Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32332d3233203d3e203631383731.roa
File:                     3133312e302e39342e302f32332d3233203d3e203631383731.roa (raw, json)
Hash identifier:          FaBhH2UUITstTQ8J/PENT6A2vPYTnk0fy226mk23OvY=
Subject key identifier:   0B:F4:EB:1F:3B:9B:73:61:31:65:00:FB:3D:60:46:29:48:01:F9:F7
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       09EE3271A3B026D92DAF22392FD7270B5AAD2366
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32332d3233203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:46:01 +0000
ROA not before:           Thu 28 Dec 2023 22:41:01 +0000
ROA not after:            Thu 26 Dec 2024 22:46:01 +0000
asID:                     61871
IP address blocks:        131.0.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ee:32:71:a3:b0:26:d9:2d:af:22:39:2f:d7:27:0b:5a:ad:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:41:01 2023 GMT
            Not After : Dec 26 22:46:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:85:bc:79:44:c3:49:32:3f:04:01:1a:1a:
                    ed:c2:af:08:f9:ef:24:02:da:d9:3f:44:f0:ca:4a:
                    95:85:ce:5c:62:0f:36:d3:66:cd:2e:35:bf:71:f1:
                    3e:bb:02:d5:ce:ca:e3:d3:e3:ec:61:34:f5:0d:3f:
                    f5:eb:a1:a7:7d:7a:89:ac:38:e6:dd:d2:04:99:81:
                    a0:b6:d9:f0:1d:ff:95:98:df:6b:a9:57:e1:87:40:
                    db:6f:fe:25:09:c0:4c:78:2f:ff:29:d9:8f:d3:0e:
                    9a:8e:54:d5:d3:6e:0d:a7:4d:30:f0:24:15:e4:56:
                    d5:2c:9b:44:50:4a:14:73:c8:1f:13:87:88:d9:b6:
                    b4:96:b3:e4:3b:27:ad:60:44:b0:e5:df:f4:0c:af:
                    f1:0f:15:69:67:91:26:34:42:3e:e1:99:ec:31:60:
                    25:96:bf:0f:4d:32:49:34:71:a7:f9:aa:74:d3:16:
                    ca:24:aa:25:31:7d:3d:ec:e6:cb:03:86:c1:72:ee:
                    5a:17:7a:c6:04:85:65:d5:35:bc:c3:b7:bb:6e:de:
                    99:95:8b:f0:60:8c:5a:d5:13:47:fc:24:fe:90:a3:
                    06:8f:05:35:e2:47:2b:c5:b8:0c:35:b2:99:69:47:
                    68:b6:87:b3:c9:af:56:b2:0e:ae:48:ba:1d:e2:89:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F4:EB:1F:3B:9B:73:61:31:65:00:FB:3D:60:46:29:48:01:F9:F7
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32332d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:1b:84:ca:97:91:76:32:7c:70:f3:6b:10:c1:3b:f2:70:c0:
         5e:f4:2c:c4:b6:d5:09:1e:63:bb:99:d4:ea:ce:85:78:5d:a8:
         07:45:5e:d5:b0:6b:a9:26:83:af:fc:f4:3e:f8:b8:06:87:b5:
         f1:02:d0:e1:93:cb:73:ae:fd:5a:1d:d7:cb:0a:0a:25:9e:dd:
         bf:88:a1:d3:1f:34:58:05:ef:a0:4b:83:37:de:27:3b:87:41:
         39:7e:a1:2b:ee:3f:35:1d:a0:0d:60:45:34:44:8c:9d:90:dc:
         dc:24:c4:7f:f1:c5:ca:83:91:af:01:9d:0d:1d:12:fc:f4:a1:
         58:c6:55:fa:55:8c:6b:c6:5f:02:6b:df:40:9f:3a:6e:fc:07:
         6e:0e:54:5d:2f:22:e4:9e:df:4f:04:49:da:01:80:c8:00:ce:
         d2:23:c8:a5:ff:fd:a4:52:82:d4:90:ad:2d:92:39:17:1d:f8:
         85:6c:07:f5:31:6a:ce:c7:1e:da:23:18:5a:9e:7d:3f:be:03:
         bf:e0:84:14:28:d7:96:04:86:e1:22:33:4c:4d:58:dc:5c:1d:
         b2:05:03:94:ec:31:aa:29:37:76:bf:bd:fc:23:31:d1:32:d6:
         33:4b:25:cf:65:a5:e6:a1:d7:19:f5:38:d0:29:20:4a:7a:cc:
         b3:62:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org