Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          5DrrAonzyQLYuW2LuuVODez94BiL/eSkFhZ1Hqou8Ug=
Subject key identifier:   80:D3:5B:19:8C:01:51:4E:1D:46:45:D7:BF:8E:F8:72:85:03:DF:5E
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       64A4D70EB08AF51BCE81786C963A87E81C867090
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:27 +0000
ROA not before:           Mon 25 Sep 2023 16:56:27 +0000
ROA not after:            Mon 23 Sep 2024 17:01:27 +0000
asID:                     262352
IP address blocks:        131.72.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:d7:0e:b0:8a:f5:1b:ce:81:78:6c:96:3a:87:e8:1c:86:70:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:27 2023 GMT
            Not After : Sep 23 17:01:27 2024 GMT
        Subject: CN=80D35B198C01514E1D4645D7BF8EF8728503DF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:a0:e6:bb:bf:e7:2f:9c:79:6f:04:4c:77:
                    88:83:df:16:c4:38:65:74:aa:1e:7e:ad:66:ba:c8:
                    47:a8:08:a0:1e:93:e6:b5:f1:a4:34:0b:00:84:00:
                    c8:87:23:de:cb:ed:25:a5:9d:7e:5e:cb:70:65:3f:
                    d3:e8:75:61:c9:5a:c3:ce:fb:84:e4:bd:c6:79:ef:
                    43:fe:2c:f8:f4:32:02:7d:c7:0c:42:7f:a1:06:ba:
                    4c:19:02:45:10:3b:52:db:16:d1:a2:5f:a8:b7:22:
                    99:00:32:5f:ca:97:9d:0f:bd:20:a4:1e:20:15:69:
                    cb:e1:3d:9d:f4:c0:49:a8:48:d0:73:ee:a2:05:6f:
                    5b:da:76:2a:17:11:7b:4d:4a:40:6c:8b:3c:e3:4b:
                    27:5c:8f:ef:c2:2c:eb:d9:98:a1:7b:6c:16:e4:af:
                    88:f2:4f:ef:70:4c:8c:82:ed:32:09:72:d3:0a:f0:
                    de:6f:ad:a2:8c:f2:63:b4:1a:70:81:26:75:a5:58:
                    54:6f:c0:b1:ae:dd:fe:e3:19:9b:92:9e:04:d4:73:
                    cb:2b:c7:71:53:a1:d3:53:21:bc:d7:26:54:13:10:
                    51:65:f3:f2:e0:04:c9:f4:3f:e9:05:10:9f:d8:5f:
                    b4:cc:27:69:c0:c9:74:e1:16:1f:9f:d2:81:0e:b9:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D3:5B:19:8C:01:51:4E:1D:46:45:D7:BF:8E:F8:72:85:03:DF:5E
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3133312e37322e3231382e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:b7:80:d2:bc:6f:4b:8e:b8:b2:db:6b:0f:a4:65:dc:b8:
         bd:3e:12:96:30:ac:59:4e:45:f2:b5:39:6a:7e:44:f7:66:32:
         d8:f3:2a:0b:ce:a2:e2:e8:23:d2:67:ea:fa:a6:b9:4c:0e:f2:
         50:25:f9:37:f3:54:de:1b:d2:81:86:f1:6e:a8:16:c5:fc:cd:
         6c:72:17:72:e9:e4:8e:21:5b:59:6b:25:f7:87:12:7f:50:c0:
         44:e7:60:8c:d6:8b:87:bd:15:b4:d1:10:8b:f7:0a:2a:a6:44:
         f3:50:52:22:cc:78:21:b0:80:22:66:48:cc:fb:b1:9a:a1:8a:
         ca:fa:8b:c4:99:3d:3a:e8:d7:40:6c:06:fa:41:df:a3:b9:e7:
         8f:d0:f6:d2:1e:fb:9c:97:cd:26:d7:79:d3:19:19:64:94:56:
         e1:a6:0d:14:a3:2b:17:7b:fe:a7:96:95:1b:40:5d:9c:0e:84:
         2d:c4:e4:2a:7f:21:83:0d:72:1e:37:d5:df:8d:24:47:ef:ec:
         bb:8f:09:5d:c3:4b:42:bd:8e:72:89:d3:52:e0:85:fc:f6:d5:
         d9:94:45:26:93:cb:6c:e1:43:32:64:b0:d2:1b:53:d4:68:cf:
         22:71:9f:2a:49:94:a2:35:2e:c6:f4:29:ac:be:42:b9:ed:1e:
         9d:c5:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org