Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33392e302f32342d3234203d3e203631373232.roa
File:                     3133312e37322e33392e302f32342d3234203d3e203631373232.roa (raw, json)
Hash identifier:          EgWaEsm0uVNB5GmC3KbxJd6Z8fy8jNIVEfSAMcZjOGc=
Subject key identifier:   CC:83:55:4C:26:01:44:C6:A3:CF:6E:4D:49:12:A7:BE:30:CA:7E:A7
Certificate issuer:       /CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
Certificate serial:       7CF4505727C62C7268C0ADC03CC6FC60DD8F594D
Authority key identifier: 00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33392e302f32342d3234203d3e203631373232.roa
Signing time:             Thu 13 Jul 2023 01:26:11 +0000
ROA not before:           Thu 13 Jul 2023 01:21:11 +0000
ROA not after:            Thu 11 Jul 2024 01:26:11 +0000
asID:                     61722
IP address blocks:        131.72.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f4:50:57:27:c6:2c:72:68:c0:ad:c0:3c:c6:fc:60:dd:8f:59:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DB56825404ABC47D0B868AF4C0C886C672ADE9
        Validity
            Not Before: Jul 13 01:21:11 2023 GMT
            Not After : Jul 11 01:26:11 2024 GMT
        Subject: CN=CC83554C260144C6A3CF6E4D4912A7BE30CA7EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:9c:2f:02:e3:bd:54:b7:f8:c2:0e:ad:10:
                    79:73:07:c0:fa:75:1c:c6:88:d8:2b:22:e4:1c:47:
                    ea:55:2a:9d:45:b9:a3:95:4e:93:f8:be:63:01:5f:
                    05:7d:c9:71:01:d8:27:f5:f5:07:12:a5:3b:ed:a7:
                    6f:6a:9e:5e:14:42:5d:51:12:09:85:00:a4:9a:d2:
                    fb:62:5e:68:19:14:4b:1f:b2:44:ed:81:21:37:ed:
                    94:a9:10:6c:7f:2d:52:84:0f:86:9c:73:f9:65:ce:
                    8e:f6:28:d8:64:12:73:23:e0:ca:91:1e:08:36:e5:
                    5c:a2:6a:54:93:9b:d1:48:96:c6:e3:74:f3:64:f5:
                    79:90:c5:5d:64:c3:95:d7:f8:5f:b2:be:79:b4:51:
                    4f:38:cc:4b:22:e6:2b:50:94:5d:6c:9c:6b:e4:47:
                    9b:dd:45:6a:b5:d0:49:41:98:df:8c:54:c0:21:a3:
                    0b:54:4f:9e:00:52:11:c3:9f:ce:ec:63:0a:47:9e:
                    e2:c6:2e:60:85:b0:60:35:cf:69:5e:f2:c7:90:c5:
                    f8:3e:f1:fb:cb:18:50:0c:c6:95:27:bb:b3:1e:87:
                    a0:43:74:d8:f8:85:a8:b8:da:2e:2f:32:fb:66:8d:
                    65:1e:76:f5:97:9b:ce:d2:4c:75:7a:19:78:8c:dd:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:83:55:4C:26:01:44:C6:A3:CF:6E:4D:49:12:A7:BE:30:CA:7E:A7
            X509v3 Authority Key Identifier:
                keyid:00:DB:56:82:54:04:AB:C4:7D:0B:86:8A:F4:C0:C8:86:C6:72:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00DB56825404ABC47D0B868AF4C0C886C672ADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/3133312e37322e33392e302f32342d3234203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7f:61:43:9c:a1:09:52:ae:cf:ac:7e:c7:ca:00:2c:30:7e:
         f3:16:a7:48:17:8d:42:70:34:67:64:26:71:78:1b:8f:82:ce:
         63:c1:cd:2c:8f:7e:b9:fa:79:1c:c5:5e:b8:c6:bd:ec:9c:4e:
         a1:02:9a:c2:fa:2a:0d:c2:e4:85:27:a8:a5:d0:7e:16:bd:03:
         db:4b:84:fd:28:b8:57:c3:0d:23:99:18:f5:80:c6:0b:14:0e:
         6f:0c:bd:8e:96:23:18:40:9d:e2:4c:ab:b9:bb:f7:e4:35:1a:
         d7:5d:9a:10:5d:68:0e:f4:98:cd:50:a4:6c:04:82:1d:63:3b:
         44:f8:9f:44:c2:54:47:1e:a3:03:51:e5:31:40:8d:67:12:27:
         6f:6a:55:62:4a:b8:fb:aa:4a:09:d4:53:14:6c:5e:e8:be:32:
         99:64:49:4d:57:95:b6:65:a6:03:f6:86:93:08:96:fe:35:e5:
         f6:4a:3b:c0:1f:86:7e:78:42:b2:ab:ce:69:1c:56:c5:8f:8a:
         23:7e:a3:bd:fa:1a:4e:67:40:6b:17:28:3c:e8:eb:3d:05:2e:
         0d:87:ce:88:77:e8:ac:b2:ce:86:8d:90:dc:99:69:6d:bd:70:
         00:7a:2c:f1:31:a6:14:b1:f5:0b:38:56:5e:6f:03:d0:8d:08:
         46:2c:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org