Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier:          g/x1MvhjG6/MMrKsJE6dk10yQkKb5BXgENzQXNHYGkU=
Subject key identifier:   EF:99:5C:E8:7A:BB:62:8C:29:51:89:14:50:4E:0C:C6:79:3B:49:92
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       3400033A0B68B2E151CF3EDC9966C6FA07F3A94E
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:45 +0000
ROA not before:           Wed 10 Apr 2024 19:13:45 +0000
ROA not after:            Wed 09 Apr 2025 19:18:45 +0000
asID:                     61748
IP address blocks:        131.100.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:03:3a:0b:68:b2:e1:51:cf:3e:dc:99:66:c6:fa:07:f3:a9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:13:45 2024 GMT
            Not After : Apr  9 19:18:45 2025 GMT
        Subject: CN=EF995CE87ABB628C29518914504E0CC6793B4992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:09:ab:eb:0c:c4:8e:04:f7:a3:57:0e:22:
                    45:89:95:7d:e8:c8:ce:f2:ac:95:78:b9:6c:65:29:
                    f3:71:3c:52:79:00:a6:06:e1:e1:94:cf:dd:4f:6a:
                    65:0c:91:30:6b:0d:eb:e3:e8:26:47:5b:af:79:64:
                    c7:12:c0:00:4e:dd:dc:0d:09:2e:df:d8:c2:76:5d:
                    e0:15:a2:82:95:51:ac:2b:15:3a:13:a5:e9:77:99:
                    02:af:77:c3:8b:f2:8a:54:fc:89:02:87:c1:42:d8:
                    3f:86:d4:71:39:8c:d1:0a:e6:00:0a:8b:09:66:cd:
                    be:ce:11:e2:88:31:9a:37:d3:47:e3:46:39:e6:a8:
                    d0:7d:e8:b3:e2:93:95:b2:61:11:47:f4:2d:b5:9c:
                    80:d8:b1:72:89:fb:9f:8b:84:bd:1e:78:96:05:5c:
                    cd:58:99:18:cc:06:1d:5c:2f:dd:01:27:13:8a:db:
                    ce:46:59:3a:68:f8:f6:63:45:18:b2:10:ad:39:f7:
                    f1:2d:97:50:71:21:12:ff:de:44:28:54:5f:4d:82:
                    91:f2:a3:54:50:63:ca:41:23:d3:95:36:fb:72:90:
                    fc:29:e7:a8:13:60:37:18:31:5a:d5:a9:e3:a4:ee:
                    87:70:f7:5e:0b:9c:10:db:bb:eb:8c:07:95:5e:1b:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:99:5C:E8:7A:BB:62:8C:29:51:89:14:50:4E:0C:C6:79:3B:49:92
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:a8:6d:18:93:29:1d:01:db:0b:1d:bb:ec:3a:c1:c4:d5:
         af:ec:c4:e6:37:f5:98:00:7f:b0:19:fa:c4:2b:62:87:57:c4:
         31:45:05:45:65:92:10:74:32:57:f8:87:bd:f0:05:6f:f9:48:
         5f:36:25:b1:45:65:3b:f0:fe:fb:1e:4e:47:3a:4e:13:29:66:
         c2:db:5f:02:9f:af:20:01:65:91:2a:61:fc:1c:9f:52:f7:49:
         a4:44:5d:e0:ee:bc:0e:93:be:28:ff:cc:45:27:a7:12:8a:fb:
         6e:3a:fb:50:8a:d8:fb:3b:8d:f5:e7:3f:e1:82:d0:f3:de:0c:
         49:57:fa:54:e9:af:74:5f:04:3b:0a:4b:f9:e3:25:f9:c6:83:
         37:3b:bd:73:92:91:20:33:ad:0d:50:2e:8b:63:45:32:ad:dc:
         33:5c:4c:24:fb:11:5d:32:c8:69:0b:c4:40:03:dd:49:40:fe:
         e2:61:05:6f:f5:99:86:44:6e:01:41:6d:cc:bc:5f:8c:5b:c0:
         7e:b6:38:ee:60:f8:6f:99:3e:80:1a:47:41:d3:c5:f4:82:61:
         b6:39:92:70:04:2b:b4:d3:20:2f:83:a2:f8:50:9d:15:ea:21:
         f0:0a:97:70:c9:65:24:a6:a7:42:98:1f:c5:bc:ad:0b:72:98:
         1f:e8:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org