Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa
File:                     3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa (raw, json)
Hash identifier:          jHBHhlg3lK3632frkBWqEKoK+iBv/ElpU8U66KeupDw=
Subject key identifier:   E6:82:EB:B0:5D:42:01:15:D8:87:C8:75:49:F7:52:EF:31:97:F7:7F
Certificate issuer:       /CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
Certificate serial:       4D25D7FED8B50C0025CD31640AE7A770C9E28590
Authority key identifier: 1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa
Signing time:             Fri 23 Aug 2024 19:54:56 +0000
ROA not before:           Fri 23 Aug 2024 19:49:56 +0000
ROA not after:            Fri 22 Aug 2025 19:54:56 +0000
asID:                     61633
IP address blocks:        131.100.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:25:d7:fe:d8:b5:0c:00:25:cd:31:64:0a:e7:a7:70:c9:e2:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF
        Validity
            Not Before: Aug 23 19:49:56 2024 GMT
            Not After : Aug 22 19:54:56 2025 GMT
        Subject: CN=E682EBB05D420115D887C87549F752EF3197F77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:33:76:f8:b5:ca:a0:2d:6f:48:44:26:bd:
                    ea:9e:79:4b:82:11:81:48:7f:d8:bf:f0:6b:d5:9c:
                    32:5d:f0:ad:cf:d0:44:e9:6e:ab:2d:54:ff:6a:a5:
                    98:e6:54:5e:9a:b9:b0:db:fe:8a:ed:ec:f5:85:73:
                    e1:78:64:a7:0c:83:b9:d8:0b:27:31:9b:69:1c:21:
                    30:0d:da:1a:9e:c5:9e:f1:fb:28:ef:ed:7c:a9:1e:
                    1e:7c:8a:c2:fa:3d:51:cd:64:d4:b7:5a:18:0b:03:
                    68:c5:cf:3a:e0:89:0d:de:10:05:7d:57:e7:48:19:
                    f1:aa:30:05:e5:57:10:30:3a:51:bb:77:a7:cf:73:
                    34:b3:48:0e:ac:ef:d6:85:4d:fb:6f:eb:8a:61:11:
                    42:e8:2e:f8:4f:e4:90:3f:8b:a1:d9:e6:ff:57:d7:
                    37:86:dc:33:46:06:6a:c3:0c:45:02:54:4e:ab:18:
                    96:3c:86:1c:35:61:5c:b7:25:9d:97:2c:0b:9a:3a:
                    a5:18:9a:60:06:79:f4:7e:7c:12:0d:3c:74:03:f4:
                    9d:8c:b5:6c:d7:ae:60:89:1e:49:2a:7f:ad:18:c6:
                    2b:4d:fa:4d:8f:77:27:1c:bb:6d:ee:10:32:81:7f:
                    8b:60:bf:36:02:4d:6e:f5:33:a4:51:ef:5e:5e:29:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:EB:B0:5D:42:01:15:D8:87:C8:75:49:F7:52:EF:31:97:F7:7F
            X509v3 Authority Key Identifier:
                keyid:1D:16:A2:9F:F5:A8:22:EA:4E:F7:0D:6E:05:22:7D:B9:CF:C5:79:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D16A29FF5A822EA4EF70D6E05227DB9CFC579EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:3a:98:8c:6a:fe:41:80:04:46:a5:f7:bd:22:77:bf:90:
         c8:10:99:50:9b:e2:89:6f:51:0d:03:22:6f:d5:78:24:79:30:
         ea:d0:ea:19:22:5b:f3:93:8f:42:03:f4:c9:bb:45:6e:84:56:
         c2:07:e5:bf:28:a7:ab:e5:20:22:e0:53:e5:39:f7:70:5a:8c:
         08:01:e3:ef:06:b3:47:41:08:b6:51:97:de:81:8e:98:d6:a7:
         84:16:7e:c5:ed:5d:83:9f:ea:a6:9f:11:2a:88:89:c4:6c:37:
         0b:91:61:7f:7a:ed:bf:0b:dd:fc:27:36:14:c4:fd:61:93:27:
         0a:32:6f:a8:93:04:65:59:34:78:3c:df:a2:a7:73:96:71:eb:
         a2:40:9f:fb:9f:b9:8f:8f:42:f9:3f:7e:7e:06:58:a6:9e:af:
         ba:2d:85:c1:7f:6c:31:d9:bc:90:3c:6e:b9:00:63:ec:1d:1c:
         00:87:53:34:7b:a8:bb:cd:45:c4:f5:0a:36:18:b6:33:f3:c1:
         51:4c:27:ba:a1:05:59:ce:27:72:dd:ff:d8:b8:c8:8f:14:5e:
         ea:cd:29:3b:6b:53:64:f9:db:9d:f7:3a:7d:38:a5:39:64:57:
         10:17:29:54:1c:d9:f0:08:91:07:e9:79:56:77:85:ca:2d:ac:
         f3:6b:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org