Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32322d3232203d3e203631383731.roa
File:                     3133312e302e39322e302f32322d3232203d3e203631383731.roa (raw, json)
Hash identifier:          tAIzDR9/Ai7fcUQgwDSf4Vu853ZdwU2wYoJqtQcWzXI=
Subject key identifier:   97:52:21:61:24:A4:82:51:74:59:EB:47:E0:83:FB:E2:52:7F:16:DD
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       33172A2599579457731F14205A5A2298B1F2068E
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32322d3232203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:00 +0000
ROA not before:           Thu 28 Dec 2023 22:41:00 +0000
ROA not after:            Thu 26 Dec 2024 22:46:00 +0000
asID:                     61871
IP address blocks:        131.0.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:17:2a:25:99:57:94:57:73:1f:14:20:5a:5a:22:98:b1:f2:06:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:00 2023 GMT
            Not After : Dec 26 22:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:2a:fe:4a:55:c3:19:a3:47:63:72:06:4d:
                    61:6d:fc:59:19:05:99:6c:7f:2e:a8:85:2c:95:b7:
                    ee:4a:42:a5:4a:cd:9c:f5:37:5c:51:3f:91:b9:79:
                    60:79:f1:57:15:92:3a:0d:b3:f4:7d:e7:0f:a8:2e:
                    e9:51:8e:3c:f6:cd:9a:d5:b8:1a:bb:d4:1c:11:19:
                    0f:58:fa:0c:32:26:a9:cc:ba:b8:d8:2d:02:57:94:
                    24:4f:32:ce:ab:5a:7e:fe:f3:17:68:91:e0:82:f8:
                    ed:40:49:d3:44:fd:0c:a1:a1:66:b8:f4:00:4b:e0:
                    eb:c5:d4:ec:36:dd:f0:67:3b:26:6a:af:a6:86:78:
                    5a:92:5a:31:ec:7a:b2:8c:af:ed:e0:de:88:0a:f5:
                    87:ed:60:68:a3:b4:52:ad:f5:c3:a3:db:7b:99:1f:
                    dc:59:06:01:d2:bc:76:ae:85:5d:0a:c4:c2:27:e2:
                    95:22:b6:a8:a7:59:25:12:0b:0f:82:52:14:74:c1:
                    0b:b5:2e:42:77:f0:60:78:80:cd:e0:64:7f:4e:d2:
                    a2:f3:4b:ab:96:eb:20:26:ab:0f:1a:73:c7:f0:8e:
                    d1:d4:6f:15:4d:17:8b:c9:f2:96:86:45:8d:90:f8:
                    6d:24:32:81:70:70:71:8a:93:17:ab:a6:7f:67:80:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:21:61:24:A4:82:51:74:59:EB:47:E0:83:FB:E2:52:7F:16:DD
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32322d3232203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:99:4c:62:33:6e:71:f7:2b:32:13:07:4f:80:f2:8c:95:11:
         0b:29:5b:3f:4f:fe:3b:94:2e:4d:ac:85:1b:f6:d9:7e:5f:4d:
         0b:41:8d:8e:47:78:bf:19:a3:54:bc:a9:58:41:5c:5c:14:7b:
         1d:ab:ef:8f:ee:cb:5b:8b:a7:a1:ce:ef:03:55:2e:82:60:e8:
         7e:1d:a8:aa:2e:e1:2b:1d:d5:88:d1:7c:74:19:0b:6a:5c:03:
         b2:3b:da:b8:45:fa:71:f7:fb:ad:cd:bc:86:6e:ae:29:5d:1b:
         21:94:68:a7:a6:75:ce:04:18:2f:0a:43:ed:e4:91:30:7f:9c:
