Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39372e302f32342d3234203d3e203631373236.roa
File:                     3133312e37322e39372e302f32342d3234203d3e203631373236.roa (raw, json)
Hash identifier:          a232GzLC67V7nPHo8nl9xRWR6Evp0tUNMwvD8Qlj138=
Subject key identifier:   47:BE:F4:2D:63:D9:52:28:2C:C4:47:9D:EE:88:DC:60:A2:79:4E:54
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       1B0C890358FAD4B169432B3A9B6D75CC1FA2C747
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39372e302f32342d3234203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:44 +0000
ROA not before:           Tue 06 Feb 2024 18:17:44 +0000
ROA not after:            Tue 04 Feb 2025 18:22:44 +0000
asID:                     61726
IP address blocks:        131.72.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0c:89:03:58:fa:d4:b1:69:43:2b:3a:9b:6d:75:cc:1f:a2:c7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:44 2024 GMT
            Not After : Feb  4 18:22:44 2025 GMT
        Subject: CN=47BEF42D63D952282CC4479DEE88DC60A2794E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ef:02:a2:22:f5:10:bf:e4:ae:78:39:b9:3b:
                    1b:a4:c8:d7:e3:2e:2c:75:ac:ac:7b:ec:de:ae:6c:
                    a0:01:4f:e5:ef:b2:11:df:c6:76:86:96:54:7f:a1:
                    f0:a2:62:b9:01:b1:59:4e:5a:ec:7b:15:bc:ef:da:
                    13:37:34:21:c6:1e:be:97:46:49:c1:fd:0f:15:10:
                    e7:02:ff:ec:c8:6c:07:2f:6b:5d:b4:3b:48:2a:9b:
                    8c:b4:43:6b:9b:db:c6:fe:27:9f:dd:d9:85:46:c5:
                    d3:2c:59:9e:b0:fc:cb:77:ac:25:2b:0f:d9:d4:bc:
                    a9:5a:48:c1:3a:77:ff:08:4e:0a:20:28:71:28:8d:
                    6a:e2:31:06:c2:7a:8a:70:8e:1c:eb:56:ac:f3:bb:
                    49:42:b2:a2:ff:cb:0c:cf:9e:cb:87:4b:3d:26:82:
                    e8:ee:13:61:dd:ca:c6:f2:e0:bd:d7:d9:6e:8e:d0:
                    90:f6:88:a0:b3:4c:2e:b9:0a:84:0c:1c:be:59:38:
                    a4:b0:03:11:46:5e:b5:79:1a:ff:58:a6:01:dc:11:
                    62:7c:1a:04:d5:5c:52:db:57:27:84:c4:15:24:6e:
                    3e:7b:9d:5e:f8:7c:2d:86:60:f9:0d:3a:ce:0f:83:
                    bd:cd:2b:4f:17:58:f7:d9:f9:3c:52:fe:a1:e4:c8:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BE:F4:2D:63:D9:52:28:2C:C4:47:9D:EE:88:DC:60:A2:79:4E:54
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39372e302f32342d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:b3:0c:e6:22:8c:75:25:2f:48:98:53:4a:18:90:f8:76:
         dd:1e:68:32:fc:d4:19:3a:7d:37:d3:16:18:d2:49:32:cd:95:
         cd:6b:09:29:2f:b2:eb:f5:33:a8:9f:7a:70:4f:8a:53:3f:6a:
         34:75:a7:b5:30:58:31:23:47:cc:00:81:d6:99:69:cc:a3:f8:
         88:9e:d8:14:d5:80:91:c9:03:ff:00:de:32:f4:ce:ec:83:7d:
         0f:3b:59:5c:2a:01:22:ce:6c:10:2d:5f:11:8c:a6:c1:8a:e5:
         e2:e6:8e:d3:56:94:db:50:9e:33:c0:70:ee:1d:ec:e4:49:eb:
         0c:de:1f:a5:98:4a:73:a7:3a:05:94:20:d5:ca:e7:1f:50:ac:
         e2:b5:19:e7:b4:15:81:d5:b1:2b:36:74:d7:52:46:11:cf:52:
         4b:d5:99:81:d5:b8:78:ba:dc:ae:e8:5e:d1:17:f6:2a:09:f5:
         2c:c4:30:ad:a7:a4:9c:d9:28:eb:58:c6:50:d8:1a:48:6e:da:
         18:3f:d0:29:e8:45:90:c4:e1:1f:aa:cb:00:bd:ba:03:29:14:
         61:aa:00:d8:5c:27:3c:b3:18:ea:b7:eb:24:e7:9f:35:34:98:
         2c:a2:99:f7:7a:e3:15:f5:7f:1e:9a:9b:1e:08:60:b2:6b:eb:
         7d:45:73:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGwyJA1j61LFpQys6m211zB+ix0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwQURERTczRjkyOEU0M0I4NEUxMTdFMEY3NTkxRjI0
N0QxODlCRDAeFw0yNDAyMDYxODE3NDRaFw0yNTAyMDQxODIyNDRaMDMxMTAvBgNV
BAMTKDQ3QkVGNDJENjNEOTUyMjgyQ0M0NDc5REVFODhEQzYwQTI3OTRFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7wKiIvUQv+SueDm5OxukyNfj
Lix1rKx77N6ubKABT+XvshHfxnaGllR/ofCiYrkBsVlOWux7Fbzv2hM3NCHGHr6X
RknB/Q8VEOcC/+zIbAcva120O0gqm4y0Q2ub28b+J5/d2YVGxdMsWZ6w/Mt3rCUr
D9nUvKlaSME6d/8ITgogKHEojWriMQbCeopwjhzrVqzzu0lCsqL/ywzPnsuHSz0m
gujuE2Hdysby4L3X2W6O0JD2iKCzTC65CoQMHL5ZOKSwAxFGXrV5Gv9YpgHcEWJ8
GgTVXFLbVyeExBUkbj57nV74fC2GYPkNOs4Pg73NK08XWPfZ+TxS/qHkyCs9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUR770LWPZUigsxEed7ojcYKJ5TlQwHwYDVR0j
BBgwFoAU3Qrd5z+SjkO4ThF+D3WR8kfRib0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp
NWgvMC9ERDBBRERFNzNGOTI4RTQzQjg0RTExN0UwRjc1OTFGMjQ3RDE4OUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REMEFEREU3M0Y5MjhFNDNC
ODRFMTE3RTBGNzU5MUYyNDdEMTg5QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhod0JZMnB3VUVVenAyYVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzAv
MzEzMzMxMmUzNzMyMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINIYTANBgkqhkiG9w0BAQsFAAOCAQEAgG2zDOYijHUl
L0iYU0oYkPh23R5oMvzUGTp9N9MWGNJJMs2VzWsJKS+y6/UzqJ96cE+KUz9qNHWn
tTBYMSNHzACB1plpzKP4iJ7YFNWAkckD/wDeMvTO7IN9DztZXCoBIs5sEC1fEYym
wYrl4uaO01aU21CeM8Bw7h3s5EnrDN4fpZhKc6c6BZQg1crnH1Cs4rUZ57QVgdWx
KzZ011JGEc9SS9WZgdW4eLrcruhe0Rf2Kgn1LMQwraeknNko61jGUNgaSG7aGD/Q
KehFkMThH6rLAL26AykUYaoA2FwnPLMY6rfrJOefNTSYLKKZ93rjFfV/HpqbHghg
smvrfUVzGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org