Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32342d3234203d3e203631373137.roa
File:                     3133312e37322e362e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          CU4JTaaj7jIDIZz6GJPb06aKr4xcYKMO9cgNXEDUbR4=
Subject key identifier:   33:2A:50:EE:DD:B5:D7:C3:E0:2E:F4:78:5C:A3:EF:EE:95:91:9A:1A
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       335BA9F176F1FB59B3DF105A2BF0EBEF3D07A25F
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:56 +0000
ROA not before:           Thu 10 Aug 2023 12:17:56 +0000
ROA not after:            Thu 08 Aug 2024 12:22:56 +0000
asID:                     61717
IP address blocks:        131.72.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5b:a9:f1:76:f1:fb:59:b3:df:10:5a:2b:f0:eb:ef:3d:07:a2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:56 2023 GMT
            Not After : Aug  8 12:22:56 2024 GMT
        Subject: CN=332A50EEDDB5D7C3E02EF4785CA3EFEE95919A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:30:19:6a:10:2c:6f:9a:7c:89:b6:40:c9:
                    e2:c3:59:3a:7e:84:14:a0:77:d9:7b:4f:0e:ab:b5:
                    72:bf:c7:c2:d9:08:e0:e0:fc:f1:91:d6:d8:18:1f:
                    9e:4f:f5:fa:cd:5e:e6:43:e4:d4:16:71:3a:fb:62:
                    44:ba:11:b2:77:ea:34:a7:88:df:3b:c4:8d:0a:de:
                    02:8e:ba:11:5e:d1:67:fb:75:67:90:a5:15:ba:95:
                    4c:4e:c3:ca:df:41:24:04:73:8d:a8:88:73:af:a3:
                    8c:3e:e2:35:5f:5e:00:19:62:84:76:d5:8e:ce:94:
                    97:c7:5f:77:d3:9d:00:4c:ee:73:b0:c1:76:f4:89:
                    ed:4b:19:81:24:c1:17:8b:34:4b:80:08:e4:8e:a9:
                    a9:c2:e4:f4:93:3e:58:59:0d:a6:07:57:2e:91:bf:
                    a6:d8:8f:3d:74:d2:8f:36:49:62:96:79:ca:40:94:
                    d5:86:a4:82:ca:d4:fb:1b:52:df:2d:4d:ab:ee:0e:
                    fa:3a:7b:d5:e2:5e:85:19:bd:2a:1f:0a:ed:c6:98:
                    82:ee:b3:8d:83:e4:0c:6c:92:5b:eb:3b:f4:b3:9e:
                    71:dc:3a:7c:95:27:52:de:39:54:0e:e5:5c:fb:c9:
                    af:e7:c5:3c:37:ef:bc:ee:20:ec:52:1b:31:1d:84:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2A:50:EE:DD:B5:D7:C3:E0:2E:F4:78:5C:A3:EF:EE:95:91:9A:1A
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e362e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:68:01:63:39:05:83:26:6a:9e:b6:86:f4:5d:f4:a1:ab:24:
         fd:b6:98:06:53:f4:f1:0f:74:dc:f1:8c:48:f4:b0:de:98:ae:
         fd:10:d5:c0:f5:13:5b:87:6d:98:60:49:a9:f1:c9:90:e5:48:
         2d:14:7c:6e:4d:bc:f0:0d:23:53:4f:c6:37:f2:75:38:69:46:
         8d:a0:63:a7:2e:be:bc:55:32:02:5c:e2:82:5d:cb:a9:95:24:
         ca:2f:64:f7:07:cb:56:35:1c:b6:05:97:b9:d5:2c:0b:9b:f2:
         46:5d:d4:a6:34:eb:e2:db:6e:ba:b5:4f:6b:0d:dc:24:52:46:
         a1:34:e2:aa:4f:ff:f2:a5:90:6f:29:8e:1e:2d:ea:dc:2b:12:
         cb:60:0d:11:e5:5e:17:88:e1:bf:bf:c4:4e:59:a1:ff:16:d6:
         f8:7f:f5:dc:38:f0:d5:1f:be:d4:74:a7:0f:37:8a:01:83:92:
         a0:2c:4d:ad:f1:1a:00:f3:5f:18:7a:c1:f4:f2:3c:51:9f:b6:
         06:ab:ee:1c:70:eb:6c:59:6c:79:f6:65:e5:c0:a0:e2:55:5f:
         98:64:d6:fb:1a:ed:98:b0:56:74:06:30:ec:f7:d5:55:d0:6e:
         d5:a3:83:ff:b5:c4:c6:e3:51:29:d6:92:a6:4f:7a:3d:f6:7a:
         20:b4:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org