Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa
File:                     3133312e302e36342e302f32322d3234203d3e203631383537.roa (raw, json)
Hash identifier:          rVtonvwTIcQ8vuVi3MSA2/iDhRB1vQMKghBBu2ym1vA=
Subject key identifier:   4B:E4:6E:B3:F3:B8:EC:89:46:CB:B6:9D:9A:2D:47:F1:25:70:F9:30
Certificate issuer:       /CN=41FB4D498A5F809C2A7531D26B5715142440352C
Certificate serial:       5F753166CE36ADC9F7CF793E50974D9C28CDFED8
Authority key identifier: 41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41FB4D498A5F809C2A7531D26B5715142440352C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa
Signing time:             Wed 17 Jan 2024 18:07:04 +0000
ROA not before:           Wed 17 Jan 2024 18:02:04 +0000
ROA not after:            Wed 15 Jan 2025 18:07:04 +0000
asID:                     61857
IP address blocks:        131.0.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:75:31:66:ce:36:ad:c9:f7:cf:79:3e:50:97:4d:9c:28:cd:fe:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FB4D498A5F809C2A7531D26B5715142440352C
        Validity
            Not Before: Jan 17 18:02:04 2024 GMT
            Not After : Jan 15 18:07:04 2025 GMT
        Subject: CN=4BE46EB3F3B8EC8946CBB69D9A2D47F12570F930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:25:6a:12:62:b2:bd:ea:4d:18:bc:fc:df:
                    c1:66:84:04:7d:08:22:06:c9:99:4f:ed:11:51:51:
                    e6:6f:c6:76:c5:0a:9a:03:c4:4e:0a:06:db:b2:08:
                    9c:9a:ec:24:b8:dc:3a:76:7d:1b:18:24:57:c5:d2:
                    17:e1:cf:a7:19:cb:33:78:fb:83:cf:ba:7d:b2:07:
                    2c:54:f9:c2:e9:90:02:44:6a:21:74:51:a9:22:c7:
                    4f:57:7a:0b:06:0c:e7:2a:6a:70:04:ef:79:01:da:
                    ce:5b:ab:3c:4b:9c:0a:0b:62:91:36:e0:70:4d:ab:
                    ee:26:62:16:2a:c0:7f:ad:94:53:20:ef:7c:cc:d3:
                    4a:07:3f:ce:1b:e0:4c:f8:f4:58:3a:f1:d1:4b:a1:
                    aa:21:ac:db:84:3f:00:0c:af:56:17:da:15:09:ea:
                    4c:85:e9:4d:24:8d:cf:4e:e6:29:a4:ac:6b:d6:7a:
                    cb:a0:dd:84:b8:20:c7:12:01:d0:10:fc:55:7a:50:
                    ba:a3:55:9c:40:22:72:87:ca:d7:a6:58:e8:6b:98:
                    8a:63:4c:91:c7:dd:78:21:8c:25:38:d6:c1:5f:9e:
                    38:31:d9:23:e7:cb:8a:78:98:58:2f:4d:25:96:73:
                    62:5b:cd:2d:ca:fc:e1:ba:29:45:35:d7:e3:a0:c9:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E4:6E:B3:F3:B8:EC:89:46:CB:B6:9D:9A:2D:47:F1:25:70:F9:30
            X509v3 Authority Key Identifier:
                keyid:41:FB:4D:49:8A:5F:80:9C:2A:75:31:D2:6B:57:15:14:24:40:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/41FB4D498A5F809C2A7531D26B5715142440352C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41FB4D498A5F809C2A7531D26B5715142440352C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EieYjvoPvoZbmgyson6AzTKSxPYwEfaPN7aYjPTctcV8/0/3133312e302e36342e302f32322d3234203d3e203631383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:de:0d:7e:e0:dc:0e:cc:f5:51:33:28:e5:1b:ce:7b:49:
         f9:13:69:67:2f:9f:93:a6:46:d5:cb:e0:95:67:d3:9e:2c:ac:
         5f:b2:20:81:d4:48:60:27:78:b3:5b:04:03:d4:14:f1:5b:20:
         98:3e:87:d8:4d:4c:4e:cf:71:0e:bb:ff:5f:d6:a9:ac:0b:1c:
         e7:e7:61:5d:eb:a6:93:da:49:a1:a0:59:dd:39:46:d1:a7:57:
         93:97:df:64:c7:82:ae:f7:f1:4d:a4:5d:c0:c2:9a:38:f0:ac:
         9a:4b:d9:89:24:a6:7c:11:fb:79:29:f2:08:5e:7d:56:70:c4:
         26:8e:29:ca:c2:09:64:71:6f:07:f6:29:e7:7f:8d:03:22:6f:
         e0:f0:08:7a:93:d7:db:35:6a:92:17:e6:5d:8d:3b:1e:cd:e7:
         f3:6a:ba:8b:2e:b5:96:6c:28:d5:76:80:25:0e:9a:67:b0:d0:
         96:dd:84:b0:b4:dc:07:36:be:a2:61:44:50:27:3f:53:9a:3d:
         3f:40:c6:be:f1:0a:0b:63:f7:3b:b4:a9:4b:63:8b:9e:5c:32:
         58:e2:87:4b:22:12:39:ad:61:2b:24:ee:4d:d4:2b:dd:d1:8e:
         82:04:21:4e:99:e1:5d:94:f1:50:70:f8:48:f8:e1:82:f8:98:
         8e:95:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org