Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32342d3234203d3e203631373236.roa
File:                     3133312e37322e39362e302f32342d3234203d3e203631373236.roa (raw, json)
Hash identifier:          JpEs8TtA/u9vMCX09UOclDrCQ2Am38XMO2F8OMbE1G4=
Subject key identifier:   74:59:07:65:D0:67:9F:1A:6A:9A:F9:75:A8:86:AA:33:8E:7E:4F:AE
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       421563ADBFA9BAD1BB4A6ECC177B123E20FB4506
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32342d3234203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        131.72.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:15:63:ad:bf:a9:ba:d1:bb:4a:6e:cc:17:7b:12:3e:20:fb:45:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=74590765D0679F1A6A9AF975A886AA338E7E4FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:e2:1b:ea:9d:48:58:1e:bf:3d:1d:33:bb:
                    4f:65:e9:58:b9:ae:01:38:08:b1:db:c7:89:c3:85:
                    12:2c:9e:9f:99:de:6d:c2:f4:16:45:b4:b2:0e:a0:
                    df:41:c8:a9:50:ae:58:ff:0a:11:9e:c7:6a:47:7f:
                    0c:69:ef:c0:56:69:ae:71:bd:b4:9b:5d:88:2c:0d:
                    1a:55:c6:5c:30:f6:05:4a:3c:f0:97:06:05:ba:79:
                    34:77:3c:2d:f2:a7:90:bf:0d:46:47:b3:82:24:e5:
                    58:bc:c3:a2:1c:7b:6a:af:36:9f:61:92:a4:1b:94:
                    13:4b:1a:c4:78:02:99:93:81:41:0d:77:9e:44:95:
                    03:79:f8:ce:0e:03:a9:f7:7f:de:39:80:90:c2:8a:
                    87:22:6f:78:d6:99:ac:5e:83:8c:47:31:4d:83:73:
                    b9:8d:ce:68:8f:d0:2e:71:df:5c:5e:cc:9b:43:18:
                    54:e8:4d:3d:d6:5d:ac:9b:80:be:cf:cd:fe:67:0f:
                    e1:6b:f2:55:7b:e2:d3:e0:c8:a9:e3:ac:63:ad:8e:
                    04:aa:e9:06:4f:d1:94:e9:2f:a5:a0:fa:04:30:01:
                    66:08:e7:cd:67:da:38:07:7e:97:b4:94:cf:94:b5:
                    a7:dc:b1:72:af:76:07:3c:07:80:44:c2:77:a7:f6:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:07:65:D0:67:9F:1A:6A:9A:F9:75:A8:86:AA:33:8E:7E:4F:AE
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39362e302f32342d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:41:53:d4:a4:91:0a:dc:39:c2:08:ea:6d:cd:ef:e1:45:36:
         e5:f1:e5:eb:f4:73:38:c6:0c:25:57:71:c8:c3:53:5b:2f:4c:
         6d:b3:6c:dc:b9:5a:85:5e:e1:4c:3e:d0:f8:3a:a2:12:f4:22:
         8d:01:9f:83:4f:db:64:80:d5:f5:c3:17:65:f9:08:f1:a3:f5:
         17:fb:ac:30:56:04:e7:48:44:93:a2:aa:1b:0c:16:e8:c1:95:
         ab:be:10:b3:3c:a5:92:7c:1b:57:f6:50:0f:f9:e4:36:6f:14:
         57:35:50:59:39:eb:2a:ad:cf:83:68:cd:ef:d0:12:6e:db:49:
         a9:fd:60:cc:a6:bf:c0:c2:8f:41:22:b5:c9:3e:91:a8:7a:c8:
         6a:3f:b3:51:e2:60:f5:f8:04:58:30:06:b2:cb:2b:ca:00:c8:
         1e:01:43:20:e1:1b:7d:59:d9:9a:51:3a:53:48:39:8b:c1:7e:
         9f:53:83:0e:81:24:5d:cc:2c:2c:df:58:46:d7:40:91:03:f9:
         54:9f:f1:59:df:b2:08:c4:bc:21:f7:11:ae:f9:25:23:a7:9e:
         51:ed:68:e2:0b:46:01:2a:79:28:b4:e5:25:82:3c:c7:d1:6f:
         02:95:5d:22:45:27:04:8b:d6:50:f7:5c:07:57:5a:7d:13:6e:
         00:7b:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org