Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32342d3234203d3e203631363730.roa
File:                     3133312e3130302e3130342e302f32342d3234203d3e203631363730.roa (raw, json)
Hash identifier:          g5UyDUVMhRH9H8Blgpg6fAnSaG67fUCvMw6DHBncm/o=
Subject key identifier:   FE:D7:76:FE:93:F7:64:B5:9D:F4:C8:8D:3C:AB:48:50:2A:CE:77:B2
Certificate issuer:       /CN=235C1B5C008D278DFED43A1557D5D941F37370A3
Certificate serial:       63329E948B35E613B37D63306DBF93B7ADCDBF25
Authority key identifier: 23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32342d3234203d3e203631363730.roa
Signing time:             Fri 17 May 2024 20:39:32 +0000
ROA not before:           Fri 17 May 2024 20:34:32 +0000
ROA not after:            Fri 16 May 2025 20:39:32 +0000
asID:                     61670
IP address blocks:        131.100.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:32:9e:94:8b:35:e6:13:b3:7d:63:30:6d:bf:93:b7:ad:cd:bf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235C1B5C008D278DFED43A1557D5D941F37370A3
        Validity
            Not Before: May 17 20:34:32 2024 GMT
            Not After : May 16 20:39:32 2025 GMT
        Subject: CN=FED776FE93F764B59DF4C88D3CAB48502ACE77B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:07:ea:3e:33:d8:81:16:d4:b0:4d:48:96:02:
                    a5:3a:30:3d:e2:c8:a7:53:7e:d5:0f:cf:10:4a:86:
                    b4:9b:e2:d7:7b:9b:08:bf:92:81:04:c6:1b:50:b5:
                    1f:ae:bc:ba:4e:dd:b5:84:32:4d:43:04:aa:0f:cc:
                    dc:26:df:b7:1f:cc:e6:68:b6:ca:d7:06:fa:8d:6a:
                    3a:2c:ce:04:2d:56:70:04:b8:fb:86:9c:3c:23:39:
                    29:a3:76:20:6b:3c:21:09:71:a1:19:ae:5b:24:da:
                    fc:e9:38:96:1c:17:84:72:8e:53:51:55:f4:ee:3d:
                    60:b2:06:30:14:75:9b:15:c6:f1:16:9a:2d:81:f5:
                    cc:d9:df:93:dc:59:6a:0c:d2:2c:d2:87:d0:63:ed:
                    ae:72:11:08:50:94:9a:0f:d0:62:1d:52:11:d9:dc:
                    51:11:25:dd:e0:e6:ff:fc:21:10:60:a9:9f:03:7e:
                    43:5f:93:5a:98:80:0e:b1:9c:cd:86:2a:1e:65:a6:
                    25:cd:de:1b:2a:da:ef:69:ee:5a:15:cf:65:f1:b4:
                    a9:fe:14:69:da:a6:1f:97:e7:53:f4:7d:23:fa:89:
                    c5:55:08:f8:e0:5a:90:44:e6:ca:cb:89:3b:f7:e4:
                    9f:98:44:16:82:d9:7f:ee:81:dd:0b:7f:96:d6:7a:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D7:76:FE:93:F7:64:B5:9D:F4:C8:8D:3C:AB:48:50:2A:CE:77:B2
            X509v3 Authority Key Identifier:
                keyid:23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/235C1B5C008D278DFED43A1557D5D941F37370A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130342e302f32342d3234203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:44:01:7e:3e:c7:58:17:03:77:f6:9e:3c:a1:18:4f:eb:
         f0:52:67:0f:13:ac:78:73:f2:6e:24:ea:b6:6b:72:aa:9c:8e:
         06:58:02:5b:97:de:be:00:fe:4c:73:7b:e1:fd:e4:b6:5a:7e:
         7c:9a:30:b5:03:11:fb:53:6c:b8:ef:6b:f0:b1:ea:7d:cb:d8:
         59:e0:70:2a:2f:e7:b8:5a:2e:51:5b:f0:89:56:89:4e:b1:fc:
         a3:e7:24:d6:eb:3d:f0:de:95:5a:d8:7d:1d:d9:bc:ed:93:dd:
         c7:72:b0:37:79:1a:25:18:20:5e:c9:24:88:63:2f:f5:08:17:
         dc:98:1d:a1:53:c4:2d:9a:cd:2e:76:ce:cd:e5:8d:b5:d7:80:
         f7:7d:83:f4:d5:f1:e9:42:6a:a4:ea:b4:44:3a:c5:dc:bc:eb:
         57:34:40:bb:6e:29:53:3e:9f:b3:62:cf:eb:24:57:1c:a5:92:
         36:8b:73:57:7a:a6:ed:35:1e:17:b8:21:d0:28:2f:c2:e4:9b:
         51:99:0c:1b:eb:ff:6c:e7:cc:4f:8a:51:bc:7e:4f:6e:25:19:
         6d:b5:e9:54:85:58:df:3a:d7:66:7b:90:4a:e5:f9:a5:8d:0e:
         ce:83:f1:85:1d:31:f2:00:03:ec:25:33:94:f6:b0:f6:30:0b:
         3a:00:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org