Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa
File:                     3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          Da0PY5uue8b3DsYBAWbnksRSk5pNojKQZt6ddArJGtI=
Subject key identifier:   56:08:D8:DD:A1:91:FF:24:E4:74:BB:13:55:BD:DF:C3:75:BA:71:7B
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       4338D4F50A9DCD9913DEC9AAB7347A67BC8CD24E
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 06 Jan 2024 17:26:26 +0000
ROA not before:           Sat 06 Jan 2024 17:21:26 +0000
ROA not after:            Sat 04 Jan 2025 17:26:26 +0000
asID:                     262393
IP address blocks:        131.72.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:38:d4:f5:0a:9d:cd:99:13:de:c9:aa:b7:34:7a:67:bc:8c:d2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  6 17:21:26 2024 GMT
            Not After : Jan  4 17:26:26 2025 GMT
        Subject: CN=5608D8DDA191FF24E474BB1355BDDFC375BA717B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:c2:5b:fa:75:ba:bf:b2:b3:ec:60:b8:80:
                    c4:b0:aa:e5:43:60:8f:10:61:72:2f:e9:3c:45:d4:
                    9d:45:c2:bb:69:a5:af:75:1d:8b:f1:a6:d0:5c:b3:
                    19:1d:5f:09:46:3a:65:e3:79:95:d9:e4:dd:8b:59:
                    cf:b4:88:46:17:c9:83:e4:27:b3:ed:31:dd:8c:f6:
                    64:81:eb:47:4e:be:e3:83:4d:ee:88:7c:f6:ad:a6:
                    ad:e8:70:be:33:70:7d:cf:74:a9:4c:84:2b:8d:6c:
                    ea:ce:13:53:ec:67:91:d8:f5:cb:f5:7a:9c:ea:42:
                    82:7f:7b:ec:d8:46:48:e5:80:57:b4:e0:72:9a:08:
                    4a:95:9b:bb:1a:78:37:66:7a:d8:84:d2:b3:90:b6:
                    f7:06:fb:f2:a0:4d:22:db:24:1b:57:9a:a7:93:1d:
                    07:a3:de:fa:37:29:da:47:78:8e:69:48:7f:b5:fa:
                    06:4f:e2:1b:71:79:2a:ac:ed:95:77:2b:d8:a9:cf:
                    e1:0c:55:7a:54:8b:a2:a5:68:a6:c4:b9:66:f4:5f:
                    60:c5:fe:37:78:32:a8:46:ad:89:9c:51:d6:fd:f4:
                    b4:e8:e4:89:ec:5d:82:d3:04:00:20:35:5c:03:04:
                    48:54:4f:c0:e5:2a:87:7d:9d:c9:5b:37:75:b4:35:
                    90:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:08:D8:DD:A1:91:FF:24:E4:74:BB:13:55:BD:DF:C3:75:BA:71:7B
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:c0:d4:cf:4e:4c:9a:b3:ad:3d:54:e7:63:31:31:68:62:
         69:cc:15:cb:41:ee:ea:ec:4d:67:ac:08:d3:d0:8d:56:18:16:
         e0:f7:df:ba:31:cb:42:b5:17:73:9f:c7:ce:9e:08:e0:2b:8a:
         59:68:27:0f:b8:aa:c2:85:bf:6e:70:f2:6e:0e:80:24:50:93:
         ba:3c:2f:30:9a:54:76:01:2f:8e:65:95:e2:dd:35:e2:3e:09:
         1b:40:96:c4:27:9c:e4:28:a0:5e:5e:cb:ba:b5:2c:9c:ac:37:
         45:98:32:9f:eb:b6:45:c0:5f:31:e2:45:34:3e:fa:63:77:67:
         a6:4e:b7:8d:04:e2:e6:00:7c:bb:2a:33:ca:3f:59:a0:97:eb:
         b3:6f:44:5b:fc:77:fe:25:68:9d:38:62:7a:8a:c2:5d:7e:9b:
         8a:43:97:c4:93:2e:d6:7d:60:ed:47:e2:de:41:3c:c6:e3:8a:
         89:e8:c0:2e:42:11:ff:31:01:db:78:54:3c:47:e6:2a:28:f6:
         08:02:44:da:34:38:d7:04:99:ed:a1:b6:52:2e:f7:c1:d6:fd:
         70:5d:fd:08:de:41:a8:b0:17:09:7f:9f:62:97:df:5d:a3:0b:
         29:04:46:f1:7e:54:a0:a5:94:9c:89:3c:92:9b:6c:6b:04:6e:
         fd:4b:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org