Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa
File:                     3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          pwRtGRdLJ4uV7oGVJazEDOTIlrSaRvlOQESPzQjN1Lg=
Subject key identifier:   DE:24:14:11:B0:5B:41:AD:7B:12:B4:B2:46:57:9C:83:4C:D2:9D:17
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       62A12443B38BE2B66DF22A946F0AB489433D121A
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 06 Jan 2024 17:26:27 +0000
ROA not before:           Sat 06 Jan 2024 17:21:27 +0000
ROA not after:            Sat 04 Jan 2025 17:26:27 +0000
asID:                     262393
IP address blocks:        131.72.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:24:43:b3:8b:e2:b6:6d:f2:2a:94:6f:0a:b4:89:43:3d:12:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  6 17:21:27 2024 GMT
            Not After : Jan  4 17:26:27 2025 GMT
        Subject: CN=DE241411B05B41AD7B12B4B246579C834CD29D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:d7:02:cb:93:47:cb:65:d1:c3:9e:4f:92:
                    2c:2d:2b:85:09:d0:0d:d3:78:05:29:be:ba:62:86:
                    7d:24:39:14:81:cf:a3:86:0b:81:50:a7:67:c1:4b:
                    de:aa:06:68:48:8e:bb:44:c6:b4:30:83:22:9b:cc:
                    62:76:f3:cb:84:bb:3e:e1:6e:2d:28:1a:00:18:1e:
                    55:39:83:a6:7d:57:21:45:0f:eb:5a:9c:bc:62:dc:
                    91:e4:1a:4d:3b:7f:33:5f:5f:d9:e6:b9:47:41:52:
                    93:e8:43:83:aa:84:7d:66:64:7b:4a:72:95:90:7d:
                    c0:66:66:b1:1d:73:ee:4e:da:2c:6c:da:91:8f:2d:
                    7c:ad:07:5a:80:d3:0d:b3:9e:d2:d7:88:3b:ce:b4:
                    ce:9d:63:ae:29:f7:3a:39:e4:ea:4a:39:27:2a:e1:
                    2a:15:31:cf:7f:8d:18:8e:86:61:fc:34:00:52:49:
                    64:aa:87:3f:32:dc:97:47:52:57:9c:17:23:b5:a6:
                    4c:39:99:7e:98:c4:f5:27:70:cb:6c:b9:ea:33:f4:
                    6d:f9:31:50:8c:94:15:47:4c:1c:39:41:af:e2:83:
                    0b:a7:d2:8b:06:1c:99:2a:e3:3c:54:cf:24:f5:83:
                    73:11:d3:85:f3:3d:a1:db:cc:1c:67:e3:d7:00:88:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:14:11:B0:5B:41:AD:7B:12:B4:B2:46:57:9C:83:4C:D2:9D:17
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:a8:50:f0:4a:b8:b4:fb:18:06:0b:cf:cd:3b:53:ee:c3:
         5f:65:03:26:9d:6b:c2:52:82:1e:a1:14:7f:91:a5:9f:5d:05:
         bc:0e:c7:b3:69:53:e6:c5:66:9c:07:6b:ef:3b:85:0c:f5:b7:
         1b:eb:c2:89:bf:95:9e:74:03:f3:b5:a5:f3:51:88:d5:33:6c:
         d4:47:68:55:f9:30:69:6a:3a:6f:c5:5c:46:b2:df:36:68:bd:
         f6:64:ac:7b:8d:0f:89:3f:38:38:57:29:1a:7a:d7:49:c2:88:
         75:62:7b:cb:3f:d5:45:aa:f8:17:a0:3c:d8:b8:ba:d9:ca:80:
         03:83:25:96:ef:4a:12:db:d4:5c:a1:ed:49:cc:ef:39:c9:ef:
         c9:1f:f0:eb:9c:c7:0a:a8:27:09:53:4a:91:7a:48:ba:3d:0e:
         c4:b8:06:a8:ed:df:15:fd:38:54:f2:54:c7:07:46:67:85:08:
         b6:02:06:bc:fe:19:5b:3d:94:be:24:ad:37:94:7f:27:71:27:
         a2:dc:e5:51:8c:c8:33:44:ab:67:67:1f:0b:a8:46:27:97:bd:
         65:6a:2b:1e:1c:61:4a:a6:26:89:c0:fc:6b:d0:8f:fa:6b:ae:
         33:f5:59:ab:9a:9b:b8:d9:5c:82:90:68:48:a0:b7:32:74:e3:
         44:c5:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org