Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3234203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32322d3234203d3e203631373438.roa (raw, json)
Hash identifier:          xuEOjKL4zSrdXzQWMfjJmdnDGvO0f+XL423z+PnWvaM=
Subject key identifier:   52:C0:20:77:44:51:A0:6B:E3:26:76:57:50:CD:38:98:F8:03:EF:93
Certificate issuer:       /CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
Certificate serial:       0B04499A9FE2F155BB7DB6E123777392BCE73146
Authority key identifier: E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3234203d3e203631373438.roa
Signing time:             Tue 20 Jun 2023 18:32:00 +0000
ROA not before:           Tue 20 Jun 2023 18:27:00 +0000
ROA not after:            Tue 18 Jun 2024 18:32:00 +0000
asID:                     61748
IP address blocks:        131.100.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:04:49:9a:9f:e2:f1:55:bb:7d:b6:e1:23:77:73:92:bc:e7:31:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
        Validity
            Not Before: Jun 20 18:27:00 2023 GMT
            Not After : Jun 18 18:32:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:f7:e3:75:8e:08:92:2e:cf:40:2e:75:e3:
                    ac:4c:87:0d:04:56:83:f8:f1:4f:7e:ae:42:bf:c9:
                    9d:38:08:17:8b:c5:ed:bf:5c:1b:c1:a2:e7:0e:3e:
                    61:eb:89:45:42:ba:2d:f0:b0:1e:fd:fc:ea:f7:83:
                    f3:e1:20:d8:b0:38:46:80:80:52:04:2b:b8:bf:3b:
                    95:37:27:61:da:44:ea:2f:db:0c:3e:e0:c5:53:21:
                    51:44:f0:cf:23:79:c3:83:32:8e:bb:16:85:e0:a8:
                    af:ee:9d:73:34:c1:91:b8:92:cc:3e:1b:bd:74:49:
                    e4:7b:85:db:a4:c1:6d:54:30:c6:de:58:a4:1a:94:
                    8b:4e:94:a2:f7:ca:e0:e5:e1:a5:1e:1a:03:31:95:
                    34:65:57:1c:d8:5f:ed:a7:ca:0a:53:b5:96:00:28:
                    ec:69:e8:9e:11:df:2d:98:02:42:98:9e:9e:f9:13:
                    fd:21:e0:6c:62:0f:e2:54:4e:72:62:fb:47:36:6e:
                    f7:75:30:9f:53:54:6f:04:9d:4d:78:d5:1d:92:34:
                    a3:0c:69:3b:af:ba:62:b0:9d:e1:21:88:bf:ed:82:
                    a6:fa:49:d5:ba:c8:30:82:e6:c6:d2:b9:fb:1d:80:
                    61:43:cb:a5:f7:fa:9d:d8:d3:13:c4:b3:75:15:5d:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C0:20:77:44:51:A0:6B:E3:26:76:57:50:CD:38:98:F8:03:EF:93
            X509v3 Authority Key Identifier:
                keyid:E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:05:8e:88:56:dd:ef:11:7d:f3:ef:e5:2c:84:08:73:e5:
         dc:31:ec:8d:db:6a:d2:27:a0:41:c0:42:f9:a9:87:a2:b8:9d:
         cc:0a:5f:0a:09:53:97:17:7c:9f:39:be:bf:0e:ff:9f:db:89:
         25:7b:cd:48:89:28:d1:47:b0:3f:62:40:47:59:a7:26:d7:39:
         32:80:09:78:4e:bc:64:b3:54:6b:6a:b4:e4:d7:86:cc:e9:84:
         22:6d:54:18:dc:ed:22:2c:61:82:03:ee:de:7e:83:03:cb:91:
         74:4e:5d:37:28:0a:a8:cf:91:cf:24:cb:45:13:58:7c:06:c7:
