Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134322e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134322e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          ZByoM13vzzoHzp3FX0syGsMFQT2IYwClAZseiKPhXY4=
Subject key identifier:   62:23:94:39:CD:D4:EF:B9:ED:7D:16:43:96:9A:0B:F4:6A:70:65:C9
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       771FAA768DFC28370A6C9CA901D97AF3D52204AF
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134322e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:12 +0000
ROA not before:           Thu 04 Apr 2024 15:12:12 +0000
ROA not after:            Thu 03 Apr 2025 15:17:12 +0000
asID:                     61885
IP address blocks:        131.0.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1f:aa:76:8d:fc:28:37:0a:6c:9c:a9:01:d9:7a:f3:d5:22:04:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:12 2024 GMT
            Not After : Apr  3 15:17:12 2025 GMT
        Subject: CN=62239439CDD4EFB9ED7D1643969A0BF46A7065C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:3a:84:49:ea:82:19:40:7c:34:de:bb:ac:
                    88:d0:67:9a:39:08:18:e5:a9:43:d5:38:fd:8e:23:
                    4a:05:8c:bd:4d:e7:bd:6f:2f:77:51:58:82:82:04:
                    92:4c:a9:d9:1e:94:a0:b0:94:8a:dc:3c:58:c3:23:
                    bb:b1:64:91:db:57:a9:53:ce:a4:4f:29:0e:8f:92:
                    e3:e3:72:05:1b:ed:51:ec:01:ba:6f:5f:13:83:6f:
                    66:29:7b:73:09:33:21:0c:50:ec:41:de:08:30:02:
                    c0:6f:61:32:8f:ec:63:be:f0:91:33:b7:17:3d:4c:
                    06:2e:3b:6c:97:22:a1:d2:93:ba:90:f7:43:f0:08:
                    6b:cb:f7:34:bf:e1:e6:97:28:16:2b:18:8f:46:52:
                    37:4b:1e:93:2f:d8:f0:5c:c0:5e:19:a2:97:9b:75:
                    e5:63:6d:7c:42:6e:81:16:42:d5:ba:70:80:95:fa:
                    92:e8:42:0a:04:2b:d5:e6:fb:f3:b4:82:f2:e7:82:
                    91:ac:b5:15:62:6f:6a:7b:10:56:7c:46:62:8b:bd:
                    15:4e:19:7c:b5:47:6d:eb:af:ea:ad:37:00:be:b2:
                    52:a8:f2:7a:cc:94:aa:95:7b:9d:4c:2c:ff:7c:c0:
                    fa:a3:95:7a:3e:d1:41:09:ff:0a:38:df:ee:4c:64:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:94:39:CD:D4:EF:B9:ED:7D:16:43:96:9A:0B:F4:6A:70:65:C9
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/3133312e302e3134322e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:8e:3b:a6:a5:3f:d1:de:14:48:4b:c0:f8:d5:8f:77:19:
         aa:bb:f9:fb:76:88:bd:30:04:94:bc:5b:a3:2d:03:a9:38:c7:
         ef:0e:13:79:ab:c1:b5:7d:ad:f0:1b:7b:6c:7b:2a:6e:16:b4:
         64:0b:0e:01:ba:29:ad:06:f6:2a:24:4a:69:99:2d:42:fa:d9:
         60:74:bd:ce:a2:77:07:1d:9e:ac:1a:6e:27:06:af:e3:6d:5c:
         49:a7:d0:1f:5e:08:69:11:b0:48:2b:3f:52:ca:ce:51:94:0b:
         42:96:4e:93:c7:15:9a:ff:e5:2b:37:55:08:2c:7f:8c:3f:8d:
         85:6e:31:b0:4a:c1:fa:d9:00:66:35:d2:c3:54:5d:f3:b8:61:
         ad:f4:27:5e:58:5d:cc:2f:3f:08:dd:1a:f0:c0:98:c9:5d:b9:
         2c:11:e4:61:c6:30:db:cb:36:d1:00:98:6c:81:ad:d9:b4:3e:
         ff:43:7a:8d:05:1c:86:76:ea:2a:a0:bb:8f:8a:7b:49:c2:ad:
         dd:a1:22:4f:64:22:d2:d6:bd:eb:61:2d:cf:ae:ad:84:21:cc:
         d7:62:53:73:e6:b9:67:43:bf:46:8e:3c:82:9b:c1:86:11:7d:
         f4:d7:43:a4:8d:ef:84:c1:2d:99:29:93:ae:35:7b:1f:0a:d9:
         73:5a:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org