31:fa:
         34:2f:fd:48:ed:3b:51:3a:3b:77:56:93:86:bf:bd:c3:16:dd:
         cf:e6:f5:0e:c9:99:e1:dd:9a:df:f7:39:15:05:14:48:68:1b:
         73:90:d4:57:d8:e5:d1:68:5c:0e:53:0a:65:29:47:92:59:4f:
         c3:cc:f0:43:9b:d9:4b:07:d6:9b:4f:c1:a3:75:df:d0:aa:95:
         1b:79:f0:c7:b8:73:40:a1:83:99:f6:96:bd:ff:0a:4e:6a:5a:
         c5:62:04:3a:b1:8f:ee:e5:f7:5c:88:5a:74:0f:58:02:36:47:
         65:e4:59:ea:94:99:d1:ff:d0:65:76:06:b5:d6:bf:25:7b:58:
         d2:52:22:16:d1:97:d9:64:df:ea:23:d3:12:03:da:07:6f:23:
         72:87:94:3f:d7:81:ae:1b:db:00:54:6e:d4:04:0a:6c:b4:a8:
         82:c2:a8:28:7a:ca:c5:58:31:a9:0a:87:52:d4:5e:65:97:03:
         4c:f1:b7:cd:4d:2f:79:7f:15:7c:02:bb:c8:4c:4d:2f:a9:8c:
         4f:07:58:7c:b0:83:e0:74:da:f8:fb:d4:f8:a6:4f:54:47:8c:
         13:99:76:a9:cd:7b:df:df:f6:f7:d6:d1:e4:53:a1:b7:6d:6b:
         37:95:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org