Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32332d3233203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32332d3233203d3e203631373438.roa (raw, json)
Hash identifier:          TRMENi5aleqY1zaUZdadNwHrxs2cg9wRIuiSkX6ZfCo=
Subject key identifier:   E1:63:48:9C:3F:2F:17:24:77:CD:FA:E9:71:47:15:46:69:F7:67:C8
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       5C9C09FA398B7E80A5EB859D8440C7119CECCBF0
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32332d3233203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:48 +0000
ROA not before:           Wed 10 Apr 2024 19:13:48 +0000
ROA not after:            Wed 09 Apr 2025 19:18:48 +0000
asID:                     61748
IP address blocks:        131.100.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:09:fa:39:8b:7e:80:a5:eb:85:9d:84:40:c7:11:9c:ec:cb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:13:48 2024 GMT
            Not After : Apr  9 19:18:48 2025 GMT
        Subject: CN=E163489C3F2F172477CDFAE97147154669F767C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:bc:5d:f7:0b:e1:7e:7e:7e:0c:9e:0d:e9:
                    8d:87:7c:04:3b:1a:0d:ec:e5:06:3e:46:69:d4:f9:
                    c3:d8:65:8b:11:f9:84:a5:bf:f9:63:d0:cc:21:1a:
                    8b:8b:88:86:1f:91:80:4b:17:75:d1:3d:0e:ed:68:
                    98:21:a5:a7:95:2b:1b:33:c2:5d:4a:d8:7b:80:d6:
                    c9:5d:39:55:cc:d8:8d:17:2d:d0:be:df:50:ae:9f:
                    e6:85:5d:02:be:1c:67:de:5f:9e:de:df:a1:93:1a:
                    b6:2f:e8:87:5d:b6:a3:f3:d3:e7:5b:1b:8a:64:5e:
                    0e:1f:56:f4:ca:99:70:76:b2:91:9a:24:45:db:41:
                    6e:3d:ea:2e:ef:b4:c1:15:7a:1c:94:b1:94:4c:79:
                    06:1c:1b:bb:45:08:36:a2:e3:dd:21:aa:af:38:a0:
                    4c:95:c8:44:5c:0c:54:d1:dc:f6:6c:bf:d2:8e:d6:
                    6d:84:10:e1:95:36:b5:bb:06:1c:03:4e:c7:77:9f:
                    b7:3f:c5:fa:f1:02:bb:5c:77:09:f5:94:c8:54:06:
                    90:b2:53:dd:a2:cf:41:3b:32:30:87:5b:0e:f3:14:
                    11:12:6f:1d:25:87:69:75:22:c4:fb:cf:a3:36:cf:
                    a3:cc:ed:88:d7:93:e5:d2:93:66:0d:0d:44:64:20:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:48:9C:3F:2F:17:24:77:CD:FA:E9:71:47:15:46:69:F7:67:C8
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32332d3233203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:c8:25:c2:a9:fd:1c:af:78:e7:20:40:19:84:1b:fd:71:
         a5:62:97:29:d5:9a:aa:43:9c:86:5a:be:7d:86:60:04:c9:e1:
         ed:aa:5b:a2:fa:0a:d2:53:b2:63:9e:5b:3e:f7:16:b0:5e:35:
         a8:2a:d2:ae:d4:36:34:2b:3d:19:04:f8:0e:b4:ee:e2:a2:c7:
         f6:c7:42:78:61:36:c5:55:ce:88:3d:ed:ef:86:36:57:ae:f8:
         db:63:42:17:83:a5:67:31:00:89:00:90:69:ca:7e:0b:47:a9:
         66:a6:a3:42:51:3f:ab:f3:92:c6:bb:52:1f:89:f8:0a:34:a5:
         2a:07:ba:fd:81:ef:98:5b:50:f8:2d:04:9b:26:44:9e:33:f5:
         0d:ae:28:de:bb:6e:57:bf:87:73:59:7d:0f:7d:e3:fb:0d:8c:
         44:6b:7b:d4:b1:31:99:15:87:96:9e:ed:e5:e2:f5:aa:7c:7a:
         c6:09:64:87:a1:a1:43:fd:5c:e1:52:5f:a9:74:c5:1a:b6:af:
         d6:8b:96:29:77:6e:82:f0:38:a7:44:d3:04:ab:da:79:e7:c0:
         c7:c4:32:74:48:d2:3e:fc:73:35:77:35:50:95:ab:e2:b5:7b:
         6f:e9:ee:e8:a6:80:77:b6:0f:f7:08:a2:d5:0a:c3:e3:f9:26:
         6b:44:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org