Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          Te8MZRYSljlpXskV7dudVek3QT90SfftQpzYI4DV5HM=
Subject key identifier:   E9:C6:36:13:41:9B:91:C9:86:CD:32:C7:FC:F6:55:13:E4:F1:84:0D
Certificate issuer:       /CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
Certificate serial:       3FCFB1A2D9E0BA8D03A4E6E4908474690AC3C379
Authority key identifier: EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 30 Jul 2024 21:36:24 +0000
ROA not before:           Tue 30 Jul 2024 21:31:24 +0000
ROA not after:            Tue 29 Jul 2025 21:36:24 +0000
asID:                     53107
IP address blocks:        131.100.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:b1:a2:d9:e0:ba:8d:03:a4:e6:e4:90:84:74:69:0a:c3:c3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8C27663AB4EE960A9C52C7193BD353B940D514
        Validity
            Not Before: Jul 30 21:31:24 2024 GMT
            Not After : Jul 29 21:36:24 2025 GMT
        Subject: CN=E9C63613419B91C986CD32C7FCF65513E4F1840D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:6b:66:d8:8e:6e:f6:8b:2a:12:71:13:3e:
                    ea:f0:b4:56:71:75:9d:4e:52:83:4c:fc:c0:4c:0f:
                    5c:c5:ba:8f:a5:95:3a:db:41:ce:71:65:ae:8f:73:
                    8d:cd:73:29:9d:c4:19:cd:00:a6:f6:0c:11:79:7c:
                    c2:1a:9e:94:a0:e2:61:b8:1b:29:48:20:1d:d9:0e:
                    9a:96:03:e8:9b:31:ce:7f:93:78:a0:79:36:e7:7a:
                    02:c9:62:94:5d:a7:61:2c:76:10:47:69:6b:03:b6:
                    26:e5:8a:02:f6:13:46:47:31:67:3d:38:c6:3f:31:
                    c5:f8:68:01:b8:b3:f7:7d:ed:ea:ff:43:2c:8d:bf:
                    db:8e:36:bf:05:9f:d5:4b:b9:d9:f9:1f:51:14:dc:
                    64:e7:eb:1c:00:9d:a6:a1:a3:50:79:5f:c4:bd:57:
                    b5:cd:f4:85:17:ed:b0:9a:24:c2:eb:7f:95:0d:6d:
                    0e:90:5d:c6:34:cb:a8:71:50:52:b4:63:b7:59:ab:
                    30:10:98:08:8d:a5:8b:14:3e:60:9f:2c:70:9d:77:
                    85:33:82:86:db:01:b2:25:c9:ba:62:e9:12:80:29:
                    93:75:4e:83:53:82:3b:27:eb:b2:43:45:b7:98:01:
                    86:a0:57:b9:44:e6:6a:e8:7f:92:11:5e:2d:1b:4b:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:36:13:41:9B:91:C9:86:CD:32:C7:FC:F6:55:13:E4:F1:84:0D
            X509v3 Authority Key Identifier:
                keyid:EA:8C:27:66:3A:B4:EE:96:0A:9C:52:C7:19:3B:D3:53:B9:40:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8C27663AB4EE960A9C52C7193BD353B940D514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/1/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:96:67:8b:5e:06:2b:a5:3e:94:9c:17:65:ce:a2:fa:c7:
         7b:58:3b:70:56:91:59:41:e1:a0:ea:ba:81:4f:34:90:a2:b9:
         a1:e2:9b:10:a4:f2:74:b5:09:60:bc:f7:a4:ba:ce:f4:9e:5d:
         58:a6:05:cf:7d:5b:a3:90:00:03:89:4a:f8:ba:ce:6c:28:1f:
         72:67:23:9d:b4:eb:c2:5d:8d:ed:01:db:bf:5d:35:85:3f:00:
         a7:43:64:e2:ac:e8:b5:4c:7c:94:94:b4:51:9e:5f:47:8e:66:
         65:75:16:cf:ad:9e:9a:dd:b6:ad:27:31:50:97:41:08:09:bd:
         1f:2c:aa:82:61:0e:55:8e:2d:c7:34:ae:41:ee:8f:af:41:d8:
         e3:3c:f1:e8:60:e6:4a:f9:4c:d2:ac:a6:d4:b8:ad:27:6a:c3:
         1e:26:a2:80:48:2c:22:08:8b:ae:02:9f:31:d5:b3:dd:00:07:
         b5:6b:9a:80:0c:f4:89:80:ef:51:14:01:72:dd:63:25:f8:ce:
         91:0d:b4:59:e9:e7:2c:ea:f8:2e:78:36:8e:8a:11:81:eb:09:
         c6:39:2c:cc:d4:74:47:b2:4e:cf:7a:7f:5e:8e:50:c4:cb:a3:
         83:76:6c:60:a8:76:9b:6d:47:98:84:77:ac:ea:d4:d4:28:b3:
         b2:e5:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 10:33:49 2024 by rpki-client on console-fra.rpki-client.org