Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32332d3233203d3e203631373137.roa
File:                     3133312e37322e362e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          gtvRk660c7DJ5/oxzEl6MpSgzYwDBtiNlrU2O0B00ZI=
Subject key identifier:   C3:D5:10:D9:B4:A4:7B:FD:3A:A7:0C:25:CA:E7:38:FA:AE:17:6D:07
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       3C8FE891643A7F91C2B25297188740C1F78D02F4
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32332d3233203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:56 +0000
ROA not before:           Thu 10 Aug 2023 12:17:56 +0000
ROA not after:            Thu 08 Aug 2024 12:22:56 +0000
asID:                     61717
IP address blocks:        131.72.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8f:e8:91:64:3a:7f:91:c2:b2:52:97:18:87:40:c1:f7:8d:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:56 2023 GMT
            Not After : Aug  8 12:22:56 2024 GMT
        Subject: CN=C3D510D9B4A47BFD3AA70C25CAE738FAAE176D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:75:40:20:18:95:4d:ca:96:73:a5:c3:e7:
                    8a:70:e6:cf:42:08:5c:84:6e:da:c7:50:6d:a6:a0:
                    57:38:0e:05:2c:d7:10:29:96:46:b8:bc:8c:f6:6c:
                    31:38:b1:e8:62:b9:90:60:6e:c9:c7:44:e3:8a:9c:
                    0a:b5:74:36:34:99:c2:6f:cd:6b:d9:5b:60:2d:af:
                    5a:78:44:68:93:7a:a6:0a:5c:73:9f:e8:20:a1:d3:
                    d4:0b:9b:cc:6f:45:e2:74:f5:51:9f:7e:ee:f4:1d:
                    6e:c5:63:bf:8c:91:81:db:b3:a6:30:3c:0b:df:74:
                    ea:0b:61:19:cb:66:91:a8:a0:94:11:17:4e:4d:d9:
                    c8:6b:32:20:ac:8a:fd:32:64:53:e9:80:88:1c:fc:
                    35:d6:73:78:e6:cd:14:85:ca:8a:b4:71:32:57:29:
                    86:14:e0:b4:f4:88:43:dd:6d:13:c6:63:f8:d6:62:
                    1d:a2:a1:08:dd:8f:fd:fb:7d:f1:97:49:a3:6d:70:
                    99:dc:03:08:94:89:ab:2e:01:74:78:ae:ba:cc:6b:
                    db:c1:6d:8c:7e:4d:61:24:bd:86:51:a2:c8:e3:c9:
                    dc:da:91:5f:ea:78:8b:b9:e2:78:b1:4d:74:27:9b:
                    44:ec:09:bb:46:e0:14:7d:c0:da:59:3a:ef:94:5c:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:10:D9:B4:A4:7B:FD:3A:A7:0C:25:CA:E7:38:FA:AE:17:6D:07
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:3e:ec:4a:c4:1d:0e:80:6b:b9:e9:52:b9:6f:b1:ff:6c:48:
         a4:8b:bc:93:ce:c5:bc:47:41:5a:3d:e7:a2:6c:ec:88:cf:e2:
         8f:9e:0f:58:34:24:95:f3:9a:84:a4:51:01:b8:ad:b3:ba:39:
         34:c1:16:6d:b6:80:8f:fd:50:21:a4:c9:90:d8:ce:d3:37:1f:
         6d:d7:62:ff:3e:43:7b:41:32:d9:e1:81:ae:cf:43:fd:f9:38:
         f9:15:da:71:2d:f2:03:87:5a:73:ed:8b:25:19:f4:09:9b:72:
         36:5e:52:f4:a4:9a:a9:8d:cc:50:83:f3:cb:ba:ef:17:f4:26:
         92:a2:b3:25:d6:5e:d4:f4:53:1d:b4:ad:78:62:80:06:70:86:
         ea:fd:5f:e4:5d:ae:46:fe:ee:54:32:ca:a3:20:e2:3d:29:14:
         ae:78:12:19:07:6a:ff:b2:f2:d5:3f:a0:e8:66:22:8f:57:11:
         e5:23:41:af:56:fc:3e:1d:33:5f:f5:a1:04:50:50:e0:21:90:
         5a:83:a5:c3:93:34:25:b2:4a:c5:11:b1:a4:20:00:51:f1:cc:
         8d:ef:12:e4:28:6e:0a:d8:bb:cc:bf:10:68:39:59:f3:c0:b6:
         11:f4:98:62:a0:cf:da:a0:f5:3b:13:fc:16:b2:af:b4:2d:49:
         92:61:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org