Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          BZYMd51ZRaMV+6ueDVqcNm5EBKM7xDmJPRnuUY8Jw7A=
Subject key identifier:   BF:A3:E3:3A:25:6D:8A:07:D5:28:28:13:90:B5:35:41:E9:3E:BD:4E
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       2DD88C6334E339EC80EF5619613310772308E677
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:51 +0000
ROA not before:           Wed 10 Apr 2024 19:13:51 +0000
ROA not after:            Wed 09 Apr 2025 19:18:51 +0000
asID:                     61748
IP address blocks:        131.100.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d8:8c:63:34:e3:39:ec:80:ef:56:19:61:33:10:77:23:08:e6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:13:51 2024 GMT
            Not After : Apr  9 19:18:51 2025 GMT
        Subject: CN=BFA3E33A256D8A07D528281390B53541E93EBD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:52:7f:40:f4:d4:7b:7b:41:44:2b:70:4d:
                    f5:33:05:f3:95:dd:45:bc:85:4a:9e:30:5c:9b:14:
                    fb:72:49:24:f8:10:38:23:62:6b:2f:38:88:fd:87:
                    a6:37:e3:33:29:9c:db:fe:c0:c7:da:37:e5:45:0e:
                    9a:17:e2:0d:8b:bd:d0:93:42:c3:77:64:59:69:3a:
                    cc:ba:bb:83:95:0c:c4:e3:8e:6c:27:f2:55:02:47:
                    5b:a6:4d:bb:be:da:e8:06:00:25:da:54:d8:cb:a8:
                    ee:04:08:fa:73:f3:dd:e2:1d:43:f8:f3:2a:56:b4:
                    d2:90:40:df:f9:b2:74:c9:ab:32:81:21:0d:cf:d5:
                    be:06:4d:42:f8:6d:24:56:7c:cb:9f:d7:d0:27:39:
                    43:39:85:02:c0:77:90:f7:18:04:0a:cb:a0:0e:51:
                    c5:7c:ec:a5:ee:81:48:b1:c0:17:96:02:d0:ac:f0:
                    79:b4:81:99:3d:80:c1:31:90:45:e2:c3:23:b3:a8:
                    de:ff:b8:75:bc:42:57:85:68:c4:2b:44:36:05:37:
                    38:a9:0e:06:9b:71:59:d7:7a:c2:71:ca:7f:a0:73:
                    62:87:8e:10:17:90:d7:19:80:64:7b:62:e5:73:dd:
                    3b:91:67:8d:89:e6:42:4b:81:41:3a:f5:21:3a:7a:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:E3:3A:25:6D:8A:07:D5:28:28:13:90:B5:35:41:E9:3E:BD:4E
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:16:d5:15:1e:2f:22:9a:ab:2d:9f:af:5e:08:2b:a6:44:50:
         67:1a:f3:f7:9b:fe:eb:04:a7:72:af:9d:21:20:fe:37:02:48:
         2d:7b:43:1d:3c:fa:4c:12:04:d8:55:c8:a2:a7:b8:7b:8b:e9:
         2d:b4:ed:9f:59:2e:72:ef:08:d0:ad:70:c8:52:d4:af:dd:a4:
         70:12:ce:73:a3:fd:c5:c6:27:7b:c2:df:db:ea:36:ab:de:74:
         75:68:89:f8:bf:a5:22:ae:1c:06:20:ed:17:42:26:f3:fa:7f:
         32:df:1c:e4:ed:1b:88:2a:87:4e:18:dd:ff:fb:8a:e8:60:54:
         e9:07:ec:bd:05:03:75:0d:ba:41:f5:72:06:ae:9c:17:32:c0:
         a3:1c:2f:3e:80:e2:99:d8:86:56:48:5e:48:46:f5:8b:cd:00:
         b9:a9:dc:d1:6c:3e:15:87:b5:fa:a2:57:02:7b:81:48:79:a4:
         8c:c9:f8:8a:76:84:dc:40:b0:2a:6e:68:47:ee:93:83:97:46:
         af:c0:f9:c7:15:f0:16:72:0a:5a:b6:50:87:18:cd:da:93:47:
         59:5f:a2:55:6f:83:8a:28:dd:e7:8a:28:fd:68:10:72:8a:9a:
         00:42:29:cd:da:32:b5:68:c2:df:3b:57:2c:53:ce:71:5b:5c:
         91:57:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org