Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39382e302f32342d3234203d3e203631373236.roa
File:                     3133312e37322e39382e302f32342d3234203d3e203631373236.roa (raw, json)
Hash identifier:          5Gk7WDANzQXcxxNsQy9S/TrN+j+qTCaoL6z5yFGly2I=
Subject key identifier:   97:29:7A:34:01:3C:6A:66:83:86:88:58:52:55:35:16:EA:63:F7:DA
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       527D446872285B55706C34C0840D969520532415
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39382e302f32342d3234203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        131.72.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:44:68:72:28:5b:55:70:6c:34:c0:84:0d:96:95:20:53:24:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=97297A34013C6A668386885852553516EA63F7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:e4:54:b5:20:e3:82:ba:ef:a3:87:c8:73:
                    58:40:7c:f4:2b:d4:4a:02:a4:07:e7:27:91:c9:2d:
                    ae:23:ed:c4:ba:d7:95:2b:73:b7:6a:c5:30:e0:31:
                    e2:00:59:d6:7f:26:11:32:1a:af:e2:bd:53:f2:25:
                    a2:d5:9c:97:c0:52:15:a2:f2:0a:72:83:7f:78:f1:
                    e8:7b:90:f9:75:98:ae:49:0e:b7:02:40:36:39:21:
                    98:59:2a:7c:ed:fd:29:ed:3a:84:27:14:a6:44:72:
                    2d:44:37:1b:03:2b:ea:d5:24:1a:cf:6d:10:b1:04:
                    70:6b:ff:a1:1b:9c:14:7a:bb:af:32:3f:44:8a:ad:
                    d1:9a:4d:c1:22:29:5e:89:59:06:06:17:cd:70:4e:
                    90:54:02:c5:8d:1d:fa:c4:ab:63:45:bc:ae:08:9c:
                    ca:e4:eb:42:98:7d:08:8f:fa:d3:86:d9:34:ea:cf:
                    39:3a:43:ed:a9:81:7d:68:c4:67:69:76:e1:cf:b4:
                    5b:f2:8e:94:c4:a7:97:5d:19:3c:08:f8:93:8c:c0:
                    7c:80:85:bb:16:b6:49:12:1c:5b:93:56:87:91:0e:
                    a4:06:29:6e:7a:1b:11:28:36:f0:f0:14:a2:09:10:
                    be:a0:e3:69:a9:29:3c:40:7b:1f:a5:7f:4a:92:8b:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:29:7A:34:01:3C:6A:66:83:86:88:58:52:55:35:16:EA:63:F7:DA
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39382e302f32342d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:12:c4:fd:d3:35:87:54:7c:92:3e:07:1d:de:cf:29:61:d0:
         f9:bc:da:03:56:fc:f2:cb:79:d5:70:5d:55:e9:1e:fa:ab:48:
         52:32:b1:88:9f:b5:a4:43:1f:21:3f:96:75:0f:08:48:11:1b:
         66:3a:0e:b4:6b:fa:da:bd:ec:5d:e4:e4:ee:fe:c4:c2:7d:d2:
         f5:d8:ed:99:7f:ff:f5:7e:33:3d:9e:92:b8:a2:b6:db:59:11:
         11:24:e8:96:29:7c:3c:4f:57:1f:e8:32:4e:0a:6a:82:ba:86:
         c2:91:8f:ce:21:ee:ea:e1:bb:80:d9:0f:a5:2b:e5:d6:7b:75:
         fe:7e:5a:30:62:a6:30:fd:c2:b0:e3:a6:3b:cd:86:f6:11:54:
         ae:1e:8a:56:ff:72:a6:2f:c0:17:91:44:8d:11:86:3d:58:78:
         04:23:b4:1d:5c:4d:45:69:3b:3f:9a:af:22:71:c4:e0:e7:50:
         96:b9:14:32:39:5f:6b:a4:b9:74:64:d3:9d:5f:7a:f5:2d:c8:
         60:a0:c7:46:a0:ae:fc:fe:14:71:5c:aa:c2:bb:6b:8f:df:93:
         41:05:81:ad:ae:fd:9b:c9:21:e1:c7:2f:a5:31:ae:46:c5:d9:
         06:e7:4c:2e:5c:84:32:8f:ce:90:39:c1:df:1f:df:f8:60:ce:
         46:53:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org