Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa
File:                     3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa (raw, json)
Hash identifier:          MuGnpqXGvGhPTP7jh0IyxeFAB0YLK+kZYGafP0tsZNA=
Subject key identifier:   FC:2A:B5:97:C1:6D:71:4E:66:24:E6:00:DF:85:FF:65:A3:8A:FD:78
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       5BD6099C7F829A11FA52453563B9091F8F3912AB
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:57 +0000
ROA not before:           Fri 23 Aug 2024 19:49:57 +0000
ROA not after:            Fri 22 Aug 2025 19:54:57 +0000
asID:                     61633
IP address blocks:        131.100.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:09:9c:7f:82:9a:11:fa:52:45:35:63:b9:09:1f:8f:39:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:57 2024 GMT
            Not After : Aug 22 19:54:57 2025 GMT
        Subject: CN=FC2AB597C16D714E6624E600DF85FF65A38AFD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:6a:4f:34:fd:dc:b7:c6:98:d7:99:05:e0:
                    ae:46:56:6c:ed:fd:34:9f:55:e3:52:5f:e1:e3:a4:
                    d5:1f:69:2e:08:13:99:37:31:25:aa:d2:89:38:bb:
                    e6:26:bf:0c:04:28:1a:ef:97:8c:7d:a8:75:cd:52:
                    90:68:fc:e1:7b:f3:ef:49:44:74:36:f6:3f:6f:de:
                    6a:53:12:14:ea:68:2e:d4:2f:23:ea:b2:db:06:0b:
                    1c:79:63:2d:e3:d9:dc:2a:3e:29:0e:6b:30:1a:57:
                    16:4d:2c:8f:a5:b0:c4:c8:fc:e0:f9:9a:78:9c:28:
                    b8:e3:cd:31:e7:80:9d:dd:ea:c1:56:1a:67:12:f9:
                    52:fc:d3:af:e4:d4:22:5b:87:2d:7a:5e:ae:32:84:
                    be:ab:1e:5b:e6:15:c9:3b:b4:3d:92:69:1c:64:0d:
                    c2:60:ac:e4:4f:a5:08:4f:db:fc:13:b4:b1:60:be:
                    8e:f4:a5:49:85:fd:55:ce:0a:39:8a:61:e7:4c:ec:
                    30:31:53:8e:43:7a:2d:3b:71:6c:28:9a:25:2b:ce:
                    89:07:12:00:93:7c:a8:89:36:2c:7e:0a:91:93:66:
                    e6:33:06:39:28:59:1a:20:ff:d6:fc:22:19:f8:a5:
                    77:e3:9a:aa:c3:46:80:26:d6:1e:50:49:46:d6:4c:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2A:B5:97:C1:6D:71:4E:66:24:E6:00:DF:85:FF:65:A3:8A:FD:78
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3134392e302f32342d3234203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:01:ac:ef:f0:68:0c:ba:b2:18:6f:e8:18:8b:6a:e1:7b:c6:
         40:c3:19:43:ee:30:76:c1:08:5e:73:6b:bb:4d:58:e2:05:da:
         11:74:1e:a1:03:7b:51:02:69:92:32:d4:c8:0b:15:0f:e0:cc:
         f6:f2:dd:ce:90:5f:57:9b:77:20:db:0c:d9:2e:e6:61:3b:57:
         cb:d5:d0:07:c4:79:32:a6:b2:4e:44:46:22:10:e9:a6:a2:07:
         a1:74:9c:40:fc:32:98:c9:f5:78:ad:86:07:e6:01:01:b1:c9:
         39:41:20:ab:3c:ba:45:2c:0b:71:a6:29:09:89:bb:39:0b:0c:
         bb:db:5e:23:80:4e:09:95:1d:28:50:26:02:60:6b:14:93:6b:
         03:d0:99:99:80:44:25:ff:10:03:f0:1c:37:28:b6:97:f4:60:
         e7:a5:90:cb:8c:a3:3a:88:96:f9:a9:ee:09:9c:2e:f6:d6:32:
         07:2e:c9:07:a9:6a:d5:8b:06:ac:37:d4:03:f1:46:8e:6e:aa:
         ca:7c:af:e0:4c:99:8d:26:01:13:d6:4f:cc:1e:02:af:1e:63:
         9e:11:37:60:10:46:48:7d:55:1b:cd:0e:16:7f:87:19:e6:ae:
         2d:57:40:8b:fc:c9:7f:21:1e:32:1e:07:33:44:56:e5:8b:15:
         ea:45:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:27 2024 by rpki-client on console-ams.rpki-client.org