Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/3133312e3130382e3132302e302f32322d3233203d3e203631363733.roa
File:                     3133312e3130382e3132302e302f32322d3233203d3e203631363733.roa (raw, json)
Hash identifier:          XPqBa9OXWHcucqiZGPgtR10PQfdNFO/xtiI8iV7QA/c=
Subject key identifier:   7A:74:57:12:DC:4D:99:14:45:B4:91:08:B9:B7:6B:A1:DC:46:B4:C3
Certificate issuer:       /CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
Certificate serial:       6D2850A92515ADBA9B6E8C6F23361404B2276CC3
Authority key identifier: 47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/3133312e3130382e3132302e302f32322d3233203d3e203631363733.roa
Signing time:             Mon 20 Nov 2023 14:03:56 +0000
ROA not before:           Mon 20 Nov 2023 13:58:56 +0000
ROA not after:            Mon 18 Nov 2024 14:03:56 +0000
asID:                     61673
IP address blocks:        131.108.120.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:28:50:a9:25:15:ad:ba:9b:6e:8c:6f:23:36:14:04:b2:27:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E
        Validity
            Not Before: Nov 20 13:58:56 2023 GMT
            Not After : Nov 18 14:03:56 2024 GMT
        Subject: CN=7A745712DC4D991445B49108B9B76BA1DC46B4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:48:fb:52:e2:89:ab:43:0d:1e:60:fb:e3:
                    8c:b8:62:f3:c6:ef:9e:39:f9:4a:7b:4b:fb:e6:90:
                    76:18:76:da:2e:11:e0:25:0f:43:ca:dc:64:22:0d:
                    09:09:c9:2f:83:70:c9:bb:6a:c9:73:82:e9:6c:70:
                    b2:4e:5e:43:57:c7:fc:94:82:06:8f:a7:e1:ca:a2:
                    93:4c:6d:44:3e:51:a6:31:3e:56:fc:c3:00:3e:8f:
                    3e:84:31:49:16:98:4c:33:76:d7:17:fd:58:e0:5e:
                    2b:39:7c:02:63:f1:25:6d:d0:a5:d7:ad:8c:c6:f2:
                    a1:fa:40:14:ac:ca:c7:7f:1d:b8:08:2e:80:c2:1c:
                    85:e9:7a:0b:4d:11:78:c3:4c:21:23:95:6b:55:b8:
                    d6:a3:7f:fb:a9:99:b1:5c:7b:24:81:8d:40:e7:5f:
                    8c:fc:32:68:e2:75:4a:b4:f3:79:61:2e:1c:81:64:
                    a9:7f:67:fa:a1:b6:86:49:77:89:f6:ef:01:50:93:
                    81:ff:14:54:99:1e:12:57:e6:ab:ee:89:31:0a:19:
                    57:0e:f7:3e:62:0d:a0:9d:f5:a2:38:2e:7e:b5:a7:
                    e4:ec:d2:a4:07:56:c7:65:a2:ec:a9:60:ac:be:a5:
                    d7:10:a3:f1:db:e3:bd:1b:a4:8b:1d:20:3f:31:f3:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:57:12:DC:4D:99:14:45:B4:91:08:B9:B7:6B:A1:DC:46:B4:C3
            X509v3 Authority Key Identifier:
                keyid:47:B9:FF:ED:FC:07:80:C9:12:B1:95:AD:F6:D4:F6:1D:34:4E:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9FFEDFC0780C912B195ADF6D4F61D344ECC8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/0/3133312e3130382e3132302e302f32322d3233203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:4b:0e:39:f9:4d:92:e2:f3:b6:44:5a:97:a7:95:c5:47:
         74:59:99:1d:62:4b:ee:5d:0a:8c:7b:79:15:9c:74:90:97:c3:
         e6:42:78:ad:6d:74:1e:bf:55:9a:39:80:bb:9d:ce:6b:90:ac:
         9e:eb:76:44:5a:31:a8:0a:ed:cc:62:5d:6c:ff:a4:4b:e2:df:
         66:62:70:61:12:09:73:31:46:85:de:ef:d5:30:4a:cd:ec:20:
         12:eb:ea:74:15:4c:2e:f4:3c:77:2e:94:c2:18:c1:ba:b7:db:
         49:f9:dc:66:53:73:e0:4c:28:f6:40:c8:8a:5d:c0:5a:2f:b9:
         b4:16:04:b4:e2:b1:27:12:20:37:71:f5:f7:d4:4e:11:fc:91:
         9f:29:d6:0d:e2:84:d0:5d:ab:9a:5c:0e:68:14:90:fe:10:66:
         7c:03:90:ea:f4:f6:60:73:89:40:32:15:1c:a4:f1:99:8b:7d:
         cd:ff:30:96:b0:de:85:7d:ef:b7:82:c5:e9:a9:98:3e:9f:4e:
         2e:89:cf:9f:dc:3e:da:1b:29:b5:c2:05:9a:c4:93:0f:be:56:
         24:e2:d5:fc:de:1e:21:e5:83:03:80:fe:7a:3d:09:dd:6a:29:
         36:ac:bd:52:82:85:e4:a8:44:69:36:99:5f:4b:87:a9:c1:df:
         99:77:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org