Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa
File:                     3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa (raw, json)
Hash identifier:          8xF8larfperAQp6hRPUENJuFMbgjXkLX33kVMZrP+q4=
Subject key identifier:   54:F1:00:C2:EA:4A:54:D6:93:EB:6A:EC:6F:CB:70:63:95:35:6B:6D
Certificate issuer:       /CN=CDE7AD619ADE061F54FC38424291FA04B034E709
Certificate serial:       0647A296E9D65CD2B4CB1720CCEBF6CC9EA3D5D9
Authority key identifier: CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa
Signing time:             Thu 15 Feb 2024 13:46:57 +0000
ROA not before:           Thu 15 Feb 2024 13:41:57 +0000
ROA not after:            Thu 13 Feb 2025 13:46:57 +0000
asID:                     61633
IP address blocks:        131.100.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:a2:96:e9:d6:5c:d2:b4:cb:17:20:cc:eb:f6:cc:9e:a3:d5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Validity
            Not Before: Feb 15 13:41:57 2024 GMT
            Not After : Feb 13 13:46:57 2025 GMT
        Subject: CN=54F100C2EA4A54D693EB6AEC6FCB706395356B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:d1:6c:9a:d5:3a:76:00:0b:0e:a3:56:86:
                    4b:9b:e4:14:32:9a:4e:56:33:75:1d:69:9a:9b:52:
                    23:4c:88:d4:41:d0:d1:d0:50:61:64:48:36:4a:c8:
                    28:b1:0d:c0:c3:62:93:d4:b1:0e:3d:78:c6:29:f1:
                    92:1d:59:b0:5b:02:47:22:16:3e:54:e9:c4:d4:c2:
                    3a:26:60:8c:b7:a5:b4:0e:53:d5:2d:be:f1:72:02:
                    d1:b1:c6:46:ed:dd:2a:45:5b:86:27:a9:64:0a:c2:
                    40:2e:41:fb:c4:41:90:42:28:2a:44:45:c1:d7:c5:
                    16:65:20:f2:a0:15:5f:db:9c:a9:86:e2:cb:e0:ae:
                    32:91:de:3d:88:65:b4:a1:87:0b:c7:3e:8c:7c:ea:
                    83:f7:1f:cf:05:8c:32:83:4c:f5:ff:fa:74:31:99:
                    a4:72:c0:69:15:8f:cc:f9:43:10:ee:9a:7e:48:4a:
                    08:73:3c:c6:51:2c:cb:92:24:25:61:38:71:88:14:
                    dd:da:61:d5:4e:a2:0c:e2:7c:4d:a6:f0:5f:cf:c6:
                    e6:5b:2f:46:70:d4:97:11:bf:6c:e1:a6:50:c5:56:
                    50:3b:0a:2f:5c:aa:79:4d:1d:c9:0a:7f:af:5d:8c:
                    8d:2e:bc:8b:7b:cf:2b:cb:51:ae:27:0b:9d:80:63:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:00:C2:EA:4A:54:D6:93:EB:6A:EC:6F:CB:70:63:95:35:6B:6D
            X509v3 Authority Key Identifier:
                keyid:CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/3133312e3130302e3135302e302f32332d3233203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:50:55:85:3b:66:9a:69:03:0d:c4:cd:ce:80:24:82:1b:
         7f:27:00:3e:9a:0c:20:72:fd:7e:96:01:de:39:fe:42:2c:3c:
         26:37:15:2f:6c:b9:57:64:a9:d2:23:7e:c2:3a:54:04:e0:70:
         23:99:c6:41:d4:75:43:10:da:b2:b7:e1:c9:8f:53:07:9a:24:
         48:50:af:76:b4:8b:5d:8c:db:8f:d7:05:e0:22:b8:57:ff:a4:
         57:cf:3e:a0:01:07:10:26:fd:f6:98:37:44:ba:13:67:10:a8:
         ed:1e:29:ea:98:88:b7:55:3b:e7:1c:2e:7f:6e:9b:95:bb:a2:
         d0:22:b0:c1:50:60:dc:b4:97:2a:b5:10:2d:bf:27:b0:6c:62:
         a4:a4:6e:24:d3:b2:9b:10:da:e1:7c:95:47:f8:7d:78:61:32:
         bc:89:90:33:2a:31:74:32:0d:7d:8e:45:1d:f1:b3:61:a2:d3:
         7a:47:e0:18:2c:21:1d:9f:92:98:cb:24:6c:7b:ab:6e:8f:94:
         ae:ab:1d:f7:ed:bf:a7:ca:a9:6d:d1:76:cc:aa:f1:69:e3:72:
         39:b7:a3:19:86:8e:48:c7:d2:45:15:05:9e:37:15:80:f5:9c:
         0f:d7:b5:fa:d0:6f:da:85:68:d0:6f:bc:3e:36:cf:e3:c1:47:
         31:af:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org