Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37302e302f32342d3234203d3e20323634343032.roa
File:                     3133312e3136312e37302e302f32342d3234203d3e20323634343032.roa (raw, json)
Hash identifier:          1XYXoPSdk8RsIMLqxseKiIrHufhU56wq+ArxnVRQeVY=
Subject key identifier:   1D:30:10:BF:28:9D:27:5D:5A:5F:DC:FA:08:35:A4:11:34:6E:29:B6
Certificate issuer:       /CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
Certificate serial:       66EFD761DEF4C2049DD329192F76838B179E1457
Authority key identifier: CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37302e302f32342d3234203d3e20323634343032.roa
Signing time:             Tue 09 Apr 2024 18:08:32 +0000
ROA not before:           Tue 09 Apr 2024 18:03:32 +0000
ROA not after:            Tue 08 Apr 2025 18:08:32 +0000
asID:                     264402
IP address blocks:        131.161.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:d7:61:de:f4:c2:04:9d:d3:29:19:2f:76:83:8b:17:9e:14:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF97F6FB8D9E2AFA9379678AE193B3097BF4744
        Validity
            Not Before: Apr  9 18:03:32 2024 GMT
            Not After : Apr  8 18:08:32 2025 GMT
        Subject: CN=1D3010BF289D275D5A5FDCFA0835A411346E29B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:94:d4:33:99:7c:13:2b:a8:84:f4:a9:a5:
                    de:46:dd:ca:06:fd:0c:45:5a:8d:75:d3:08:64:31:
                    cc:07:7c:e0:95:b1:ed:32:c0:76:ab:47:8b:0d:ee:
                    0f:e2:e4:04:a9:e8:a0:12:c7:44:02:c7:00:46:e7:
                    c9:c4:f4:0f:cf:02:28:c1:d9:09:ea:cd:3c:a4:72:
                    87:c1:cc:7d:05:5c:90:0a:7d:fb:c2:57:c9:f1:55:
                    a6:eb:d6:f8:af:10:0a:18:5c:3f:b3:34:e7:34:12:
                    b9:83:22:91:c6:7e:69:ee:dc:77:74:96:af:e4:50:
                    a8:54:7e:e5:b0:72:35:96:57:14:38:dc:2c:d6:30:
                    fa:e8:7d:65:ff:9b:41:6b:ef:31:4a:81:65:87:c9:
                    d2:77:5a:c6:12:1a:41:f7:38:bf:3a:2e:a0:fc:57:
                    18:0d:bb:30:80:e7:b9:73:bd:2a:b9:92:6d:df:f3:
                    09:00:fb:b0:e7:ba:79:d5:6d:04:c5:4b:13:4a:96:
                    b3:5a:59:9e:ee:e0:53:20:26:ec:84:77:a6:61:7d:
                    f4:a2:7d:b0:9d:ff:23:fe:9a:53:a0:44:b8:1c:53:
                    7a:50:07:70:90:c2:f8:58:0d:59:e8:ef:53:19:62:
                    23:b0:6f:16:02:1a:11:ce:65:64:7d:91:f5:80:af:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:30:10:BF:28:9D:27:5D:5A:5F:DC:FA:08:35:A4:11:34:6E:29:B6
            X509v3 Authority Key Identifier:
                keyid:CA:F9:7F:6F:B8:D9:E2:AF:A9:37:96:78:AE:19:3B:30:97:BF:47:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAF97F6FB8D9E2AFA9379678AE193B3097BF4744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/1/3133312e3136312e37302e302f32342d3234203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3e:b6:a8:33:9e:4a:f1:71:8f:17:70:60:ea:6f:a2:ff:bd:
         7d:71:de:0a:f8:ba:e1:10:b1:08:5b:2c:8b:81:49:a8:55:83:
         1f:9c:2b:76:be:b2:a5:7e:ef:3c:40:93:16:14:58:e1:88:98:
         29:1b:a0:a1:74:03:5d:d0:02:4e:1c:fc:ae:1a:f1:78:5a:d1:
         61:e5:c3:26:e9:2e:0a:15:23:bd:2f:aa:e2:47:10:57:22:c9:
         47:86:9a:5e:d4:5d:3f:4d:fd:c6:6d:32:a9:f5:d2:22:1f:13:
         8e:04:15:e5:b6:24:87:99:bd:5b:07:d9:64:78:29:22:92:ec:
         86:0e:98:6c:ad:35:66:5e:71:55:6a:9a:f4:b5:67:71:15:51:
         95:4d:71:2e:db:03:21:65:72:49:03:a6:3c:97:51:b7:21:bb:
         a6:e7:36:d8:09:36:b1:ce:8a:4e:ba:3f:52:c6:58:f9:5a:e3:
         c2:6c:e6:96:0e:cd:33:28:c5:e9:5e:c9:f1:49:7b:fa:45:14:
         4f:27:f0:5a:b6:1f:4d:d0:40:ed:70:15:01:40:14:a3:2d:7e:
         1d:15:d0:4d:f3:ec:15:51:38:d8:2b:28:98:69:49:53:30:ad:
         15:c9:4c:f1:55:5a:e5:4c:e0:20:ea:e8:33:e1:f2:d3:35:17:
         fb:d5:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org