Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35342e302f32342d3234203d3e203631373438.roa
File:                     3133312e3130302e35342e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          zLbM71156r0cQBrmYX97LL4bqg6pEP21qUTvAM7SiP4=
Subject key identifier:   BE:FB:55:10:67:99:37:E2:0F:7E:B1:96:B6:6F:A0:D2:DD:6B:83:5B
Certificate issuer:       /CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
Certificate serial:       35E6BF622EE73D52AF8F0CC112220CF843C0E9E0
Authority key identifier: 24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35342e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:04 +0000
ROA not before:           Wed 10 Apr 2024 19:14:04 +0000
ROA not after:            Wed 09 Apr 2025 19:19:04 +0000
asID:                     61748
IP address blocks:        131.100.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e6:bf:62:2e:e7:3d:52:af:8f:0c:c1:12:22:0c:f8:43:c0:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Validity
            Not Before: Apr 10 19:14:04 2024 GMT
            Not After : Apr  9 19:19:04 2025 GMT
        Subject: CN=BEFB5510679937E20F7EB196B66FA0D2DD6B835B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:dd:ab:c4:cd:04:cb:88:13:b5:a7:4c:eb:
                    a4:e5:1a:b3:20:26:11:34:4f:a3:14:a3:d6:4c:ba:
                    9c:b9:93:a2:2b:22:f8:cd:41:1a:d6:5d:dc:fd:8a:
                    c9:01:b7:37:a7:ad:69:59:d7:68:2a:fd:cd:5b:71:
                    bc:1d:6f:97:a2:ff:61:e0:52:59:36:17:98:28:57:
                    f8:dd:10:51:aa:ba:b3:03:ba:a8:26:93:e6:f3:e9:
                    ce:63:cc:ed:4d:9f:df:43:eb:98:14:ce:7f:f9:98:
                    b9:dd:f0:e5:6d:ec:78:a0:10:ab:8a:81:91:2c:f9:
                    57:2c:ea:e6:37:b2:51:fd:ca:d3:8d:2d:98:ab:d4:
                    d1:22:95:7b:0e:14:21:2a:29:a1:fe:03:f3:a2:a4:
                    54:77:82:da:7e:3f:06:d2:ab:28:c1:37:39:bd:52:
                    7d:03:c0:83:a9:ee:8d:bc:01:57:c9:da:3f:36:96:
                    89:db:e8:8a:47:9a:80:06:0a:a2:a8:a0:1e:d6:78:
                    66:2f:9c:ce:0d:c0:11:b6:be:5f:fd:eb:01:d5:6c:
                    c5:30:b3:86:27:1e:98:d7:b0:37:e2:b1:03:79:f6:
                    84:62:1a:6e:09:e6:5c:31:83:10:15:dc:f1:39:d6:
                    89:26:e6:e4:2b:49:26:62:ec:da:d2:d5:7e:5d:6f:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:55:10:67:99:37:E2:0F:7E:B1:96:B6:6F:A0:D2:DD:6B:83:5B
            X509v3 Authority Key Identifier:
                keyid:24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/3133312e3130302e35342e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:3a:8b:ab:47:3d:e2:5d:c4:18:80:6c:5f:68:34:f7:31:
         a3:10:f0:58:82:ca:16:72:93:6c:f3:c2:94:6f:7b:d1:50:fd:
         97:19:d4:85:de:ed:f9:89:04:f9:4b:0d:05:de:70:57:e4:9a:
         d1:42:bd:38:dc:1c:45:ca:5e:68:4b:15:ae:73:da:d1:e6:89:
         35:95:09:87:8f:25:f3:a9:af:5f:79:1c:e8:2c:15:ea:2c:75:
         15:2c:1c:e7:87:e9:9e:a4:5c:ac:ca:96:73:f8:74:f1:f1:b7:
         af:13:51:62:c3:2d:25:1a:5e:01:6a:8b:56:8a:f7:d1:7c:89:
         67:5b:02:b7:44:8c:70:3f:bf:10:b2:88:94:1c:5f:06:8b:72:
         90:9a:26:cc:95:e3:76:b1:42:1f:eb:74:bb:b4:3b:c4:4f:ec:
         34:e7:76:8a:1d:07:4b:54:bd:db:ab:d6:c8:60:d6:13:90:ff:
         e7:e4:a9:c5:5d:dc:b5:b0:53:91:7a:26:74:d0:18:ef:91:40:
         9b:e5:f7:4f:48:87:fe:81:a6:d0:83:eb:85:3c:fe:af:15:ba:
         95:1b:3a:4f:c6:8f:f7:24:f4:a1:b8:ac:b6:dc:9e:c0:43:b5:
         34:37:8f:47:5f:4a:60:8c:57:a3:d9:e2:c2:10:25:be:d1:dc:
         b2:fb:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org