Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa
File:                     3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa (raw, json)
Hash identifier:          dTStW8S6zesiurJz7oi1lFtGtljioll6/bdjZ5x7cjc=
Subject key identifier:   4A:A8:C8:D6:0B:52:0F:51:E5:D8:77:A9:5F:16:F5:F0:A4:E3:0D:7B
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       5C3F1B51448C5E0FC0B26EC25055718A0FA7AC19
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:54 +0000
ROA not before:           Thu 15 Feb 2024 13:41:54 +0000
ROA not after:            Thu 13 Feb 2025 13:46:54 +0000
asID:                     61633
IP address blocks:        131.100.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3f:1b:51:44:8c:5e:0f:c0:b2:6e:c2:50:55:71:8a:0f:a7:ac:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:54 2024 GMT
            Not After : Feb 13 13:46:54 2025 GMT
        Subject: CN=4AA8C8D60B520F51E5D877A95F16F5F0A4E30D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ea:1c:5f:e6:84:d0:d7:01:0e:7e:f2:cb:22:
                    a4:85:de:00:33:7e:51:92:7c:62:e2:88:28:be:fb:
                    9a:53:91:4e:16:4c:65:97:ac:09:5f:62:27:0d:d3:
                    59:28:f7:0b:61:bd:f5:cb:a1:16:ea:69:5e:13:1f:
                    49:73:ef:94:3b:49:fb:f2:83:d4:2c:ec:73:43:14:
                    64:19:8d:f2:01:49:46:8a:4f:21:88:ce:7b:0f:5b:
                    fd:61:bc:b8:11:61:ef:59:fe:d1:bd:12:2b:63:9e:
                    17:19:f1:11:94:c9:76:c2:c7:5d:52:2f:13:fb:e0:
                    bd:f4:c8:4c:b2:0c:5f:cc:3a:94:e9:30:61:81:eb:
                    02:6b:16:99:a6:1b:ec:f5:ed:51:2d:54:9b:6b:a3:
                    9d:3c:3b:22:67:ec:b5:fc:cf:01:9b:12:ca:4c:d2:
                    07:ff:b2:95:48:45:96:5c:3f:c4:a3:10:e7:86:ae:
                    fd:90:62:59:8e:f3:d3:34:90:37:99:10:bd:ac:e7:
                    41:6a:85:59:14:7c:ef:b7:8a:bb:a9:6e:a4:11:d5:
                    21:be:5d:b5:71:da:f4:ab:a7:7d:fc:ed:6a:48:c4:
                    7f:7c:1f:2a:4f:98:16:57:c1:5c:e8:ed:e3:bf:ae:
                    b9:14:e2:fa:cd:e4:f5:5c:db:d7:4a:67:c0:de:e7:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A8:C8:D6:0B:52:0F:51:E5:D8:77:A9:5F:16:F5:F0:A4:E3:0D:7B
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134382e302f32342d3234203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:fb:e0:71:23:7f:a2:9e:f0:54:77:f8:7e:bf:53:c8:be:
         22:9f:81:51:1f:a8:02:f6:7c:80:98:43:b7:3e:2a:13:4a:a9:
         ae:9c:ee:c0:7f:3f:82:d4:ae:0b:b8:67:2e:56:65:e0:73:61:
         78:46:74:6f:34:37:97:d3:aa:39:83:73:49:83:47:1b:81:a9:
         2a:57:18:77:8a:14:ed:6e:c8:6e:3e:0a:43:48:14:72:e1:97:
         fb:c1:c6:0b:a1:80:2d:e5:a6:4b:9c:c6:17:40:78:d9:0f:62:
         35:94:ab:be:7e:24:69:58:5d:4c:b9:e5:c7:2c:f8:0c:17:58:
         59:54:25:c8:3f:34:ad:ec:3b:1d:ae:e9:9e:6d:6c:ef:ee:a5:
         b5:83:7c:b7:1f:3b:d0:09:f0:e1:54:6d:89:ca:35:7e:3f:67:
         e4:5b:22:9a:53:e5:b7:69:44:8f:ca:d2:d5:34:e4:90:b2:23:
         e0:75:d7:7d:4c:cd:85:d8:b5:e2:cd:fe:40:ea:e8:09:db:f6:
         7c:9e:7d:8b:84:40:67:2f:84:df:c3:45:ab:ec:9a:7c:1a:19:
         c3:87:c5:42:09:86:44:d8:65:86:d2:30:23:4a:46:a0:d0:60:
         c7:e8:d4:13:b0:e7:0d:34:63:7b:a4:0d:cb:72:f8:d6:96:bd:
         5b:21:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org