         12:02:f4:80:8c:3f:8c:74:4c:66:10:dd:33:50:3d:f8:55:dd:
         6e:31:83:42:38:79:3d:67:f6:f7:25:1f:01:27:09:3a:6c:62:
         5d:24:51:35:c4:58:da:2c:96:85:4e:ed:bc:98:32:95:05:6e:
         a8:27:b1:ea:21:e5:86:40:ef:17:d6:c6:8b:96:03:d4:cb:a8:
         75:d3:d3:3f:c4:55:05:84:3b:cc:e8:66:8d:a1:54:c9:16:6b:
         f1:ac:9f:eb:bc:a4:8a:4a:45:ca:f0:8a:82:b5:9e:d0:9f:bd:
         ff:d6:dd:2d:c9:86:37:d7:da:d1:e7:97:aa:42:b9:dd:6a:a2:
         00:85:25:be
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUMxcqJZlXlFdzHxQgWloimLHyBo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI3NTlBNzU4MDdBMTc3OUY2OUQ0QTVCMTlGRUM0NEIx
Njc3RDFEODAeFw0yMzEyMjgyMjQxMDBaFw0yNDEyMjYyMjQ2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0EyQjJBRkU0QTU1QzMxOUEz
NDc2MzcyMDY0RDYxNkRGQzU5MTkwNTk5NkM3RjJFQTg4NTJDOTVCN0VFNEE0MkE1
NEFDRDlDRjUzNzVDNTEzRjkxQjk3OTYwNzlGMTU3MTU5MjNBMERCM0Y0N0RFNzBG
QTgyRUU5NTE4RTNDRjZDRDlBRDVCODFBQkJENDFDMTExOTBGNThGQTBDMzIyNkE5
Q0NCQUI4RDgyRDAyNTc5NDI0NEYzMkNFQUI1QTdFRkVGMzE3Njg5MUUwODJGOEVE
NDA0OUQzNDRGRDBDQTFBMTY2QjhGNDAwNEJFMEVCQzVENEVDMzZEREYwNjczQjI2
NkFBRkE2ODY3ODVBOTI1QTMxRUM3QUIyOENBRkVERTBERTg4MEFGNTg3RUQ2MDY4
QTNCNDUyQURGNUMzQTNEQjdCOTkxRkRDNTkwNjAxRDJCQzc2QUU4NTVEMEFDNEMy
MjdFMjk1MjJCNkE4QTc1OTI1MTIwQjBGODI1MjE0NzRDMTBCQjUyRTQyNzdGMDYw
Nzg4MENERTA2NDdGNEVEMkEyRjM0QkFCOTZFQjIwMjZBQjBGMUE3M0M3RjA4RUQx
RDQ2RjE1NEQxNzhCQzlGMjk2ODY0NThEOTBGODZEMjQzMjgxNzA3MDcxOEE5MzE3
QUJBNjdGNjc4MEM5RTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyisq/kpVwxmjR2NyBk1hbfxZGQWZbH8uqIUslbfuSkKlSs2c9Tdc
UT+RuXlgefFXFZI6DbP0fecPqC7pUY489s2a1bgau9QcERkPWPoMMiapzLq42C0C
V5QkTzLOq1p+/vMXaJHggvjtQEnTRP0MoaFmuPQAS+DrxdTsNt3wZzsmaq+mhnha
klox7HqyjK/t4N6ICvWH7WBoo7RSrfXDo9t7mR/cWQYB0rx2roVdCsTCJ+KVIrao
p1klEgsPglIUdMELtS5Cd/BgeIDN4GR/TtKi80urlusgJqsPGnPH8I7R1G8VTReL
yfKWhkWNkPhtJDKBcHBxipMXq6Z/Z4DJ4QIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FJdSIWEkpIJRdFnrR+CD++JSfxbdMB8GA1UdIwQYMBaAFJt1mnWAehd59p1KWxn+
xEsWd9HYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzAvOUI3NTlBNzU4MDdBMTc3
OUY2OUQ0QTVCMTlGRUM0NEIxNjc3RDFEOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Qjc1OUE3NTgwN0ExNzc5RjY5RDRBNUIxOUZFQzQ0QjE2NzdE
MUQ4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8wLzMxMzMzMTJlMzAyZTM5MzIyZTMw
MmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMxMzgzNzMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgwBcMA0G
CSqGSIb3DQEBCwUAA4IBAQBImUxiM25x9ysyEwdPgPKMlRELKVs/T/47lC5NrIUb
9tl+X00LQY2OR3i/GaNUvKlYQVxcFHsdq++P7stbi6ehzu8DVS6CYOh+HaiqLuEr
HdWI0Xx0GQtqXAOyO9q4Rfpx9/utzbyGbq4pXRshlGinpnXOBBgvCkPt5JEwf5wS
AvSAjD+MdExmEN0zUD34Vd1uMYNCOHk9Z/b3JR8BJwk6bGJdJFE1xFjaLJaFTu28
mDKVBW6oJ7HqIeWGQO8X1saLlgPUy6h109M/xFUFhDvM6GaNoVTJFmvxrJ/rvKSK
SkXK8IqCtZ7Qn73/1t0tyYY319rR55eqQrndaqIAhSW+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org