Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38322e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          ZC0IMuWEjo2xmVedcBflsv8rzzGwUaVs6l7hGc+Js/Q=
Subject key identifier:   FF:EA:DA:8B:4B:66:39:63:AD:2A:2F:65:F0:10:22:39:D9:70:BC:7A
Certificate issuer:       /CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
Certificate serial:       3B54857F6400D691428251348A3096B27D2B4514
Authority key identifier: FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 23 Aug 2023 22:00:00 +0000
ROA not before:           Wed 23 Aug 2023 21:55:00 +0000
ROA not after:            Wed 21 Aug 2024 22:00:00 +0000
asID:                     61759
IP address blocks:        131.100.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:85:7f:64:00:d6:91:42:82:51:34:8a:30:96:b2:7d:2b:45:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
        Validity
            Not Before: Aug 23 21:55:00 2023 GMT
            Not After : Aug 21 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:d7:6d:68:b7:4f:3c:66:30:6c:8d:2a:bf:
                    85:6b:c2:8a:22:2a:f2:45:4a:e7:2c:12:bc:6d:9b:
                    aa:07:94:e1:6e:f4:28:58:88:00:10:6e:d5:bf:ce:
                    f3:a8:f9:e5:c6:92:f4:d4:41:de:99:0c:7d:27:f1:
                    8c:72:54:95:8e:55:eb:af:8e:45:01:61:de:9e:55:
                    b0:32:65:5e:80:d2:5a:d7:28:9d:2f:52:c4:39:b7:
                    0d:c4:f2:38:11:3c:19:92:fc:8a:25:2e:73:64:e8:
                    76:20:61:77:f1:9b:82:a8:a8:c4:fa:a4:e8:1a:5d:
                    9b:91:cd:eb:bd:5b:60:d8:db:af:41:c0:39:e5:a2:
                    b0:fb:9e:8b:48:5a:16:37:3f:51:c5:da:43:d1:8f:
                    9a:bd:84:70:8d:0e:52:e2:fd:36:6c:9f:e0:58:b1:
                    9c:d2:50:bc:01:ac:0e:2c:80:36:07:76:12:29:47:
                    b1:61:a7:24:25:2e:a7:b4:2b:b5:7b:84:e6:16:d6:
                    6b:1f:4e:d1:53:65:9f:2f:54:8c:df:31:24:c9:2b:
                    75:b7:7d:2f:1d:40:ed:7c:3f:66:43:e5:78:53:17:
                    92:8f:a1:69:e9:8f:3a:1e:d0:bf:5e:18:5e:54:46:
                    0a:94:cc:b1:13:33:6a:fc:1c:76:0b:c3:c3:a1:47:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:DA:8B:4B:66:39:63:AD:2A:2F:65:F0:10:22:39:D9:70:BC:7A
            X509v3 Authority Key Identifier:
                keyid:FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38322e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:59:dd:f7:bb:b4:84:3f:7b:25:4a:22:1b:82:4a:18:5b:
         8b:4f:f2:f3:f6:fa:83:78:76:ca:ff:e1:3f:06:a4:17:b4:4b:
         72:f5:6b:75:34:c9:ac:34:9f:ac:66:1f:38:fe:39:f6:e2:3c:
         e7:0c:e7:42:a0:89:c2:90:18:26:06:c6:5d:51:15:9b:f4:bc:
         fa:dc:06:e2:ea:8f:f4:42:b4:10:b0:81:f0:2d:9e:92:e3:eb:
         fb:4f:fd:12:54:2b:a0:b0:d9:ba:f8:8c:48:6d:be:6e:33:39:
         87:98:82:11:78:37:d8:b6:dc:9f:66:d6:1d:bb:7a:b1:7e:27:
         fa:84:e3:dc:2a:a7:75:77:d3:81:31:fd:b8:bb:ab:a3:98:32:
         60:43:c2:a4:43:a8:52:3a:9b:ea:1e:20:61:3b:40:52:77:ef:
         d2:27:36:f6:a9:27:51:16:36:d1:e6:6a:4f:bf:e4:3f:3c:88:
         77:15:46:7c:bd:f4:e7:5a:c6:e1:d8:83:92:bb:e4:f8:da:6d:
         0c:83:d6:ee:b5:a5:b4:00:0e:ee:e5:20:7f:c9:ff:8e:26:6c:
         bf:04:25:12:59:9a:48:a3:69:77:59:44:9b:cf:77:de:94:f1:
         ae:87:1a:a4:8f:95:e8:9b:46:4f:ce:1c:b4:92:fa:f6:33:21:
         49:db:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org