Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39322e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          ItFpN59t7u69VM2sUZ7EsSB6icVXrvsW06wVhq+VDLA=
Subject key identifier:   6D:00:FC:C5:28:31:70:97:98:DD:E0:93:57:9F:70:77:C2:5B:68:B7
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       36C76CB597F21B4F6B984FCE79E06BC6107CFEF8
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32342d3234203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:44:00 +0000
ROA not before:           Thu 28 Dec 2023 22:39:00 +0000
ROA not after:            Thu 26 Dec 2024 22:44:00 +0000
asID:                     61871
IP address blocks:        131.0.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:6c:b5:97:f2:1b:4f:6b:98:4f:ce:79:e0:6b:c6:10:7c:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:39:00 2023 GMT
            Not After : Dec 26 22:44:00 2024 GMT
        Subject: CN=3082010A0282010100B618C9A50FBB79FBB2DD9C811E8E9308298CFF014E0A661C161C43F4931D22710AFD9FB4D955A33180FB9FFBE3E84862E1915B6DBF2A835320D902A3039F6D477D65E5B80665C61D18AE88A740CC7E61E6F977124D6072A35401A59A92D3C521D0784768CB9E4373FD83CA5D5F18DABC6D6DE3318DE99B0F74A435337BB74E9F4DDFC0B2941AC2CC0EFFAF2AFCC12C9B67EC9AB2250E0B001FE451B210A46426DA3F2949D83C0C0DA0161830C734F0120752D60680D41F76B5F854ECE7231C1A1E5C6B29C8B27500B77F7BAAD4E753EDE299541D3523C44982876A998473DEDB7A02E3339CB670CDA70FCC8D0610230AC7BDF0A231A4CB8805EEE3EA35FEFF550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:c9:a5:0f:bb:79:fb:b2:dd:9c:81:1e:8e:
                    93:08:29:8c:ff:01:4e:0a:66:1c:16:1c:43:f4:93:
                    1d:22:71:0a:fd:9f:b4:d9:55:a3:31:80:fb:9f:fb:
                    e3:e8:48:62:e1:91:5b:6d:bf:2a:83:53:20:d9:02:
                    a3:03:9f:6d:47:7d:65:e5:b8:06:65:c6:1d:18:ae:
                    88:a7:40:cc:7e:61:e6:f9:77:12:4d:60:72:a3:54:
                    01:a5:9a:92:d3:c5:21:d0:78:47:68:cb:9e:43:73:
                    fd:83:ca:5d:5f:18:da:bc:6d:6d:e3:31:8d:e9:9b:
                    0f:74:a4:35:33:7b:b7:4e:9f:4d:df:c0:b2:94:1a:
                    c2:cc:0e:ff:af:2a:fc:c1:2c:9b:67:ec:9a:b2:25:
                    0e:0b:00:1f:e4:51:b2:10:a4:64:26:da:3f:29:49:
                    d8:3c:0c:0d:a0:16:18:30:c7:34:f0:12:07:52:d6:
                    06:80:d4:1f:76:b5:f8:54:ec:e7:23:1c:1a:1e:5c:
                    6b:29:c8:b2:75:00:b7:7f:7b:aa:d4:e7:53:ed:e2:
                    99:54:1d:35:23:c4:49:82:87:6a:99:84:73:de:db:
                    7a:02:e3:33:9c:b6:70:cd:a7:0f:cc:8d:06:10:23:
                    0a:c7:bd:f0:a2:31:a4:cb:88:05:ee:e3:ea:35:fe:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:FC:C5:28:31:70:97:98:DD:E0:93:57:9F:70:77:C2:5B:68:B7
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39322e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:c4:cb:21:5f:43:61:4f:da:c4:4e:74:f1:90:93:27:25:
         d8:e0:df:3d:83:20:82:dc:62:ca:a3:e7:6a:5b:73:94:62:62:
         c4:cf:2c:9e:31:cf:fd:e8:08:e1:5c:4e:cc:b7:38:aa:ca:63:
         fe:a9:ef:89:85:1e:3e:aa:c7:16:3f:f8:3d:55:1e:e6:bd:7c:
