Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e342e302f32322d3232203d3e203631373137.roa
File:                     3133312e37322e342e302f32322d3232203d3e203631373137.roa (raw, json)
Hash identifier:          BkjZ/Benjff8T4QE2ZhN+vTO8iDjmaB3dhrC9MktKiw=
Subject key identifier:   2F:72:D8:B6:A0:15:23:57:2C:3D:D1:1D:34:29:A5:68:AE:B9:FC:38
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       05F0018D5CB93905806D6E3F27B919422841CCEF
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e342e302f32322d3232203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:56 +0000
ROA not before:           Thu 10 Aug 2023 12:17:56 +0000
ROA not after:            Thu 08 Aug 2024 12:22:56 +0000
asID:                     61717
IP address blocks:        131.72.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f0:01:8d:5c:b9:39:05:80:6d:6e:3f:27:b9:19:42:28:41:cc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:56 2023 GMT
            Not After : Aug  8 12:22:56 2024 GMT
        Subject: CN=2F72D8B6A01523572C3DD11D3429A568AEB9FC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:7d:fb:69:70:5a:b2:96:86:cb:6f:cc:d7:
                    a0:d6:5f:e5:a5:21:63:16:44:b0:17:e4:7d:1d:c1:
                    ea:eb:94:84:ce:f1:c8:0e:8a:7d:0e:28:56:24:7b:
                    7d:ab:4b:48:ce:1f:13:86:78:fd:d2:79:b7:9f:d3:
                    6e:1f:52:00:48:06:7d:3c:7a:cc:0b:2e:96:4d:ec:
                    e0:33:ef:b3:7f:39:cb:a5:6b:d0:4c:cd:b2:58:df:
                    4a:5d:48:43:91:9d:c8:44:8d:4c:ac:a7:eb:6f:1f:
                    f8:84:af:a9:60:a4:58:84:65:dd:c6:60:4c:03:9c:
                    3e:c8:9e:d7:ca:f6:f2:27:59:ff:78:e0:07:a9:fa:
                    d1:22:f9:5f:91:cd:bb:1e:44:79:d2:97:85:8b:73:
                    8c:63:3e:ce:da:05:66:87:d6:72:08:b8:41:45:56:
                    31:c6:07:6e:1e:d0:ce:83:06:8e:74:42:c3:7d:4e:
                    54:80:76:da:ca:9a:a4:b1:ec:42:3c:9c:ad:a0:44:
                    ea:13:c9:47:ae:fe:1e:94:79:46:c0:23:db:ae:97:
                    bc:aa:75:6c:c2:02:74:32:d0:45:95:8c:4f:15:b3:
                    c2:71:25:9e:5b:5e:88:e8:77:9d:57:77:33:1d:b3:
                    7f:c7:a7:1a:5e:fc:17:f0:40:39:52:a3:7d:22:fb:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:D8:B6:A0:15:23:57:2C:3D:D1:1D:34:29:A5:68:AE:B9:FC:38
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e342e302f32322d3232203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:de:da:46:68:e1:07:d7:67:0b:af:f0:0d:bf:ee:21:09:
         fd:72:eb:ad:3a:27:12:cc:db:90:90:cd:5c:a6:7d:92:53:8e:
         12:25:54:32:14:bd:7e:a7:db:b9:c9:a4:7b:71:47:59:06:38:
         43:bd:53:a6:80:e3:61:c6:a7:82:b4:25:28:98:45:9c:1e:29:
         24:72:cf:30:28:69:df:5b:6f:1d:01:36:46:1c:68:5f:0a:82:
         e8:a1:2c:49:de:37:14:93:48:04:1f:b6:42:46:71:45:65:c0:
         d8:cd:35:43:97:f3:9c:d1:6e:31:be:71:58:a0:ca:2f:28:e6:
         05:fd:00:f8:eb:ad:0a:62:a4:05:ca:df:b9:99:48:b2:0d:73:
         82:f7:5f:76:82:1b:a3:ce:cd:0c:32:70:cc:de:64:68:cc:e8:
         68:6d:ac:ea:69:6e:6a:04:d1:8f:f9:fd:64:8d:ab:a6:13:46:
         3f:20:e5:3c:6a:ac:85:dd:6d:3e:0c:c2:fe:bd:9e:21:35:8a:
         51:59:da:1a:bb:27:51:1f:20:bf:c9:f1:fc:2c:c7:20:73:1c:
         58:40:3f:1e:4f:71:a6:58:c8:f3:33:3a:ca:b5:fe:57:5a:8a:
         d6:99:35:b4:7b:80:f0:b5:82:5a:25:cc:b7:c3:68:68:93:f4:
         ad:41:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org