Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134302e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          jrU9+dYLOZl3DN1AlgfuO+4BEUEBYuLLxUOKTJGCoSQ=
Subject key identifier:   B3:00:97:0F:27:EB:6A:28:C2:EC:B0:41:83:A1:F6:D3:EC:09:BC:6E
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       F42D6CD509BD14DBA069F2CD6A815ACAEA7896
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:11 +0000
ROA not before:           Thu 04 Apr 2024 15:12:11 +0000
ROA not after:            Thu 03 Apr 2025 15:17:11 +0000
asID:                     61885
IP address blocks:        131.0.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f4:2d:6c:d5:09:bd:14:db:a0:69:f2:cd:6a:81:5a:ca:ea:78:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:11 2024 GMT
            Not After : Apr  3 15:17:11 2025 GMT
        Subject: CN=B300970F27EB6A28C2ECB04183A1F6D3EC09BC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:6c:ef:4a:08:2b:0b:d1:3b:cc:f3:cb:76:
                    89:04:58:1b:86:88:24:73:bd:ed:f4:a1:a6:66:6d:
                    ea:6a:67:15:ed:bc:fc:3e:58:48:9c:58:fb:ca:98:
                    3e:40:cd:11:fe:70:d8:37:ba:ff:f0:dc:62:78:56:
                    e8:68:69:a8:0a:cf:da:f9:7d:9d:f3:8b:cc:f4:4d:
                    eb:dd:58:77:0b:bb:3e:e7:81:53:ba:fa:be:0e:92:
                    28:bf:29:e9:c6:04:bf:5b:a9:35:91:97:ec:6e:f2:
                    dd:02:7a:8a:58:e5:2c:ed:f4:40:90:de:ff:e1:92:
                    fe:d1:58:04:b2:95:79:f4:85:13:0e:cb:eb:b6:46:
                    e8:1a:91:c3:98:e6:68:9f:c2:cf:da:e9:8f:7b:b5:
                    8a:26:42:c2:ba:f7:d9:00:87:d6:52:2b:1e:41:43:
                    6b:43:76:63:ea:40:30:74:a6:18:18:c6:46:82:79:
                    e1:8f:2e:85:d7:4f:66:ca:60:ff:87:4a:95:93:6e:
                    c1:62:4b:39:03:22:b5:4c:75:b2:3f:96:89:95:44:
                    81:16:5a:d8:9b:78:42:d0:98:6a:91:7e:82:a1:73:
                    01:fe:74:19:94:00:f2:0a:37:e0:4b:d6:1f:57:81:
                    b3:60:af:3d:3d:27:61:97:6f:fc:a0:5a:38:65:f5:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:97:0F:27:EB:6A:28:C2:EC:B0:41:83:A1:F6:D3:EC:09:BC:6E
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134302e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:71:cc:ae:d4:0b:a9:7c:cd:c5:7b:fa:91:05:c5:56:09:8b:
         b0:09:63:ef:86:f9:60:68:4d:cc:c7:63:00:98:7b:ba:7e:43:
         22:fc:33:27:7c:c4:85:48:37:27:77:a2:55:a6:fd:1e:30:fc:
         2d:41:f5:f5:1c:67:a5:8a:32:75:84:ba:24:4d:94:e1:75:b1:
         bd:77:45:86:dc:56:7b:58:ef:f8:d2:99:b3:41:46:42:dd:57:
         64:42:11:73:f3:ab:79:ab:3e:72:07:b3:7f:36:be:cb:27:f3:
         70:2b:54:93:33:d7:b4:75:2c:fd:c6:5b:5f:99:f3:b4:68:28:
         48:7c:c7:80:a9:40:97:47:90:d7:06:7c:c6:7e:79:d2:08:62:
         c6:b5:a7:1f:87:4f:50:8e:12:a4:33:d3:85:1c:fa:bf:12:26:
         ed:10:c1:8b:a4:94:0f:17:ba:a3:da:02:31:c9:23:b9:b6:ff:
         7e:c8:f8:03:6b:f2:b4:5a:08:72:68:3d:7e:8e:e6:15:48:60:
         03:7c:5d:13:1c:d4:74:b6:fc:51:74:b2:c4:b6:49:6a:77:0b:
         fa:b4:44:0a:de:60:b8:54:dd:76:41:62:d7:8d:6b:9b:de:47:
         a8:61:35:e1:94:f5:e2:fb:cf:c1:c3:ef:93:4d:ac:62:60:0d:
         ac:3c:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org