Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36392e302f32342d3234203d3e20323634343032.roa
File:                     3133312e3136312e36392e302f32342d3234203d3e20323634343032.roa (raw, json)
Hash identifier:          fJ3T2ealNKZe6l5fQjJr8zae1PaKcfzxVE1NUsCGEfc=
Subject key identifier:   1E:85:D0:93:FA:E5:48:71:7D:CC:A9:BA:F0:79:7D:A4:56:CE:9B:62
Certificate issuer:       /CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
Certificate serial:       581701BB28C818B5590F3962B7CE411D2C63659A
Authority key identifier: CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36392e302f32342d3234203d3e20323634343032.roa
Signing time:             Tue 09 Apr 2024 18:08:31 +0000
ROA not before:           Tue 09 Apr 2024 18:03:31 +0000
ROA not after:            Tue 08 Apr 2025 18:08:31 +0000
asID:                     264402
IP address blocks:        131.161.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:01:bb:28:c8:18:b5:59:0f:39:62:b7:ce:41:1d:2c:63:65:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Validity
            Not Before: Apr  9 18:03:31 2024 GMT
            Not After : Apr  8 18:08:31 2025 GMT
        Subject: CN=1E85D093FAE548717DCCA9BAF0797DA456CE9B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:15:59:4a:46:4a:ee:fd:e1:bf:c7:3d:1e:
                    d3:de:0c:5e:8e:25:a6:cb:c2:e3:db:c4:a7:c3:18:
                    cd:26:f1:4b:31:ea:df:77:c2:d6:a0:dd:16:51:16:
                    97:b1:3b:83:da:82:d2:2b:a2:93:8e:91:b2:6f:36:
                    e2:bd:a3:0b:c4:58:e3:59:c6:47:28:81:26:35:60:
                    97:ae:02:cd:8b:50:08:67:a2:0c:b0:8d:b1:d1:92:
                    1c:bc:54:2c:22:c9:95:34:17:bc:79:0e:d4:b1:e2:
                    69:79:39:db:44:b5:bc:0b:41:8c:fb:ec:bb:f8:be:
                    20:7b:f8:6b:37:fc:f0:a9:db:27:f2:25:6c:d5:47:
                    af:a6:7d:40:18:c4:2a:36:9a:b1:85:ff:67:52:a2:
                    f9:49:3e:bf:87:36:0e:44:9a:94:7c:e6:85:38:5c:
                    f9:b2:a2:f1:5f:09:f4:43:b2:cf:09:46:3b:15:31:
                    9a:ca:a9:bc:a6:e3:2f:e0:ab:0b:0a:a4:dd:2f:1c:
                    4d:7b:89:42:bf:d7:ed:aa:a0:fc:26:14:08:99:dc:
                    80:6c:c0:39:e4:07:1d:eb:93:97:c3:d9:62:aa:9d:
                    d7:a8:27:5c:05:e4:71:95:47:86:db:bc:38:4a:71:
                    30:81:63:0a:fb:f0:fa:7b:9a:04:23:18:c2:2e:ab:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:D0:93:FA:E5:48:71:7D:CC:A9:BA:F0:79:7D:A4:56:CE:9B:62
            X509v3 Authority Key Identifier:
                keyid:CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e36392e302f32342d3234203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:be:0a:c0:1a:50:aa:50:8a:b1:68:90:5c:e3:b5:64:f1:
         03:29:46:e4:65:5e:4d:20:26:7a:73:b1:9e:cd:5a:a9:34:27:
         d1:37:81:8f:3b:dc:5b:48:02:9f:f7:4f:be:e1:29:e4:48:b0:
         ec:23:4b:1f:38:76:1a:fe:60:70:25:e4:68:d8:37:5f:0a:d1:
         f4:44:73:6e:ce:fb:42:43:bf:31:d4:cc:72:9b:15:b4:43:ec:
         2d:fc:37:f6:a7:98:a4:55:c3:4b:3e:9c:7b:51:84:5d:9e:98:
         30:c6:5d:2b:db:32:97:70:33:9c:c6:eb:03:0f:e3:d7:5a:5d:
         ee:b9:99:b5:f5:d6:99:42:b3:8d:02:0e:9b:b8:a2:5a:ff:07:
         8d:60:eb:79:44:d2:42:67:24:04:98:f4:96:50:71:2b:25:27:
         31:82:ce:21:ce:3e:44:11:59:e2:44:f4:c4:ee:80:5d:c6:df:
         73:61:70:72:68:76:a5:b9:50:4e:3d:df:26:bf:ad:03:00:d5:
         e6:66:eb:b2:a9:8a:d7:31:82:90:f8:89:72:fa:cf:3f:b9:a6:
         bf:f5:b3:58:97:4e:fd:88:24:44:39:ef:d5:29:a9:28:4b:3a:
         44:4e:56:b0:9c:e2:be:33:64:3a:73:56:c1:16:af:41:6b:57:
         1e:3b:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org