Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e372e302f32342d3234203d3e203631373137.roa
File:                     3133312e37322e372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          gAha7cK3yh5FBkH3PxgFiLoPqcW4cp/cfMZ3NYP5dyA=
Subject key identifier:   D9:19:20:AB:FA:6C:24:BE:89:2F:D1:CB:63:F2:90:0B:57:A4:E0:D8
Certificate issuer:       /CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
Certificate serial:       62A15C02B4B2EA4C97DFFBCD7EBE329F123521FA
Authority key identifier: 5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 10 Aug 2023 12:22:57 +0000
ROA not before:           Thu 10 Aug 2023 12:17:57 +0000
ROA not after:            Thu 08 Aug 2024 12:22:57 +0000
asID:                     61717
IP address blocks:        131.72.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:5c:02:b4:b2:ea:4c:97:df:fb:cd:7e:be:32:9f:12:35:21:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9914A35ACBABAC6A6E5FAA599497DD97C412A5
        Validity
            Not Before: Aug 10 12:17:57 2023 GMT
            Not After : Aug  8 12:22:57 2024 GMT
        Subject: CN=D91920ABFA6C24BE892FD1CB63F2900B57A4E0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:66:95:7b:bf:44:2c:76:89:7a:c3:8f:ed:
                    75:79:65:0a:f3:11:ce:bb:ae:5c:30:6b:1c:6d:22:
                    10:96:6f:a3:d5:e7:7c:12:b7:38:d5:87:e9:a2:31:
                    e3:8a:d7:2f:86:aa:f6:e8:a4:b2:ee:a1:d8:3f:6d:
                    07:ce:d8:c1:4f:bd:d2:ee:09:e4:d1:32:7d:c9:db:
                    1c:22:e2:95:b4:23:0c:50:bf:1a:2f:df:df:69:ac:
                    3c:ac:1a:1c:de:91:41:44:4a:39:1c:e0:e4:9d:57:
                    9b:f0:5e:52:f0:c8:5a:3d:d3:0a:fc:90:fd:fa:4c:
                    d0:59:60:f9:9d:84:31:07:c8:0c:33:a1:f8:33:31:
                    4b:46:25:81:d3:47:6a:b1:93:83:3d:81:9a:a7:8d:
                    2d:b4:32:77:d1:44:9d:47:af:d8:c0:a1:80:ae:c3:
                    e8:8f:92:e0:6b:c8:bd:dc:75:5e:4a:a0:ce:96:84:
                    c7:50:ff:7b:98:60:7c:0b:5b:26:1a:32:38:bf:0f:
                    52:f7:5c:c8:2b:fc:7a:44:d2:cd:fb:a2:17:73:fb:
                    59:04:75:e8:25:e5:06:20:48:48:d1:c5:4c:a1:d7:
                    06:63:62:32:eb:f1:90:5f:e4:fb:5b:ce:1c:e7:2d:
                    64:a0:0e:94:f1:85:db:fc:86:1d:56:e0:e2:a1:04:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:19:20:AB:FA:6C:24:BE:89:2F:D1:CB:63:F2:90:0B:57:A4:E0:D8
            X509v3 Authority Key Identifier:
                keyid:5C:99:14:A3:5A:CB:AB:AC:6A:6E:5F:AA:59:94:97:DD:97:C4:12:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C9914A35ACBABAC6A6E5FAA599497DD97C412A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/0/3133312e37322e372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:46:7c:c2:61:78:81:03:32:95:7d:3e:c9:c4:5f:ae:37:
         dc:80:e6:15:1b:ff:35:ff:2d:22:5f:5e:5c:9c:e1:a5:54:d8:
         b1:51:fc:e6:49:68:89:2c:ef:c7:6c:ee:76:3e:b0:c2:f6:45:
         be:f7:ea:9b:b4:e0:bc:4b:10:92:98:4e:5a:b3:16:a3:f1:72:
         fb:03:d8:84:e1:36:75:f2:be:23:1d:71:37:50:3f:0d:0e:5e:
         0d:d6:99:b7:6a:3a:90:c7:44:6a:e2:4d:ab:9e:ed:6c:f1:7c:
         23:5d:23:0a:a0:e3:91:35:4a:e0:57:79:79:da:ff:4c:fc:18:
         45:52:f0:2b:72:a9:9c:de:90:a7:8f:82:90:0e:52:8d:5a:25:
         66:7c:5a:2d:9e:96:b7:db:db:0c:87:8c:f6:c7:a0:ec:e3:f1:
         c1:d2:43:b5:c0:34:c3:4a:72:27:f6:4a:88:39:d0:13:c7:69:
         57:79:90:c4:5e:6e:8a:2b:1d:d6:fb:db:03:1b:ff:10:50:ca:
         01:39:19:95:27:d7:b7:56:e0:16:47:d2:43:7c:26:cf:79:56:
         af:ea:87:1d:1f:4e:f1:58:fd:bb:e1:85:79:4e:98:17:5d:06:
         a8:87:bb:37:b7:63:a9:d1:b2:29:52:dd:96:a2:ca:c3:ec:18:
         c6:6c:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org