Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36362e302f32342d3234203d3e203631383537.roa
File:                     3133312e302e36362e302f32342d3234203d3e203631383537.roa (raw, json)
Hash identifier:          sIorx6j7z6h/+TlFUWB5XbY1Q0em+IVqz7IB+VyPmgQ=
Subject key identifier:   7C:57:13:66:6E:70:4A:85:EC:9F:11:4E:6A:78:CE:16:E4:B3:28:C4
Certificate issuer:       /CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
Certificate serial:       32FB03147AC295A993504179C7E5BDBB6F6344D8
Authority key identifier: 38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36362e302f32342d3234203d3e203631383537.roa
Signing time:             Wed 17 May 2023 12:39:51 +0000
ROA not before:           Wed 17 May 2023 12:34:51 +0000
ROA not after:            Wed 15 May 2024 12:39:51 +0000
asID:                     61857
IP address blocks:        131.0.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fb:03:14:7a:c2:95:a9:93:50:41:79:c7:e5:bd:bb:6f:63:44:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D00783FA7C03D1A5E873F38A91F140A98F33FA
        Validity
            Not Before: May 17 12:34:51 2023 GMT
            Not After : May 15 12:39:51 2024 GMT
        Subject: CN=7C5713666E704A85EC9F114E6A78CE16E4B328C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:44:7d:d2:96:59:5f:33:37:14:04:26:98:06:
                    88:93:13:9f:e6:c5:a6:38:40:14:e0:cd:69:73:c3:
                    6f:07:90:4d:01:f9:13:84:e3:39:23:6e:5a:a3:bc:
                    54:e1:c3:43:dd:e0:65:a6:d9:d9:78:2b:66:4f:cd:
                    e3:11:c5:68:7a:d3:b5:89:37:74:06:7e:de:83:29:
                    78:25:53:f8:bd:ff:64:62:a0:40:a6:c4:db:3b:c0:
                    d0:82:ff:c7:eb:10:13:3c:03:c4:89:da:3f:7e:34:
                    5b:79:cd:c2:33:57:a6:cd:50:4f:db:72:18:93:a1:
                    4d:93:15:b6:2d:88:e2:78:88:78:68:58:bd:19:07:
                    82:8d:a6:a7:0d:5a:86:3d:9b:ed:86:90:f7:94:e1:
                    60:2b:aa:8d:88:7d:19:de:46:e5:da:89:78:e1:c6:
                    35:d1:08:45:49:9a:ca:c2:e3:79:1c:04:36:ed:6d:
                    98:31:05:0d:1f:ac:7b:98:66:de:70:00:48:9e:60:
                    7e:87:db:36:13:a0:98:86:25:34:1b:ef:43:a5:e0:
                    f9:8b:55:9e:1a:10:72:87:99:99:1c:4f:21:46:6b:
                    df:fe:b1:36:33:34:c1:81:51:bd:1d:c0:e2:c9:c5:
                    90:85:7f:6c:4e:d4:c4:c2:17:64:ee:3b:a0:45:b2:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:13:66:6E:70:4A:85:EC:9F:11:4E:6A:78:CE:16:E4:B3:28:C4
            X509v3 Authority Key Identifier:
                keyid:38:D0:07:83:FA:7C:03:D1:A5:E8:73:F3:8A:91:F1:40:A9:8F:33:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D00783FA7C03D1A5E873F38A91F140A98F33FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFMaBDDwBcCXWStPkgCQLCEki7dzxgrBEvCA2FZfJiM/0/3133312e302e36362e302f32342d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:bf:52:a5:a6:2d:5f:74:d2:34:db:c1:a2:7a:20:01:e7:
         52:27:ec:d9:56:7a:b3:9f:44:93:1f:de:69:4c:85:ab:f2:c0:
         38:66:0b:5b:f2:0f:d6:b4:7a:55:90:bf:89:b1:21:fb:90:aa:
         1e:ec:ae:66:99:49:85:5c:ec:cf:a9:2f:9c:1c:08:a3:4f:ef:
         99:a0:f1:97:c4:1f:56:30:4d:cc:21:03:55:4d:ff:d6:27:02:
         9c:6b:8b:ef:2f:6e:19:bf:75:03:8b:11:86:05:fb:20:00:f8:
         e7:44:5a:ff:27:ea:76:7f:d6:d4:66:c1:37:31:f6:44:c1:1b:
         18:80:10:da:24:ab:6a:75:a0:0d:48:2c:5c:81:f0:8c:6a:59:
         12:6a:cf:8f:ac:4e:60:03:4c:d9:40:90:10:6d:89:92:fe:26:
         cd:23:4d:4a:32:78:6b:8e:ac:77:df:6c:41:49:89:b8:43:86:
         9e:6a:13:f8:e0:fc:0e:d9:71:10:b5:82:23:da:03:58:e6:f8:
         4f:76:fb:85:b8:fe:52:d9:3f:20:b9:1f:2d:15:1c:85:a5:d5:
         14:0e:3f:76:2e:82:c8:34:cc:9b:32:c3:c7:ba:4a:df:43:ba:
         c2:61:f8:13:12:3a:96:9b:9a:81:dc:5e:b2:bf:73:bd:5a:04:
         96:a6:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org