Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
File:                     3136312e3134382e302e302f31362d3234203d3e203130393534.roa (raw, json)
Hash identifier:          OxXLxzwaz999Yx1brYRGEXK5ArsxIzJt5AtAQkxXeE0=
Subject key identifier:   3D:0B:53:95:83:6B:44:17:7B:9B:28:33:AC:5A:01:33:3D:0A:47:04
Certificate issuer:       /CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Certificate serial:       65542503A7D17BA9ACF2D3A6BEEEAE4F6A056921
Authority key identifier: 7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa
Signing time:             Thu 22 Jun 2023 18:16:03 +0000
ROA not before:           Thu 22 Jun 2023 18:11:03 +0000
ROA not after:            Thu 20 Jun 2024 18:16:03 +0000
asID:                     10954
IP address blocks:        161.148.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:54:25:03:a7:d1:7b:a9:ac:f2:d3:a6:be:ee:ae:4f:6a:05:69:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
        Validity
            Not Before: Jun 22 18:11:03 2023 GMT
            Not After : Jun 20 18:16:03 2024 GMT
        Subject: CN=3D0B5395836B44177B9B2833AC5A01333D0A4704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:49:48:0d:af:36:1e:2f:19:3f:ad:f8:ee:
                    51:5d:32:4e:e9:e8:d7:24:a6:66:4e:6e:fb:63:14:
                    a5:c1:70:21:19:d7:72:32:6e:10:74:6d:6b:ab:13:
                    0c:d8:68:5d:b6:4e:c4:85:98:6b:50:3a:36:67:9c:
                    50:6b:77:01:40:ea:ea:c8:49:dc:7e:4f:ec:e3:3e:
                    b4:4e:0c:e0:32:03:80:e5:95:4c:d3:65:a4:07:65:
                    e6:e9:c3:dd:bd:91:40:5d:b4:bb:83:63:23:5e:5b:
                    bb:cd:b0:0b:4d:8e:9a:92:e3:73:7a:43:e1:a9:14:
                    04:fd:a1:46:61:bf:56:3c:80:96:2b:ac:70:e8:9c:
                    56:0e:8d:e5:01:b7:9a:25:cc:cf:11:3b:14:db:55:
                    76:cf:5a:3b:aa:06:fb:66:b2:73:8e:44:64:8c:f0:
                    d6:89:59:94:33:0b:36:fa:a9:49:25:d8:57:2b:17:
                    02:33:39:4c:2f:d9:c3:ee:2f:0b:c2:ce:37:f5:bf:
                    19:a4:cd:39:e8:85:5f:45:aa:2e:47:eb:7a:68:e6:
                    d9:ac:9e:94:aa:0d:9f:00:f5:92:bc:f1:7d:a7:a6:
                    23:60:48:90:99:39:66:c1:f8:cc:fb:66:4d:27:ab:
                    ec:61:62:05:29:c8:13:04:f8:87:a6:52:48:3f:50:
                    69:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:53:95:83:6B:44:17:7B:9B:28:33:AC:5A:01:33:3D:0A:47:04
            X509v3 Authority Key Identifier:
                keyid:7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/3136312e3134382e302e302f31362d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:13:db:2f:91:1b:5c:73:af:cf:55:f8:7d:bf:89:51:be:ba:
         91:88:46:f1:e5:f2:0f:f5:11:b2:36:56:5d:12:4e:4c:bf:33:
         ab:62:e9:00:08:1b:12:9d:1c:a1:7c:95:c9:84:df:c6:f7:ac:
         2f:64:d4:68:0c:97:ed:e8:df:11:9c:29:d1:f9:06:fb:6a:99:
         8b:80:ea:3d:9c:e5:70:27:94:23:9e:fd:5e:34:c4:a8:ca:2b:
         79:bb:24:aa:37:fe:0d:7e:1d:6f:26:65:66:12:06:ec:ba:07:
         28:7e:9b:00:6c:e7:67:8f:d6:0a:e6:b6:4c:a4:18:4e:3b:46:
         37:85:38:38:a1:68:ca:01:b7:7f:2f:77:8c:03:4c:ba:41:5d:
         58:75:c3:c9:7c:57:5c:7f:4b:e6:8d:9c:6f:e2:b7:51:d2:84:
         a0:5b:12:c3:79:bf:cd:03:64:25:bb:89:0e:3b:af:1e:eb:8c:
         c6:66:43:5f:b3:57:0e:e0:3a:ce:c9:65:15:05:d9:f6:95:45:
         27:3e:c9:4b:74:4b:d5:c8:91:de:eb:fb:73:0c:a5:93:cf:fc:
         c8:0d:ad:46:c5:c0:4e:80:e1:16:31:7d:e1:dc:e5:01:91:5a:
         64:5e:af:0c:cf:64:2f:12:8d:8f:ed:98:c6:26:67:27:a9:ce:
         6a:b1:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org