Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3234203d3e203631373332.roa
File:                     3133312e37322e3130342e302f32322d3234203d3e203631373332.roa (raw, json)
Hash identifier:          JUD6o54VCjExahuHpfPMRI3zTbwXUyOUWXG8sW5sEFo=
Subject key identifier:   47:C5:DD:AB:AB:F8:1D:D6:73:40:45:BC:BC:D2:1D:E0:90:B8:DC:9C
Certificate issuer:       /CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
Certificate serial:       259D654983B7BCBCAB01B97E6861C87EFB8D3DFB
Authority key identifier: 08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3234203d3e203631373332.roa
Signing time:             Fri 22 Sep 2023 21:03:57 +0000
ROA not before:           Fri 22 Sep 2023 20:58:57 +0000
ROA not after:            Fri 20 Sep 2024 21:03:57 +0000
asID:                     61732
IP address blocks:        131.72.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9d:65:49:83:b7:bc:bc:ab:01:b9:7e:68:61:c8:7e:fb:8d:3d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B
        Validity
            Not Before: Sep 22 20:58:57 2023 GMT
            Not After : Sep 20 21:03:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:9d:39:08:54:e9:f8:ce:80:f3:26:61:ae:
                    40:25:18:7b:a0:1f:6f:d5:c3:33:df:f6:1c:dd:0e:
                    f6:4e:bf:f8:d1:8d:ed:eb:be:b2:8b:18:9c:d9:7f:
                    bf:ba:87:f8:cb:60:37:22:d3:10:d1:f1:1a:82:f4:
                    93:c6:0a:0e:d5:e5:b8:e1:b3:28:dd:aa:cc:88:8e:
                    88:c4:59:6b:a5:a1:0e:91:e5:aa:aa:36:a4:1a:d8:
                    ee:31:69:5d:f0:58:07:6d:20:db:db:45:ba:4c:3c:
                    8d:9d:cc:79:11:82:97:33:c7:ea:47:b5:3e:93:ef:
                    6b:1c:c1:ed:b8:45:dc:18:50:51:94:36:af:37:f6:
                    81:78:50:d6:43:5a:6c:78:ec:f6:58:95:e9:3c:92:
                    6d:7f:7d:89:54:00:40:f9:7f:a4:ce:87:87:e5:71:
                    be:f5:dc:74:5d:32:de:0b:da:5f:9a:53:72:63:e6:
                    7b:36:99:91:4a:97:87:01:79:85:20:39:63:eb:54:
                    ea:e9:85:bd:34:7f:cc:3b:9e:be:df:3b:f2:b9:8d:
                    a4:cb:4e:c7:6b:0c:05:4d:04:72:75:cf:d8:49:8e:
                    49:65:eb:35:b0:29:56:17:f8:1f:6a:8f:6e:46:fd:
                    97:c2:25:1b:9b:bb:1e:27:c1:7e:ff:ae:38:b8:d6:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C5:DD:AB:AB:F8:1D:D6:73:40:45:BC:BC:D2:1D:E0:90:B8:DC:9C
            X509v3 Authority Key Identifier:
                keyid:08:1B:6C:C5:26:A6:AF:E4:08:5F:7A:C1:D1:59:1A:9A:E1:59:5D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/081B6CC526A6AFE4085F7AC1D1591A9AE1595D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32322d3234203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:f3:83:c5:41:a1:80:c1:15:4d:d0:94:63:39:6a:75:2c:
         ab:e5:4b:35:2e:9b:1f:3c:ff:e1:f6:b3:b0:6c:2a:03:df:a7:
         b5:fc:86:be:7f:5d:fc:bf:cd:33:9f:b0:39:03:98:65:b9:9d:
         26:2a:22:ec:de:81:98:61:80:bb:58:43:2c:a9:6d:5c:ba:96:
         f3:ae:33:d4:70:e1:e8:88:b6:6f:e6:1c:29:ef:07:98:2a:d0:
         d7:1e:ca:86:53:be:62:4c:25:cc:08:a9:55:80:64:30:e6:ce:
         2a:6f:f5:5f:17:dc:d5:0f:18:cb:e4:ec:f9:12:df:26:10:94:
         18:89:47:d9:a1:83:5a:91:d9:39:ff:90:f6:30:94:36:b2:50:
         a0:d3:44:e0:16:d1:d1:74:b5:9c:eb:cf:68:98:0c:3b:d0:a6:
         79:ae:83:cf:de:70:1b:31:2d:af:03:a6:67:11:dd:8c:cd:47:
         e9:c3:a8:e0:d8:8a:5b:58:e7:90:5b:e2:43:a2:c1:bd:c7:cb:
         08:b9:0c:85:b3:ab:c9:e9:db:73:14:78:44:4a:09:53:45:9d:
         b4:46:55:2e:8d:e6:16:b3:d1:3f:3a:9a:61:c4:7e:3c:a4:0f:
         53:79:de:21:78:4e:0f:a3:a9:81:c2:c7:9c:d2:d0:79:7b:a9:
         7e:2d:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org