         e4:73:6e:bc:ce:3b:9f:88:4c:4c:82:3c:fb:4d:e4:8b:57:b3:
         9c:ed:d9:a8:3c:dd:98:a8:1a:33:54:87:8f:14:68:67:b9:a6:
         a2:4f:87:d1:c0:d9:91:d4:bd:2a:1a:a6:05:28:61:71:2e:b5:
         c1:d1:fc:ae:73:67:a8:fd:3e:fe:03:e6:da:78:e7:44:56:49:
         2a:bf:ab:a9:04:28:3a:6e:93:3a:0e:91:b6:34:47:8c:e5:14:
         23:3d:db:af:71:c3:e0:cc:60:bd:64:f8:40:73:c2:ed:14:c7:
         55:70:dd:43:0d:2f:d8:c9:4a:56:4e:f9:c8:03:3e:f5:68:4b:
         c2:d7:f1:4e
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUCwRJmp/i8VW7fbbhI3dzkrznMUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5Rjc3Njk2MDNFRTJDQ0FFNUVENTkwRjJDRUIyRDhC
NjQ1NTI3NDAeFw0yMzA2MjAxODI3MDBaFw0yNDA2MTgxODMyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY1REY3RTM3NThFMDg5MjJF
Q0Y0MDJFNzVFM0FDNEM4NzBEMDQ1NjgzRjhGMTRGN0VBRTQyQkZDOTlEMzgwODE3
OEJDNUVEQkY1QzFCQzFBMkU3MEUzRTYxRUI4OTQ1NDJCQTJERjBCMDFFRkRGQ0VB
Rjc4M0YzRTEyMEQ4QjAzODQ2ODA4MDUyMDQyQkI4QkYzQjk1MzcyNzYxREE0NEVB
MkZEQjBDM0VFMEM1NTMyMTUxNDRGMENGMjM3OUMzODMzMjhFQkIxNjg1RTBBOEFG
RUU5RDczMzRDMTkxQjg5MkNDM0UxQkJENzQ0OUU0N0I4NURCQTRDMTZENTQzMEM2
REU1OEE0MUE5NDhCNEU5NEEyRjdDQUUwRTVFMUE1MUUxQTAzMzE5NTM0NjU1NzFD
RDg1RkVEQTdDQTBBNTNCNTk2MDAyOEVDNjlFODlFMTFERjJEOTgwMjQyOTg5RTlF
RjkxM0ZEMjFFMDZDNjIwRkUyNTQ0RTcyNjJGQjQ3MzY2RUY3NzUzMDlGNTM1NDZG
MDQ5RDRENzhENTFEOTIzNEEzMEM2OTNCQUZCQTYyQjA5REUxMjE4OEJGRUQ4MkE2
RkE0OUQ1QkFDODMwODJFNkM2RDJCOUZCMUQ4MDYxNDNDQkE1RjdGQTlERDhEMzEz
QzRCMzc1MTU1RDVCOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA313343WOCJIuz0AudeOsTIcNBFaD+PFPfq5Cv8mdOAgXi8Xtv1wb
waLnDj5h64lFQrot8LAe/fzq94Pz4SDYsDhGgIBSBCu4vzuVNydh2kTqL9sMPuDF
UyFRRPDPI3nDgzKOuxaF4Kiv7p1zNMGRuJLMPhu9dEnke4XbpMFtVDDG3likGpSL
TpSi98rg5eGlHhoDMZU0ZVcc2F/tp8oKU7WWACjsaeieEd8tmAJCmJ6e+RP9IeBs
Yg/iVE5yYvtHNm73dTCfU1RvBJ1NeNUdkjSjDGk7r7pisJ3hIYi/7YKm+knVusgw
gubG0rn7HYBhQ8ul9/qd2NMTxLN1FV1bjwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFLAIHdEUaBr4yZ2V1DNOJj4A++TMB8GA1UdIwQYMBaAFOGfd2lgPuLMrl7VkPLO
sti2RVJ0MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZqMUNwQnhMZXIyRnhw
aEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAvRTE5Rjc3Njk2MDNFRTJD
Q0FFNUVENTkwRjJDRUIyRDhCNjQ1NTI3NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMTlGNzc2OTYwM0VFMkNDQUU1RUQ1OTBGMkNFQjJEOEI2NDU1
Mjc0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GajFDcEJ4TGVyMkZ4cGhKRkFC
OTZkQjRHb2ExTXlYUXlmR2FuR2tRdGFoQy8wLzMxMzMzMTJlMzEzMDMwMmUzNTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3MzQzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNk
NDANBgkqhkiG9w0BAQsFAAOCAQEANbIFjohW3e8RffPv5SyECHPl3DHsjdtq0ieg
QcBC+amHoridzApfCglTlxd8nzm+vw7/n9uJJXvNSIko0UewP2JAR1mnJtc5MoAJ
eE68ZLNUa2q05NeGzOmEIm1UGNztIixhggPu3n6DA8uRdE5dNygKqM+RzyTLRRNY
fAbH5HNuvM47n4hMTII8+03ki1eznO3ZqDzdmKgaM1SHjxRoZ7mmok+H0cDZkdS9
KhqmBShhcS61wdH8rnNnqP0+/gPm2njnRFZJKr+rqQQoOm6TOg6RtjRHjOUUIz3b
r3HD4MxgvWT4QHPC7RTHVXDdQw0v2MlKVk75yAM+9WhLwtfxTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org