Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e352e302f32342d3234203d3e203631373137.roa
File:                     3133312e37322e352e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          C+QRP4AzRv+B25pnbvBHwL630wURRD+bHLtAc89v37k=
Subject key identifier:   20:10:FD:F7:FE:7B:81:D0:AA:8A:B1:0C:A1:87:D1:3C:35:36:F6:2B
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       180AF2CB25472AD60BE482578A8E3DD6BC3456ED
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e352e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:58 +0000
ROA not before:           Thu 10 Aug 2023 12:17:58 +0000
ROA not after:            Thu 08 Aug 2024 12:22:58 +0000
asID:                     61717
IP address blocks:        131.72.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0a:f2:cb:25:47:2a:d6:0b:e4:82:57:8a:8e:3d:d6:bc:34:56:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:58 2023 GMT
            Not After : Aug  8 12:22:58 2024 GMT
        Subject: CN=2010FDF7FE7B81D0AA8AB10CA187D13C3536F62B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:24:ac:13:e3:0f:be:9b:9b:37:dc:e1:d4:
                    05:e2:20:70:e3:1e:2a:e7:4d:cb:7b:07:a8:0d:cc:
                    b6:74:37:76:80:f4:a1:e4:f4:0c:d7:34:65:e1:00:
                    77:ea:c1:d4:26:e1:fb:48:f0:16:1c:0f:76:d6:6e:
                    84:15:a3:2a:4e:22:25:bb:b2:e8:3c:49:24:f5:b4:
                    48:4a:5a:99:ce:c7:c9:eb:89:7c:e6:5b:24:0f:89:
                    3a:75:5d:bd:6a:a3:b4:63:04:ce:4c:93:62:54:90:
                    4e:05:00:cd:f7:5a:13:0d:a2:4a:85:99:54:24:6b:
                    5e:d9:bd:6a:e4:79:d1:79:5e:93:cb:95:c3:89:1f:
                    09:e4:5f:4d:bd:35:4c:c2:f7:41:30:11:66:2d:61:
                    b1:1c:61:da:6f:02:eb:eb:92:9e:dd:f6:1d:a7:55:
                    f5:50:a7:57:61:85:af:63:03:c3:f1:11:cd:7a:5d:
                    45:3a:32:4e:cb:0d:9b:30:08:ef:b8:88:bb:8e:67:
                    64:98:06:c4:fd:8c:9a:1c:df:5f:01:5c:31:46:0d:
                    32:3c:4e:fd:c7:21:59:53:41:0b:b5:64:f4:cd:a9:
                    e7:42:5e:cb:72:14:71:79:03:f1:ef:2c:90:29:ab:
                    22:94:3f:8e:ed:93:8f:0e:5c:b9:d8:8e:bc:a7:cd:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:FD:F7:FE:7B:81:D0:AA:8A:B1:0C:A1:87:D1:3C:35:36:F6:2B
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e352e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:12:a6:e5:a6:b4:06:81:8e:ae:43:88:6a:1a:15:3c:b0:
         26:d4:f4:1c:5d:45:a7:74:e0:11:4e:17:18:ff:7e:f0:7c:ac:
         e9:6a:15:64:ac:35:db:47:3c:a6:c4:21:cc:ba:85:d1:3a:66:
         96:85:0d:bb:53:89:bf:0b:9b:a2:94:5f:bf:a6:85:f0:34:0d:
         25:69:39:27:f4:e1:6c:1f:1f:69:01:51:0b:2e:43:04:d5:e7:
         7d:9e:03:d5:c0:44:6a:98:ec:09:84:3d:d1:61:fe:b1:6f:aa:
         30:65:56:16:77:4d:b5:74:e3:08:2d:8b:92:cf:61:59:5c:e8:
         f1:55:c0:ae:4b:67:30:fc:9f:6c:ec:79:8c:3f:ea:ed:42:c1:
         e3:fc:b2:d6:e7:78:00:2b:24:d1:4b:1d:42:1a:10:ec:60:4d:
         a0:e2:00:e7:c4:f9:b9:9a:bd:6d:92:66:c7:95:67:ea:fc:83:
         f9:75:19:ac:7e:ad:db:9c:30:c3:29:59:ba:8d:fa:dd:61:d0:
         a9:1f:16:60:9d:dc:4a:ad:b0:2b:b3:5c:8e:33:56:10:64:be:
         d2:af:cd:d4:c8:e3:37:cd:67:4f:a2:ac:8c:03:7e:36:6a:25:
         d0:10:f5:9e:a0:4a:a9:57:5d:17:1f:13:3a:8a:dd:73:61:ad:
         91:74:c2:5a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGAryyyVHKtYL5IJXio491rw0Vu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5OTE0QTM1QUNCQUJBQzZBNkU1RkFBNTk5NDk3REQ5
N0M0MTJBNTAeFw0yMzA4MTAxMjE3NThaFw0yNDA4MDgxMjIyNThaMDMxMTAvBgNV
BAMTKDIwMTBGREY3RkU3QjgxRDBBQThBQjEwQ0ExODdEMTNDMzUzNkY2MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEySsE+MPvpubN9zh1AXiIHDj
HirnTct7B6gNzLZ0N3aA9KHk9AzXNGXhAHfqwdQm4ftI8BYcD3bWboQVoypOIiW7
sug8SST1tEhKWpnOx8nriXzmWyQPiTp1Xb1qo7RjBM5Mk2JUkE4FAM33WhMNokqF
mVQka17ZvWrkedF5XpPLlcOJHwnkX029NUzC90EwEWYtYbEcYdpvAuvrkp7d9h2n
VfVQp1dhha9jA8PxEc16XUU6Mk7LDZswCO+4iLuOZ2SYBsT9jJoc318BXDFGDTI8
Tv3HIVlTQQu1ZPTNqedCXstyFHF5A/HvLJApqyKUP47tk48OXLnYjrynzVFhAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUIBD99/57gdCqirEMoYfRPDU29iswHwYDVR0j
BBgwFoAUXJkUo1rLq6xqbl+qWZSX3ZfEEqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTd2UE56bmdFOGZFRFZnaWNGWEpBWnl0Zk04MThqWG85UEZrNlQxTEtH
SlgvMC81Qzk5MTRBMzVBQ0JBQkFDNkE2RTVGQUE1OTk0OTdERDk3QzQxMkE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDOTkxNEEzNUFDQkFCQUM2
QTZFNUZBQTU5OTQ5N0REOTdDNDEyQTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3dlBOem5nRThmRURWZ2ljRlhKQVp5dGZNODE4alhvOVBGazZUMUxLR0pYLzAv
MzEzMzMxMmUzNzMyMmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzNzMx
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACDSAUwDQYJKoZIhvcNAQELBQADggEBAJ7iEqblprQGgY6u
Q4hqGhU8sCbU9BxdRad04BFOFxj/fvB8rOlqFWSsNdtHPKbEIcy6hdE6ZpaFDbtT
ib8Lm6KUX7+mhfA0DSVpOSf04WwfH2kBUQsuQwTV532eA9XARGqY7AmEPdFh/rFv
qjBlVhZ3TbV04wgti5LPYVlc6PFVwK5LZzD8n2zseYw/6u1CweP8stbneAArJNFL
HUIaEOxgTaDiAOfE+bmavW2SZseVZ+r8g/l1Gax+rducMMMpWbqN+t1h0KkfFmCd
3EqtsCuzXI4zVhBkvtKvzdTI4zfNZ0+irIwDfjZqJdAQ9Z6gSqlXXRcfEzqK3XNh
rZF0wlo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org