Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130352e302f32342d3234203d3e203631363730.roa
File:                     3133312e3130302e3130352e302f32342d3234203d3e203631363730.roa (raw, json)
Hash identifier:          +U8p3GSKHH6NEAylUzzMp/D+/ZFTyPmWjYlKd0AHdPM=
Subject key identifier:   BC:52:DC:E3:26:25:38:4F:9D:E0:25:24:24:55:7F:97:52:00:3E:EB
Certificate issuer:       /CN=235C1B5C008D278DFED43A1557D5D941F37370A3
Certificate serial:       1E71A2C1A233634AC7E9383551F5788C43FF76E3
Authority key identifier: 23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130352e302f32342d3234203d3e203631363730.roa
Signing time:             Fri 17 May 2024 20:39:30 +0000
ROA not before:           Fri 17 May 2024 20:34:30 +0000
ROA not after:            Fri 16 May 2025 20:39:30 +0000
asID:                     61670
IP address blocks:        131.100.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:71:a2:c1:a2:33:63:4a:c7:e9:38:35:51:f5:78:8c:43:ff:76:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235C1B5C008D278DFED43A1557D5D941F37370A3
        Validity
            Not Before: May 17 20:34:30 2024 GMT
            Not After : May 16 20:39:30 2025 GMT
        Subject: CN=BC52DCE32625384F9DE0252424557F9752003EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:cb:a8:86:3c:1a:f5:59:df:f6:7b:89:b6:
                    13:cb:4f:a0:95:de:27:19:fe:c0:f8:de:d0:ef:d5:
                    1d:c7:77:c2:0b:28:87:49:84:6e:05:27:11:be:5a:
                    05:78:d3:1d:1e:53:ba:ed:8e:dc:ca:7b:03:d3:63:
                    01:4e:bf:8c:3a:33:3b:de:76:0a:4a:1f:8c:5c:dd:
                    e9:a2:34:fd:f0:8b:77:ff:c8:a2:5d:81:3c:73:06:
                    6a:71:ee:41:cd:5e:1f:6c:34:bd:47:a1:a7:b9:74:
                    9b:fc:6f:b2:d9:8f:12:6e:47:7c:5d:ae:59:d9:9f:
                    6e:fb:df:a4:61:ad:c3:48:09:ce:4c:b8:9f:7d:59:
                    0f:df:01:db:30:a8:1e:1f:ba:f4:d8:ca:1b:92:49:
                    75:d2:74:d9:bd:07:2e:bc:eb:3f:e2:6e:8c:f6:3e:
                    fb:83:86:e5:23:d5:ee:e6:88:25:09:d4:96:d2:ff:
                    70:f9:8e:18:27:e1:b9:b9:6c:de:5b:14:fe:94:00:
                    6c:cb:82:db:8c:78:02:7e:99:8b:90:92:47:5f:9e:
                    cb:3d:e5:91:80:89:22:fc:11:6e:7e:cf:ff:f0:7d:
                    b7:82:bf:d2:4b:29:76:b9:07:21:c7:f5:1b:d3:55:
                    24:36:87:fb:6e:b7:65:d6:a8:8f:42:3a:ba:02:fb:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:DC:E3:26:25:38:4F:9D:E0:25:24:24:55:7F:97:52:00:3E:EB
            X509v3 Authority Key Identifier:
                keyid:23:5C:1B:5C:00:8D:27:8D:FE:D4:3A:15:57:D5:D9:41:F3:73:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/235C1B5C008D278DFED43A1557D5D941F37370A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/235C1B5C008D278DFED43A1557D5D941F37370A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUhNmCfpVUBACmjML8mw9GhU8sZNRWnzbBtBiSJDYdqZ/0/3133312e3130302e3130352e302f32342d3234203d3e203631363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d0:e4:73:b5:b4:06:fb:05:eb:d6:99:d8:1e:11:7a:43:ad:
         22:d8:c0:2c:26:80:0a:de:cc:a1:60:6d:4e:1f:a7:54:1d:b1:
         af:18:1e:d8:7e:a7:ce:23:8f:f2:8d:c6:d2:68:97:8b:a0:f2:
         35:a3:52:ca:ea:a9:12:34:d4:8d:da:9b:3f:de:c5:32:6b:ff:
         e9:95:c9:63:b1:31:d5:55:4c:87:bb:0f:6f:e8:ba:66:87:58:
         17:4f:40:c6:3c:1f:80:8a:ed:39:dc:aa:4c:10:c1:8a:79:ab:
         81:16:a8:e9:44:8a:52:07:97:26:cb:62:f0:2d:64:7a:f0:79:
         24:a7:98:cd:ad:d6:c6:04:68:36:78:4d:6e:21:84:8b:a9:16:
         fa:34:79:81:d7:8a:84:fd:2d:64:b1:bd:30:7b:af:04:84:bf:
         6e:d4:a3:41:d5:09:21:cb:78:93:83:0d:cb:4c:78:ec:65:fe:
         32:44:14:aa:d7:4b:ab:3a:72:3f:fc:9a:57:0c:1e:8e:68:68:
         3c:03:f7:fd:68:9f:16:06:ac:bc:a9:d8:53:bf:62:7d:1a:af:
         40:51:3f:6b:60:87:e1:26:6d:e2:18:00:21:1e:a4:84:b9:18:
         b5:20:3a:92:00:07:5f:5e:d2:4d:4f:45:35:8e:2b:ae:b5:3f:
         e1:a0:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org