Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          XrFMMBWBaf8j4T/8+cRyzVj8r5rzGohkb+YkNS3UsdA=
Subject key identifier:   3E:BF:3D:92:AC:00:D5:D2:C4:84:49:F2:A7:5C:C6:97:6F:92:28:F7
Certificate issuer:       /CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
Certificate serial:       470B868EA9281F9B79D08DE828684F43BE2B55D7
Authority key identifier: 59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa
Signing time:             Mon 05 Feb 2024 16:26:12 +0000
ROA not before:           Mon 05 Feb 2024 16:21:12 +0000
ROA not after:            Mon 03 Feb 2025 16:26:12 +0000
asID:                     61637
IP address blocks:        131.100.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:86:8e:a9:28:1f:9b:79:d0:8d:e8:28:68:4f:43:be:2b:55:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59570A4D4E2526286E2A7BD74DB05A9C892E6994
        Validity
            Not Before: Feb  5 16:21:12 2024 GMT
            Not After : Feb  3 16:26:12 2025 GMT
        Subject: CN=3EBF3D92AC00D5D2C48449F2A75CC6976F9228F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:c8:8c:55:22:4f:5c:e2:ab:55:19:7f:6d:
                    f6:71:20:e9:3c:fb:10:0f:ae:ac:60:ac:9f:06:9d:
                    61:f6:1c:bf:dc:31:37:88:ef:5e:5a:1c:b1:c7:50:
                    37:89:25:e1:ee:ac:8e:aa:6e:77:21:6f:d1:e3:25:
                    bd:70:57:ed:70:90:52:00:0c:8b:e1:8e:f9:aa:67:
                    88:b4:28:af:1b:ac:1f:fe:00:c9:d3:da:92:d1:9e:
                    d5:43:c0:ae:b4:7d:8d:db:91:34:2c:3a:e0:31:5c:
                    06:7b:af:d1:c2:1d:56:60:46:6d:23:02:c7:bd:7b:
                    5d:c0:78:5b:1b:dc:f9:13:8a:2b:41:c0:25:c5:89:
                    5e:65:ac:e4:d6:7e:ff:76:77:85:ff:de:1c:aa:cd:
                    79:82:51:b0:cf:14:39:73:14:81:ea:26:b5:f7:83:
                    56:98:81:18:eb:a9:17:e0:0a:8c:ff:71:94:01:e7:
                    11:42:ab:2d:cf:1a:f2:7f:20:4e:32:47:1d:e9:dd:
                    f9:0b:f6:58:6a:1b:5c:57:54:3d:ab:c8:d6:a3:c1:
                    31:52:a9:a6:5e:5f:25:7f:8b:da:72:ab:ef:a7:9c:
                    90:fd:13:02:22:2d:32:18:b2:8f:46:28:14:68:88:
                    25:eb:8c:47:72:c7:9a:3a:cc:f4:57:5c:13:7a:2e:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:3D:92:AC:00:D5:D2:C4:84:49:F2:A7:5C:C6:97:6F:92:28:F7
            X509v3 Authority Key Identifier:
                keyid:59:57:0A:4D:4E:25:26:28:6E:2A:7B:D7:4D:B0:5A:9C:89:2E:69:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59570A4D4E2526286E2A7BD74DB05A9C892E6994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/0/3133312e3130302e3133322e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:5d:a8:79:20:90:da:34:c3:df:d3:51:9d:26:21:e0:9f:
         57:98:a6:8d:7b:e5:d9:92:66:2b:d3:6b:0b:69:3c:df:d6:d1:
         75:55:d3:de:b3:13:a3:e4:79:7a:90:9e:38:a7:87:37:34:a0:
         22:46:91:5f:d8:75:eb:e4:9e:72:44:1b:48:f3:0c:dc:7b:6d:
         d6:97:ec:6f:56:e1:15:fe:16:34:81:29:07:90:65:82:61:d7:
         ae:d6:40:ba:9f:c3:48:52:33:a5:b6:76:23:04:66:f7:66:76:
         7b:38:5d:c1:33:a8:bd:b8:59:6b:9d:f6:f9:13:73:e1:9e:5e:
         d0:3c:74:f2:f2:9a:06:ea:cb:00:f6:ed:cc:3d:d6:72:39:14:
         de:69:6e:0e:0e:fa:64:cd:6c:36:64:ff:47:8f:09:c4:8f:14:
         53:72:65:e7:53:90:70:7d:1d:b8:5f:d0:13:0e:02:6f:94:9f:
         69:ce:bf:75:c9:9d:02:68:39:1d:24:c7:b8:37:bb:05:ab:37:
         a4:1e:b3:1a:7f:b6:44:6a:bd:71:95:f1:e6:dd:d2:84:f7:4c:
         3d:d0:7e:07:1b:84:07:7d:cd:fe:78:7f:a3:a8:1e:96:a1:9d:
         cc:ef:d5:23:97:06:6c:7e:86:f0:89:7f:38:b7:82:b4:3a:60:
         0c:bf:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:09 2024 by rpki-client on console-fra.rpki-client.org