Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa
File:                     3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (raw, json)
Hash identifier:          +312HbPx12zsPIATL255o5UZGTDH+QpzHhFHm2qEvKg=
Subject key identifier:   FA:DB:F5:48:95:EA:58:63:DA:2A:74:83:07:98:F9:5D:D1:FA:D0:F0
Certificate issuer:       /CN=E57F8D91E328DC79CA4961B77D81A3140C83DB08
Certificate serial:       13DE70CD6D72D820CCC781A141EFBC29F7B22E27
Authority key identifier: E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa
Signing time:             Sat 01 Jul 2023 12:48:00 +0000
ROA not before:           Sat 01 Jul 2023 12:43:00 +0000
ROA not after:            Sat 29 Jun 2024 12:48:00 +0000
asID:                     61638
IP address blocks:        131.100.136.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:de:70:cd:6d:72:d8:20:cc:c7:81:a1:41:ef:bc:29:f7:b2:2e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E57F8D91E328DC79CA4961B77D81A3140C83DB08
        Validity
            Not Before: Jul  1 12:43:00 2023 GMT
            Not After : Jun 29 12:48:00 2024 GMT
        Subject: CN=FADBF54895EA5863DA2A74830798F95DD1FAD0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d1:44:a4:33:7e:bf:ab:16:00:78:9c:d5:68:
                    d5:b9:eb:d4:ef:ac:2e:a1:2c:81:21:4d:14:7c:7d:
                    99:06:63:79:7e:d4:0c:38:38:90:c8:a9:dd:3b:6a:
                    90:3c:7b:5b:96:52:b9:4c:5b:f9:31:93:25:bd:b0:
                    e3:cf:77:8e:b1:b6:c2:78:d2:69:cf:a3:f4:f9:5b:
                    bb:48:9a:92:a1:f4:3b:39:15:88:6c:88:85:83:43:
                    1e:d2:a8:18:da:1d:68:f0:c0:df:f9:9a:b4:24:18:
                    d9:0a:c6:92:1f:4c:67:54:c0:74:00:21:72:9d:2e:
                    8a:e5:cb:be:54:58:6c:05:0a:6f:2c:42:56:7c:be:
                    78:a4:f5:e4:c7:1d:b0:95:f7:e8:82:41:56:f8:10:
                    b0:1e:d2:8b:c8:fa:5c:98:3e:35:24:e4:14:f7:b2:
                    17:10:d8:f9:71:64:c9:2b:1d:69:61:aa:df:5b:06:
                    b7:bc:e9:d7:8d:59:91:0f:7c:6c:b7:c7:a7:0d:95:
                    0a:c4:74:a2:12:32:68:3f:b3:43:c0:07:34:33:da:
                    eb:5d:96:54:fa:7d:6b:a8:9c:a9:51:ad:e9:ab:92:
                    8a:6a:df:ff:01:04:3e:eb:38:17:2e:d3:52:ac:ad:
                    7d:6b:52:24:f9:9f:95:08:55:21:f5:8b:b4:a0:82:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:F5:48:95:EA:58:63:DA:2A:74:83:07:98:F9:5D:D1:FA:D0:F0
            X509v3 Authority Key Identifier:
                keyid:E5:7F:8D:91:E3:28:DC:79:CA:49:61:B7:7D:81:A3:14:0C:83:DB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E57F8D91E328DC79CA4961B77D81A3140C83DB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/0/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:da:4a:26:16:38:b1:46:13:4f:f0:73:ec:35:52:2f:13:7c:
         a3:1c:6e:fb:47:37:68:a4:f4:58:94:1d:37:41:f4:3c:49:bb:
         a2:fa:a4:b5:6f:e3:75:1a:5a:0f:32:ec:7f:32:02:09:fd:d1:
         80:99:a0:d7:c1:ca:49:4e:02:8c:4f:89:67:0b:4c:dc:f8:98:
         69:ea:ea:28:54:ae:45:95:46:b3:06:0a:3e:f6:9c:e6:6f:6b:
         31:77:b2:e3:cd:0a:90:90:6f:cc:6f:b7:36:30:1f:7a:4f:e1:
         bc:50:9f:e7:a2:ad:1b:34:a3:f6:bf:a6:dc:14:d3:b7:01:37:
         97:26:bc:08:21:d9:d6:12:ef:e7:eb:9a:60:11:36:6d:c6:40:
         c2:a1:8b:db:50:d3:78:5c:ed:c0:d5:ac:5b:9b:d0:91:13:43:
         96:51:f2:a6:a5:70:5b:43:fa:bb:60:77:95:1e:d0:43:ae:95:
         70:ed:27:ce:8e:68:00:16:e5:e4:20:28:48:92:e7:97:2d:92:
         04:2d:62:d4:ea:48:f8:9d:7e:cb:c4:1f:62:22:29:59:5f:27:
         66:0d:d9:bf:50:ad:7a:e3:7d:21:8c:29:2f:bf:26:94:0f:4a:
         f0:2c:ea:f3:fc:34:cc:45:53:7a:5a:f5:b6:f6:a7:31:b7:c9:
         ae:58:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org