Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39392e302f32342d3234203d3e203631373236.roa
File:                     3133312e37322e39392e302f32342d3234203d3e203631373236.roa (raw, json)
Hash identifier:          bmgF2jXJo6YJrVB0IAaJO0/qjae2lQGR4tItSBk9wkw=
Subject key identifier:   9B:70:BB:CB:1E:DF:C1:7C:6E:6E:6A:05:8C:6D:D8:D2:70:41:4D:E5
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       1EE386B4D3843DBEAD9C0103D440CFD0A34979E0
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39392e302f32342d3234203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:44 +0000
ROA not before:           Tue 06 Feb 2024 18:17:44 +0000
ROA not after:            Tue 04 Feb 2025 18:22:44 +0000
asID:                     61726
IP address blocks:        131.72.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e3:86:b4:d3:84:3d:be:ad:9c:01:03:d4:40:cf:d0:a3:49:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:44 2024 GMT
            Not After : Feb  4 18:22:44 2025 GMT
        Subject: CN=9B70BBCB1EDFC17C6E6E6A058C6DD8D270414DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:9c:e1:2c:b3:cf:53:58:7c:3d:2d:61:5c:
                    bb:b3:ab:78:f7:da:81:10:ee:65:82:b2:44:a2:04:
                    72:a1:1d:1d:1c:69:44:23:fa:fc:59:4e:96:01:3b:
                    78:8b:cc:17:c6:ff:05:63:0b:c9:25:c9:93:b7:7f:
                    90:f4:ef:4f:79:32:e5:60:a4:64:d8:21:69:08:49:
                    d1:9d:13:36:08:79:06:fe:e3:22:d2:ad:f6:94:ed:
                    42:20:ca:01:55:f2:69:e5:0d:1c:da:94:3a:e5:f8:
                    01:da:7e:a2:ac:b4:ca:50:31:c4:c9:48:2d:c7:20:
                    2c:94:41:0d:42:ab:8f:55:5e:50:1b:ac:24:56:51:
                    70:f2:99:9f:f3:31:4a:28:6c:19:75:4b:0b:ea:f8:
                    31:cb:5a:c5:e0:ee:b4:b1:4c:27:26:da:6e:9b:17:
                    43:ad:10:2a:3d:2b:61:1d:fc:7f:1e:e9:85:73:a7:
                    e3:9e:17:c0:93:6b:b4:6d:30:f7:27:34:b4:f9:4e:
                    ec:a6:cb:76:69:d9:6d:1a:2e:4a:ce:d1:24:07:4f:
                    4d:23:ee:8e:3b:1f:95:35:b3:3e:12:02:8c:f9:74:
                    0e:61:8d:15:7c:11:a7:c6:fa:72:39:16:23:4e:cd:
                    da:f3:1d:c7:2f:d8:28:66:9f:3b:9e:c9:dd:b6:d2:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:70:BB:CB:1E:DF:C1:7C:6E:6E:6A:05:8C:6D:D8:D2:70:41:4D:E5
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/3133312e37322e39392e302f32342d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:7f:7e:21:6b:ab:f7:c6:f3:12:d5:e5:ff:71:95:bc:94:
         3e:f8:26:75:4b:d3:b2:fc:60:65:3f:a3:67:a4:de:c8:36:d3:
         c9:b5:7b:a8:58:77:78:3a:8f:00:6c:d0:94:86:d6:0f:04:fa:
         66:68:b9:8b:84:33:aa:26:08:4a:31:62:12:d9:e3:92:db:fd:
         fa:56:72:61:d9:a0:55:dd:bb:6c:4e:90:5d:13:31:4d:85:5a:
         33:e4:c4:dd:66:0a:fb:25:85:4e:9d:2f:d5:c9:dc:68:f5:71:
         39:0a:a4:37:1e:da:3f:42:e1:8d:0d:4a:01:98:16:6a:a5:57:
         f7:c8:fd:32:57:ba:e2:99:a8:00:25:b8:51:c0:d3:82:fa:73:
         64:e2:1d:41:ad:30:a4:41:e1:13:86:a2:a6:e2:bf:65:af:a1:
         bf:ff:aa:49:87:9f:c8:af:68:52:3b:dc:43:bb:17:7e:d0:25:
         c5:37:9f:b8:34:e5:47:6c:e9:a6:52:a8:f5:1a:e6:a3:0e:26:
         c5:ed:be:28:8a:aa:5d:3d:bc:19:f0:cc:97:4c:32:09:61:54:
         33:55:0d:7e:0d:10:01:81:43:b8:f8:eb:b5:dc:40:13:fa:a9:
         f7:83:f4:cb:91:64:86:bf:19:c3:0d:c4:88:3b:90:73:1a:15:
         b0:03:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org