Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32342d3234203d3e203631373531.roa
File:                     3133312e37322e3235342e302f32342d3234203d3e203631373531.roa (raw, json)
Hash identifier:          mMJi/yHdUqgW1EWtD465yJTqdrVB7h5mUbzh3S6wMn0=
Subject key identifier:   51:1D:78:17:EA:EE:B5:2A:4B:5C:D9:42:46:9B:71:06:FD:61:B8:EC
Certificate issuer:       /CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
Certificate serial:       6016905C9D67F03EBBABBEC59708B328B25DDDF7
Authority key identifier: CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32342d3234203d3e203631373531.roa
Signing time:             Fri 15 Sep 2023 20:39:03 +0000
ROA not before:           Fri 15 Sep 2023 20:34:03 +0000
ROA not after:            Fri 13 Sep 2024 20:39:03 +0000
asID:                     61751
IP address blocks:        131.72.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:90:5c:9d:67:f0:3e:bb:ab:be:c5:97:08:b3:28:b2:5d:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032
        Validity
            Not Before: Sep 15 20:34:03 2023 GMT
            Not After : Sep 13 20:39:03 2024 GMT
        Subject: CN=511D7817EAEEB52A4B5CD942469B7106FD61B8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:62:e7:98:6c:ad:74:d0:ff:34:14:a5:78:
                    da:52:c1:a3:e2:7b:3d:3f:3e:2f:40:f6:14:17:7f:
                    4f:58:d8:1b:24:5e:13:bb:7b:8a:e7:13:13:76:96:
                    c0:b7:32:64:79:03:b3:4c:43:c0:0b:70:d7:f9:5f:
                    76:b4:f8:f7:e0:eb:e0:bf:81:31:82:91:2e:a3:51:
                    ff:54:9d:54:2a:53:a3:31:75:ad:35:60:21:12:28:
                    cd:27:3f:85:bf:ad:95:6f:54:a1:a3:fd:f3:14:fd:
                    7f:33:fd:57:e3:91:14:a0:02:13:d4:67:1a:64:ce:
                    6a:02:10:8c:bc:0e:1f:a1:69:12:30:dd:ff:f2:3e:
                    70:70:6a:30:d9:52:75:60:16:97:5a:05:66:8c:9b:
                    f3:23:44:b8:88:f1:5b:f2:c5:77:6b:69:f0:e3:3d:
                    9d:39:4b:d2:fc:38:a4:d8:fc:4b:57:a5:3c:ff:4c:
                    90:25:6d:fa:b3:6c:b9:5c:9a:5e:fd:d3:f0:bd:c9:
                    3e:6c:37:09:65:76:61:09:53:b9:3f:8c:4b:40:ce:
                    2b:ef:58:8c:86:0c:cc:60:98:1c:4a:33:a5:cc:bf:
                    2a:16:5b:76:64:6e:13:a9:7f:7d:22:51:17:89:25:
                    dd:8b:e1:7c:6a:f2:0b:47:5f:6d:d8:e7:87:49:9b:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:78:17:EA:EE:B5:2A:4B:5C:D9:42:46:9B:71:06:FD:61:B8:EC
            X509v3 Authority Key Identifier:
                keyid:CB:2D:87:0D:4D:90:88:36:E3:78:ED:7B:1F:2C:C6:E2:FE:FE:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB2D870D4D908836E378ED7B1F2CC6E2FEFE5032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235342e302f32342d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:fd:66:03:ed:ee:25:ce:75:35:a1:7c:9b:8c:28:91:3d:
         40:e1:16:5d:cf:69:7e:58:a8:9d:1c:91:4c:53:b7:73:67:a1:
         44:39:70:25:27:02:43:c1:10:e1:ba:4f:87:af:4d:a4:70:b5:
         60:23:52:e3:b6:0a:03:77:e0:d4:b7:12:6f:ec:9e:73:9e:96:
         ab:93:3c:7b:2a:5a:8f:d5:ab:a2:b6:d8:6f:7b:9e:5c:f5:cb:
         5a:a9:65:11:d8:e1:b7:6c:e6:65:06:5e:f1:19:6f:b7:23:23:
         e0:8a:f3:0c:12:fd:5c:dc:6c:09:df:fe:13:69:e9:96:c3:87:
         02:5f:7d:6b:f6:47:1c:7b:8e:9f:61:0b:5e:1f:70:a8:fd:ce:
         d7:b8:99:a9:14:90:9f:af:32:9b:2b:fc:67:57:4f:c7:ec:e8:
         9c:00:17:18:91:fd:b7:ac:3a:18:47:f0:02:4b:9d:fb:a7:60:
         b8:33:88:37:a5:dd:ac:dd:48:12:ef:01:cc:49:4f:97:32:b3:
         af:48:03:bb:27:61:88:dd:87:73:f9:82:b7:92:65:5d:73:7d:
         3a:df:34:e9:99:3d:73:e4:aa:58:61:12:3e:19:13:6c:92:ed:
         14:ca:6c:91:ff:a3:c5:2c:47:7d:b4:f0:2d:86:7d:05:3c:f5:
         1c:15:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org