Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32342d3234203d3e203631373531.roa
File:                     3133312e37322e3235322e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier:          brbnDqeXbBlrypJnCrhr11e6pHWbE9O8GPZEtqf3dDg=
Subject key identifier:   CE:42:69:24:C8:D3:67:59:DD:79:4D:47:46:87:3C:12:22:8F:DE:37
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       0309BE38FE9368F7E35F7A7F0E24B84D98F2110B
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32342d3234203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:38:56 +0000
ROA not before:           Fri 15 Sep 2023 20:33:56 +0000
ROA not after:            Fri 13 Sep 2024 20:38:56 +0000
asID:                     61751
IP address blocks:        131.72.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:be:38:fe:93:68:f7:e3:5f:7a:7f:0e:24:b8:4d:98:f2:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:33:56 2023 GMT
            Not After : Sep 13 20:38:56 2024 GMT
        Subject: CN=CE426924C8D36759DD794D4746873C12228FDE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:f5:3e:57:75:d6:d7:17:f9:cb:6e:9c:31:
                    13:a3:22:ba:6b:84:27:74:5f:35:9a:ea:8b:7b:33:
                    b6:40:1a:ca:8d:90:bd:af:25:68:7e:3e:d0:9b:19:
                    61:b2:cb:d3:51:16:27:5f:13:d0:3c:96:df:c7:8d:
                    cb:73:01:76:59:a7:8e:54:b6:39:c4:72:21:fd:b2:
                    60:02:87:05:54:91:a6:6e:89:8c:59:0f:dd:03:8d:
                    e8:69:7a:06:e0:45:e9:f8:1f:bf:a1:09:df:be:87:
                    d3:24:bb:69:61:b3:a5:a8:27:53:a0:de:a8:85:03:
                    5d:45:5f:25:c1:3c:ee:1f:ea:7a:a6:fb:2f:3d:8a:
                    7a:d3:50:8d:e6:bf:60:94:bd:f6:d2:1f:da:18:69:
                    2f:b9:fd:35:d9:09:12:8d:d3:a6:da:b1:a8:49:9a:
                    ca:e6:3b:0b:2a:15:b8:8e:d6:07:7e:66:6b:2a:3c:
                    6f:76:60:3a:01:54:65:fb:5c:8d:8d:74:f4:3e:46:
                    f1:c5:05:89:d4:c0:89:3a:67:d9:56:f6:12:42:66:
                    45:b5:98:97:72:6e:21:1f:0b:72:43:08:6a:cc:ac:
                    0a:c7:55:71:ee:a7:ca:2a:84:6c:e0:43:8e:1e:07:
                    ee:dd:f6:3c:84:5d:d5:66:01:a3:07:78:31:ec:c5:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:69:24:C8:D3:67:59:DD:79:4D:47:46:87:3C:12:22:8F:DE:37
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32342d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:d8:64:a5:8b:6d:29:32:bf:7e:75:f5:77:8c:ae:3b:50:
         ed:5e:69:85:e7:c9:0b:d8:ab:ba:b6:8e:70:8d:72:6b:6f:cb:
         a9:51:7b:66:ac:9c:65:d1:a5:08:78:5b:c0:88:31:79:01:06:
         a9:97:a2:91:7e:67:1e:97:9f:3d:c4:53:04:dd:8e:a3:08:98:
         5e:e1:f0:9d:0c:16:15:3d:f7:d0:ef:50:bf:76:07:0a:30:cd:
         f3:87:1d:9e:03:0e:ad:c9:c0:27:3e:e3:6b:99:95:28:ae:32:
         4b:99:1a:34:4a:c0:90:eb:f1:41:41:38:13:71:85:8b:f1:80:
         8b:77:56:82:6d:f0:a1:5b:b2:52:c9:ea:e7:d0:01:c3:dc:5b:
         5c:48:bd:89:92:ef:28:34:06:77:91:33:32:fb:48:82:c4:62:
         b7:02:dd:82:27:c9:31:dd:b1:82:0c:18:e4:2d:05:b9:d2:6a:
         82:9b:e1:a9:2c:58:da:56:7a:c1:80:53:99:85:a9:dc:aa:7c:
         97:cb:c4:1b:11:db:6b:35:76:1b:81:ee:d0:45:91:7c:ae:0f:
         72:7b:cd:93:c9:4b:df:d2:d7:96:2f:77:9d:f9:10:b3:16:04:
         93:37:c2:55:c5:61:53:8a:d9:ef:16:51:8b:31:e9:f2:a1:c3:
         95:66:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-ams.rpki-client.org