Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa
File:                     3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa (raw, json)
Hash identifier:          QL2W94UrR6hX/fJwcqjML56HuyainN+r5YRdrRRvG4o=
Subject key identifier:   E1:AA:DE:8C:13:54:43:D5:B8:82:F6:A9:22:AA:0D:29:01:CE:16:D3
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       4215CF9397B636CF0E793115828E30EEAC0A45E9
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:57 +0000
ROA not before:           Thu 15 Feb 2024 13:41:57 +0000
ROA not after:            Thu 13 Feb 2025 13:46:57 +0000
asID:                     61633
IP address blocks:        131.100.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:cf:93:97:b6:36:cf:0e:79:31:15:82:8e:30:ee:ac:0a:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:57 2024 GMT
            Not After : Feb 13 13:46:57 2025 GMT
        Subject: CN=E1AADE8C135443D5B882F6A922AA0D2901CE16D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bb:f8:36:09:8e:17:00:ad:a2:92:3c:28:8d:
                    d3:ee:fb:37:e8:a2:1f:d4:98:a0:b2:d8:13:89:44:
                    aa:f5:48:63:f2:00:cb:17:ca:2d:16:41:8d:d6:31:
                    e5:c0:c9:98:19:44:12:6b:65:89:85:0c:a6:9a:73:
                    1e:33:4c:d1:5c:93:84:88:b4:ca:7b:39:bf:f3:e8:
                    80:9d:7e:3e:b7:fa:0b:12:2e:d4:6c:33:74:15:1e:
                    46:f2:d5:69:49:66:9b:d3:14:52:0d:69:19:41:9e:
                    b5:76:20:97:1b:02:4b:8e:af:2f:06:52:34:87:b3:
                    27:c6:e7:37:9f:cc:c3:78:0b:e8:8a:e3:97:58:42:
                    22:01:1a:cf:0f:a2:f6:0c:c1:15:82:b5:63:05:aa:
                    98:f0:83:a4:5d:df:f1:6f:f2:ea:40:3c:6e:51:28:
                    97:28:a6:8e:fb:2c:2e:bd:6f:cf:06:fc:ab:a8:3b:
                    20:9e:ae:de:cb:25:66:b7:ea:18:d6:39:cf:d6:52:
                    25:7f:4d:c4:d7:f6:46:aa:d0:d5:5e:ed:95:a6:82:
                    bd:dc:cb:8b:6d:92:77:60:fc:b0:6c:be:d0:2a:8e:
                    10:f9:7d:ab:16:17:2e:30:83:12:e6:d4:83:da:fb:
                    31:eb:8f:67:bb:fa:68:64:23:ee:d5:21:4b:08:f5:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:DE:8C:13:54:43:D5:B8:82:F6:A9:22:AA:0D:29:01:CE:16:D3
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32332d3233203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:b5:bd:fb:8b:1b:fe:8b:40:fe:38:af:bb:94:7e:4a:2d:3f:
         21:b3:f2:1f:d5:e7:de:00:db:ef:61:38:93:74:91:53:c6:64:
         5f:ff:50:6d:8e:f8:7a:38:ce:4b:0e:e4:3c:c0:71:19:f2:b2:
         5b:db:8e:4c:2e:e9:8d:af:a1:c1:0e:e7:78:11:22:07:d0:35:
         4f:49:75:c7:d5:cf:51:3b:53:30:ce:d5:9b:27:4e:e3:42:54:
         48:d1:61:04:c0:ee:96:a1:24:d1:58:92:da:0b:ad:14:98:b1:
         1e:e9:84:c4:11:58:cd:9e:06:a6:b1:a9:5b:dc:ef:4b:e8:46:
         34:26:59:1f:0b:9d:42:b4:53:40:4d:54:7f:88:17:dc:37:b0:
         a3:e1:70:14:7c:a8:dd:13:33:c0:aa:80:9a:e5:a6:0e:0f:bf:
         f4:2d:18:cd:ef:ae:5b:a7:2d:c8:6f:6a:f3:fc:2f:c6:bd:0d:
         61:78:63:71:bc:4f:b8:bc:b3:e8:84:c7:13:b3:53:b9:4d:db:
         ad:0a:48:b2:9c:83:86:8f:19:92:0e:f6:cb:bb:42:b4:dc:9d:
         01:ae:a6:ba:de:6e:2d:98:dc:2f:36:a7:03:7c:d5:72:b0:f8:
         9e:d9:c9:53:38:d6:93:26:12:a5:35:90:ae:c1:92:e9:16:ec:
         f2:6b:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org