Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33372e302f32342d3234203d3e203631373232.roa
File:                     3133312e37322e33372e302f32342d3234203d3e203631373232.roa (raw, json)
Hash identifier:          yhLHa6FRIq1KW73VrdZXVlmtMtVliKQ/Hnu6W8CNHZA=
Subject key identifier:   47:0D:31:C4:02:D1:B7:50:0A:09:23:DC:70:36:38:34:D8:3F:8A:BC
Certificate issuer:       /CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
Certificate serial:       6E328ED8D227C4895E9013B74F03A014247089D1
Authority key identifier: 00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33372e302f32342d3234203d3e203631373232.roa
Signing time:             Thu 13 Jul 2023 01:26:08 +0000
ROA not before:           Thu 13 Jul 2023 01:21:08 +0000
ROA not after:            Thu 11 Jul 2024 01:26:08 +0000
asID:                     61722
IP address blocks:        131.72.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:32:8e:d8:d2:27:c4:89:5e:90:13:b7:4f:03:a0:14:24:70:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
        Validity
            Not Before: Jul 13 01:21:08 2023 GMT
            Not After : Jul 11 01:26:08 2024 GMT
        Subject: CN=470D31C402D1B7500A0923DC70363834D83F8ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:eb:70:28:dd:75:fd:94:1f:88:d5:38:53:
                    b1:d7:1a:66:54:78:bd:77:78:61:bf:c3:34:a1:5c:
                    a2:6f:9e:00:c5:0e:34:57:4d:72:48:e9:a8:ac:f8:
                    b4:65:ab:d4:a8:ca:b6:36:69:f9:0c:ad:3f:b2:81:
                    30:a9:9f:cf:7e:9f:8a:9d:68:fe:8d:63:31:9b:48:
                    8f:d2:10:5a:ed:69:bc:2d:10:06:4a:98:b1:28:ad:
                    0e:73:59:95:98:be:a3:26:b7:2d:12:5d:d8:3b:69:
                    82:05:24:d9:19:82:92:a4:a0:2b:7a:c1:0a:f2:9d:
                    24:fe:e4:75:e6:f6:8c:2a:23:a8:e5:e7:ef:3f:ea:
                    f3:5e:3e:a0:80:89:f0:97:24:39:f7:e3:05:29:17:
                    9e:72:1c:9c:79:b0:87:a8:02:eb:1a:40:b1:cc:41:
                    3a:eb:d1:bf:0d:ea:2c:72:2c:f6:9c:05:a6:f1:a3:
                    a0:5f:c1:5b:7f:2a:ec:2a:ad:ed:1f:5b:70:02:76:
                    74:97:4d:b7:b0:07:ab:36:d7:32:4c:88:d9:e4:48:
                    9e:78:fb:2b:3e:6f:73:5f:f2:b7:f3:6a:5f:81:cc:
                    e4:57:69:94:8a:ac:ce:9f:e7:27:85:b9:76:d8:c2:
                    4c:90:ba:b5:87:88:7c:2f:1c:28:3b:df:56:2f:65:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:31:C4:02:D1:B7:50:0A:09:23:DC:70:36:38:34:D8:3F:8A:BC
            X509v3 Authority Key Identifier:
                keyid:00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33372e302f32342d3234203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:60:ee:84:dc:e8:32:76:cb:50:08:e6:26:79:6e:86:4d:
         2d:8f:1b:3a:7f:91:d8:dc:f8:50:2e:46:41:0c:5d:cc:39:20:
         4b:bd:93:83:4a:aa:57:84:9a:32:40:f7:9a:4a:3b:54:d5:2a:
         c7:9b:2b:c4:36:ab:2c:b1:d7:d7:6e:eb:1b:49:70:a7:26:cf:
         0c:7f:ab:1b:30:26:d8:a1:b8:52:85:b5:cd:80:45:a0:ec:a4:
         7b:a8:28:60:c4:cf:6f:69:eb:20:e5:e2:b8:8a:56:d5:f7:d5:
         5d:7d:6c:a4:b5:e7:92:60:cd:d6:18:47:e4:53:bd:c2:cc:27:
         2c:41:3d:62:6d:f8:ae:6b:05:cd:ce:24:90:99:ab:af:5c:1c:
         d6:8d:8c:5f:25:76:df:1b:a7:a0:8b:e9:bf:f8:c2:f5:8c:bb:
         bd:49:6b:eb:71:fd:09:32:5d:7a:78:7c:9e:d9:c8:05:94:67:
         aa:42:1a:cb:a2:74:76:73:da:da:db:b3:cc:2e:67:f5:8f:c7:
         5f:bb:a0:0a:cf:98:16:95:b9:20:ee:ab:03:08:b3:43:3a:71:
         da:7f:c0:06:0e:9b:8a:b3:f6:af:c2:e7:c1:dc:83:70:10:51:
         e2:6a:49:d5:6b:9c:6e:e9:26:d5:0e:c0:3c:b5:f2:f1:d2:49:
         9f:ce:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org