Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39332e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39332e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          0L1FnGTPLt0u9kKKjdrKIYJnrdIQvvG15/37gGdEq4w=
Subject key identifier:   A9:F4:3E:63:1A:9B:3E:85:E8:10:96:D6:F0:B1:E9:5A:A3:01:E4:F0
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       39C09985E2415F261277B984445A6CC800B630AB
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39332e302f32342d3234203d3e203631383731.roa
Signing time:             Tue 26 Sep 2023 15:10:39 +0000
ROA not before:           Tue 26 Sep 2023 15:05:39 +0000
ROA not after:            Tue 24 Sep 2024 15:10:39 +0000
asID:                     61871
IP address blocks:        131.0.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:99:85:e2:41:5f:26:12:77:b9:84:44:5a:6c:c8:00:b6:30:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Sep 26 15:05:39 2023 GMT
            Not After : Sep 24 15:10:39 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:ff:70:4e:5d:9c:27:8d:30:96:5e:79:fe:
                    c2:f0:fc:38:6a:10:4c:a4:45:ca:d3:40:c0:43:ef:
                    96:c9:60:0c:be:4f:dd:24:1c:a7:95:3c:2a:16:9c:
                    ef:c8:e9:94:b2:c0:07:6b:4e:bb:65:36:1b:08:72:
                    c8:02:fc:17:08:be:29:42:27:96:e2:db:63:b5:db:
                    53:21:24:52:1b:7e:0e:38:83:0c:c0:6f:b3:fd:67:
                    f6:98:f0:32:2b:46:c6:8e:07:d2:4d:fa:b5:f6:67:
                    97:4d:35:de:4a:2f:44:97:b4:b8:4e:61:04:57:0f:
                    1f:3b:18:e0:b3:07:b1:56:aa:c1:c6:da:67:6c:26:
                    b5:0c:b3:20:f9:49:dc:45:44:0c:e6:27:b3:84:52:
                    72:f0:3f:b4:ea:02:c1:bf:9b:e6:e7:b8:40:17:b2:
                    5b:79:32:e6:48:45:2a:9a:8a:7d:24:ab:df:a7:5e:
                    5d:dc:55:bd:c6:3b:38:ee:9d:11:a0:4e:28:5a:45:
                    86:82:c7:3e:aa:c0:8e:38:8a:22:f0:81:e4:f8:1c:
                    63:84:cb:11:75:88:95:6c:89:3c:4a:24:98:e8:d5:
                    cb:91:2f:a4:c8:66:95:3e:ae:14:63:ce:d2:88:97:
                    cf:8c:da:c8:cc:a6:0f:a7:ce:bc:ca:92:0d:0c:3a:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:3E:63:1A:9B:3E:85:E8:10:96:D6:F0:B1:E9:5A:A3:01:E4:F0
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39332e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:90:d2:06:dc:76:ba:4d:8e:2f:10:64:83:62:94:96:7e:20:
         3a:d9:f2:b5:a9:04:c5:86:b6:9d:da:c3:53:e5:f7:f1:36:18:
         e0:6d:b8:8d:10:5f:41:bc:d2:26:bc:f8:e8:cb:25:e9:1d:de:
         b3:fa:50:48:7c:44:68:57:3e:a0:94:2f:9e:a7:47:05:0f:bb:
         18:f5:fc:f1:99:a5:c1:04:01:3b:e7:f0:af:1c:01:92:1f:70:
         c4:ad:e6:39:cf:56:bc:c7:b7:78:c8:4b:e2:f8:d4:a6:4e:fd:
         cd:98:c1:43:23:eb:6e:f1:d9:ec:70:c7:40:24:07:58:aa:55:
         66:6e:68:a8:ea:f0:dc:b3:94:5c:7b:b4:e7:6c:10:73:78:dc:
         e5:cb:15:3c:59:97:df:8d:9b:9a:7d:ba:56:13:4e:e2:4e:9b:
         20:e0:2d:27:46:0b:e7:0c:0d:91:8a:3a:bf:62:5a:ce:9d:ff:
         c0:e3:18:50:ad:63:eb:45:08:8c:15:61:70:61:20:62:52:8f:
         85:6c:f5:48:fd:97:38:bd:c9:fa:93:e5:1b:d9:54:15:a3:56:
         56:85:d5:8a:a7:f0:84:b0:c2:01:27:85:ca:0e:4c:21:31:8f:
         45:2b:d3:ff:e1:5c:47:96:6d:07:24:7b:ab:36:91:94:d7:98:
         73:12:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org