Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38332e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          69oDy2kGUrwahi6bYqVcCOjH/Fmlqr3hNoqpH8xB0y8=
Subject key identifier:   E8:73:4E:FD:2F:2E:E4:F1:94:3D:3E:C1:B2:CC:4C:B9:06:09:A5:49
Certificate issuer:       /CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
Certificate serial:       77D476652AC3678E70F4E67DB42A9CA1DD1F753F
Authority key identifier: FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 23 Aug 2023 21:00:00 +0000
ROA not before:           Wed 23 Aug 2023 20:55:00 +0000
ROA not after:            Wed 21 Aug 2024 21:00:00 +0000
asID:                     61759
IP address blocks:        131.100.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d4:76:65:2a:c3:67:8e:70:f4:e6:7d:b4:2a:9c:a1:dd:1f:75:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
        Validity
            Not Before: Aug 23 20:55:00 2023 GMT
            Not After : Aug 21 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:fc:c9:6c:46:b9:30:86:92:72:7a:42:17:
                    9f:c6:e7:19:44:03:7f:38:f3:83:1e:39:ff:0b:f7:
                    4e:2e:53:9e:e8:bc:0e:66:52:c7:84:ba:ef:68:c9:
                    f4:24:14:84:de:1e:d2:cc:a2:57:df:fd:7a:2e:71:
                    7f:9a:6f:e2:3b:b6:dd:02:06:b3:2e:bb:a3:24:4c:
                    59:dd:9e:8e:04:0c:fe:8e:34:a6:94:6c:df:e3:4f:
                    47:c4:93:e9:60:78:f4:62:9d:52:51:cd:52:37:c5:
                    88:c1:15:f6:d2:7a:2e:7e:74:68:37:6e:53:4c:a0:
                    f8:06:d2:45:ff:f6:24:23:da:c6:fe:d2:7d:2c:50:
                    b4:4c:02:14:03:be:d2:65:b1:ce:ea:a7:a4:06:83:
                    ca:47:1f:b0:5e:03:37:9f:bd:b6:0c:3f:58:ab:7a:
                    23:eb:6b:83:d7:b1:a0:78:7e:cc:7b:55:19:a6:79:
                    35:49:25:d1:4b:7c:db:14:d9:84:f8:a8:61:cd:00:
                    33:e1:78:41:e2:d0:86:7c:a5:7c:39:b8:1f:68:a1:
                    47:47:d7:99:29:29:14:e5:15:6b:3f:77:be:6f:b5:
                    ce:ae:e3:8f:ec:06:d4:58:11:b6:09:ae:46:6c:2e:
                    9a:d9:bf:a7:22:dd:55:d1:65:52:b3:b8:39:bb:94:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:73:4E:FD:2F:2E:E4:F1:94:3D:3E:C1:B2:CC:4C:B9:06:09:A5:49
            X509v3 Authority Key Identifier:
                keyid:FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38332e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:ad:9e:92:a6:97:5d:8c:79:5a:95:17:d7:ed:80:d6:45:
         40:46:ce:5d:59:b1:e7:5c:d9:14:bd:d9:2a:43:92:16:6a:bf:
         1b:d5:47:bb:cb:70:bf:2f:5c:6e:3e:65:ee:d3:de:61:ea:c0:
         30:1b:74:63:a8:e2:01:ca:92:73:16:fe:3e:e6:9c:f5:f9:9b:
         46:f0:85:02:6c:a3:23:7e:9b:81:1e:4e:26:00:76:5c:fb:56:
         0a:79:d5:be:de:c0:fd:d7:5f:31:ed:e3:20:fc:fd:70:33:08:
         fa:d7:3f:f9:85:65:62:c8:89:a7:26:92:b0:dc:6e:29:d9:e7:
         66:ef:f5:54:b2:17:56:ac:5a:aa:0e:e5:96:6c:a9:bc:15:45:
         67:a1:e0:62:d7:b9:0f:8b:22:8f:fc:0e:9a:01:96:18:a3:ce:
         d5:b4:64:bb:f6:81:35:65:6a:6e:50:c4:04:7c:75:44:b4:b1:
         f2:6b:35:4b:82:3e:4c:bf:4a:63:fa:dd:49:15:6e:a6:bc:90:
         7b:bb:3f:9e:91:50:2d:6d:be:34:cd:77:24:03:3c:71:0f:28:
         68:5e:52:3d:43:08:31:57:58:6d:fb:3d:55:e3:6f:a2:10:69:
         5a:ec:9f:11:ef:2b:87:e7:90:f3:f4:45:df:a4:47:81:d1:7d:
         e4:07:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org