         dd:1c:10:bd:50:6b:69:33:e9:f0:32:c2:26:cd:46:8a:ca:7f:
         c0:f1:8e:99:70:b7:5b:e2:b8:95:71:cc:6f:13:ef:ff:e7:6c:
         29:5a:1a:b6:db:d6:79:77:5e:52:80:bf:00:f2:5d:59:62:43:
         11:60:c5:9e:36:7e:5f:af:38:2f:36:9f:4e:4c:aa:1d:90:a4:
         05:0b:73:be:07:68:97:09:73:6a:d9:ca:45:7b:0d:3f:f5:40:
         15:81:b0:1c:67:c1:c1:82:e8:a2:b2:e2:d9:1c:af:0c:3f:bf:
         f8:73:40:56:a0:77:e8:a6:89:22:63:26:0a:30:da:c7:bb:ff:
         6b:b9:f3:1c:c2:06:c7:27:b4:6a:b8:78:e6:3b:74:5b:38:14:
         c5:e4:15:24:29:9f:30:ec:50:c6:25:15:0c:c4:98:4e:65:a0:
         b5:39:66:a1:72:8d:93:fd:40:83:87:ab:3a:34:6a:a5:b2:9c:
         b2:b8:a8:62
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUNsdstZfyG09rmE/OeeBrxhB8/vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI3NTlBNzU4MDdBMTc3OUY2OUQ0QTVCMTlGRUM0NEIx
Njc3RDFEODAeFw0yMzEyMjgyMjM5MDBaFw0yNDEyMjYyMjQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYxOEM5QTUwRkJCNzlGQkIy
REQ5QzgxMUU4RTkzMDgyOThDRkYwMTRFMEE2NjFDMTYxQzQzRjQ5MzFEMjI3MTBB
RkQ5RkI0RDk1NUEzMzE4MEZCOUZGQkUzRTg0ODYyRTE5MTVCNkRCRjJBODM1MzIw
RDkwMkEzMDM5RjZENDc3RDY1RTVCODA2NjVDNjFEMThBRTg4QTc0MENDN0U2MUU2
Rjk3NzEyNEQ2MDcyQTM1NDAxQTU5QTkyRDNDNTIxRDA3ODQ3NjhDQjlFNDM3M0ZE
ODNDQTVENUYxOERBQkM2RDZERTMzMThERTk5QjBGNzRBNDM1MzM3QkI3NEU5RjRE
REZDMEIyOTQxQUMyQ0MwRUZGQUYyQUZDQzEyQzlCNjdFQzlBQjIyNTBFMEIwMDFG
RTQ1MUIyMTBBNDY0MjZEQTNGMjk0OUQ4M0MwQzBEQTAxNjE4MzBDNzM0RjAxMjA3
NTJENjA2ODBENDFGNzZCNUY4NTRFQ0U3MjMxQzFBMUU1QzZCMjlDOEIyNzUwMEI3
N0Y3QkFBRDRFNzUzRURFMjk5NTQxRDM1MjNDNDQ5ODI4NzZBOTk4NDczREVEQjdB
MDJFMzMzOUNCNjcwQ0RBNzBGQ0M4RDA2MTAyMzBBQzdCREYwQTIzMUE0Q0I4ODA1
RUVFM0VBMzVGRUZGNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAthjJpQ+7efuy3ZyBHo6TCCmM/wFOCmYcFhxD9JMdInEK/Z+02VWj
MYD7n/vj6Ehi4ZFbbb8qg1Mg2QKjA59tR31l5bgGZcYdGK6Ip0DMfmHm+XcSTWBy
o1QBpZqS08Uh0HhHaMueQ3P9g8pdXxjavG1t4zGN6ZsPdKQ1M3u3Tp9N38CylBrC
zA7/ryr8wSybZ+yasiUOCwAf5FGyEKRkJto/KUnYPAwNoBYYMMc08BIHUtYGgNQf
drX4VOznIxwaHlxrKciydQC3f3uq1OdT7eKZVB01I8RJgodqmYRz3tt6AuMznLZw
zacPzI0GECMKx73wojGky4gF7uPqNf7/VQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FG0A/MUoMXCXmN3gk1efcHfCW2i3MB8GA1UdIwQYMBaAFJt1mnWAehd59p1KWxn+
xEsWd9HYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzAvOUI3NTlBNzU4MDdBMTc3
OUY2OUQ0QTVCMTlGRUM0NEIxNjc3RDFEOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Qjc1OUE3NTgwN0ExNzc5RjY5RDRBNUIxOUZFQzQ0QjE2NzdE
MUQ4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8wLzMxMzMzMTJlMzAyZTM5MzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzgzNzMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgwBcMA0G
CSqGSIb3DQEBCwUAA4IBAQC8ecTLIV9DYU/axE508ZCTJyXY4N89gyCC3GLKo+dq
W3OUYmLEzyyeMc/96AjhXE7MtziqymP+qe+JhR4+qscWP/g9VR7mvXzdHBC9UGtp
M+nwMsImzUaKyn/A8Y6ZcLdb4riVccxvE+//52wpWhq229Z5d15SgL8A8l1ZYkMR
YMWeNn5frzgvNp9OTKodkKQFC3O+B2iXCXNq2cpFew0/9UAVgbAcZ8HBguiisuLZ
HK8MP7/4c0BWoHfopokiYyYKMNrHu/9rufMcwgbHJ7RquHjmO3RbOBTF5BUkKZ8w
7FDGJRUMxJhOZaC1OWahco2T/UCDh6s6NGqlspyyuKhi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org