Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa
File:                     3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa (raw, json)
Hash identifier:          MaJPdE5/z2hTpEWj0zBGuXAjEyYAUJlmn5fRjKxfnnE=
Subject key identifier:   0A:4B:F2:E0:E9:4D:85:69:B4:36:54:9F:96:2A:4E:7B:EB:DB:89:A7
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       6061E8426DD010DB1265FD9F323E56E22459D76C
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa
Signing time:             Mon 11 Dec 2023 18:15:38 +0000
ROA not before:           Mon 11 Dec 2023 18:10:38 +0000
ROA not after:            Mon 09 Dec 2024 18:15:38 +0000
asID:                     265911
IP address blocks:        131.196.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:e8:42:6d:d0:10:db:12:65:fd:9f:32:3e:56:e2:24:59:d7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Dec 11 18:10:38 2023 GMT
            Not After : Dec  9 18:15:38 2024 GMT
        Subject: CN=0A4BF2E0E94D8569B436549F962A4E7BEBDB89A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:f8:4a:92:c2:24:59:6a:b2:83:22:d2:8d:
                    7e:41:9a:3a:44:22:32:87:14:92:c5:bd:38:e9:28:
                    1b:c7:03:05:04:6c:c6:79:e9:a3:08:ec:4b:33:01:
                    88:f1:58:16:fc:a5:32:96:ef:db:b7:c8:e7:49:6c:
                    f7:f3:4a:b0:64:52:11:0c:44:d5:23:c2:6f:f5:4c:
                    6e:23:e9:07:74:04:3a:f1:a8:05:b9:97:98:f0:c4:
                    71:7c:0b:8b:12:6f:d7:5d:55:13:6d:a3:cb:7f:78:
                    66:75:84:8f:53:be:3e:e9:57:2c:79:d7:58:ad:0d:
                    99:fc:71:5c:01:d1:67:96:19:0c:b8:62:3c:ac:f5:
                    8b:2c:3c:a8:6f:f3:2d:1d:8c:0a:34:e0:2d:b9:0d:
                    a8:40:cf:40:6d:15:4a:64:64:77:38:e4:5a:3c:e4:
                    72:c9:e5:09:05:71:a4:32:34:11:f6:0e:5e:87:e8:
                    a0:9d:bb:f9:51:ee:eb:2a:bd:f4:f9:89:8f:3d:68:
                    e4:29:cf:98:46:b4:0b:33:a8:67:ea:b6:b0:f8:d5:
                    f7:02:c8:e8:71:bc:7a:e2:0d:68:d0:08:e7:7c:de:
                    8e:a8:25:b7:db:63:66:e3:f9:bb:fc:6b:1a:7e:6d:
                    08:32:d7:0a:eb:d4:d9:37:e8:c7:be:18:36:76:55:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:F2:E0:E9:4D:85:69:B4:36:54:9F:96:2A:4E:7B:EB:DB:89:A7
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134362e302f32332d3233203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:42:3d:ed:8c:5e:39:dc:1b:e3:81:23:1a:72:1f:f4:49:
         e8:0a:b3:1d:81:fc:eb:90:73:60:17:f8:fb:da:a4:65:88:33:
         e8:f6:ab:3e:ac:b5:41:d0:e0:08:b7:3d:74:29:c3:13:03:04:
         2c:f9:16:9f:ed:5a:f9:0c:5d:17:6f:de:1c:60:4a:2c:af:83:
         0c:7b:d5:c2:89:b8:ab:d6:b9:26:5c:65:9c:24:e6:a5:37:d8:
         4b:02:42:06:d3:e3:db:7e:7f:d9:6b:8b:88:17:2e:0d:f1:fe:
         82:36:c6:76:b7:0d:30:91:35:a0:e0:39:2a:24:9b:55:94:b5:
         87:c0:4f:94:29:82:5a:24:e5:93:69:ae:67:8c:e8:fb:a4:b4:
         09:73:89:86:f4:55:3c:19:80:45:a1:86:43:65:d0:79:62:b3:
         89:16:62:12:b1:23:1d:83:68:25:ef:9a:4d:77:8c:90:91:97:
         7e:f3:53:10:50:be:ce:6d:08:2a:83:bc:c1:51:a6:b5:cc:88:
         f6:5a:94:67:6a:36:91:54:25:97:a2:9e:d3:bb:ae:97:ee:ea:
         f0:7a:87:49:e7:a5:1d:8f:f5:aa:5d:14:d1:0f:74:d0:2c:1d:
         16:38:bd:4f:1a:b5:a2:99:93:b7:f2:d5:8f:d5:a5:46:ae:2b:
         6d:f8:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org