Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32342d3234203d3e203631383731.roa
File:                     3133312e302e39342e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          5bhe2Jaj4iOWA8rqzqCy4C/G47f+Bsch0LVWtfxY2/4=
Subject key identifier:   B5:70:92:1F:E0:CC:6F:AE:D9:22:32:43:32:C5:87:E4:53:AB:A0:96
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       219DF1B8A07583799E8E4978631A276A893E0006
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:03:50 +0000
ROA not before:           Fri 20 Oct 2023 14:58:50 +0000
ROA not after:            Fri 18 Oct 2024 15:03:50 +0000
asID:                     61871
IP address blocks:        131.0.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9d:f1:b8:a0:75:83:79:9e:8e:49:78:63:1a:27:6a:89:3e:00:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 14:58:50 2023 GMT
            Not After : Oct 18 15:03:50 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:5b:48:31:35:de:e2:19:65:ee:c5:ca:2a:
                    3f:14:a7:fd:b8:8a:28:45:9b:d7:6a:32:ac:6e:60:
                    cf:7b:30:97:97:22:75:aa:3f:07:2e:cb:32:5f:35:
                    03:6d:84:ae:69:f2:7d:5f:fb:a7:16:03:ef:80:92:
                    50:88:cb:de:28:74:a8:d1:ff:5d:d6:a3:40:55:9f:
                    5e:44:7c:9d:4d:9f:4a:93:20:ca:e3:ca:06:02:c9:
                    3a:06:08:38:a9:6f:ea:8c:78:b6:6f:6f:d7:3b:83:
                    64:06:59:3d:75:31:20:64:db:48:e9:f7:09:61:66:
                    30:7b:8a:26:12:7f:22:70:75:9b:6f:3b:1a:16:b5:
                    41:d4:2e:c9:da:35:77:10:c2:ee:11:3e:56:99:7d:
                    ac:6d:ef:58:0d:34:79:4c:56:4e:5d:6f:cb:d2:6f:
                    e3:f7:0a:44:52:39:7b:a4:76:9f:a1:4f:e0:da:db:
                    28:83:d4:61:e6:e6:e1:3a:7f:3d:ff:c3:1e:01:57:
                    b6:2c:50:97:76:33:78:c4:34:d2:ed:69:b5:f4:d5:
                    8f:53:ca:37:4f:f0:7c:1d:86:6f:b4:e9:5f:b3:91:
                    08:7e:54:b3:b9:45:ea:c3:b8:9d:00:1a:33:ee:f0:
                    f9:12:fe:da:a3:94:4e:3b:ef:5d:e0:0b:62:a6:d3:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:92:1F:E0:CC:6F:AE:D9:22:32:43:32:C5:87:E4:53:AB:A0:96
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133312e302e39342e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:55:ed:ba:37:28:cb:49:dc:1a:f7:67:bd:f3:25:1e:82:89:
         9a:97:f1:b6:7c:21:3f:2f:29:8b:77:5f:29:d5:96:dc:21:35:
         0a:44:b6:1b:cf:81:95:c8:54:a2:c6:37:61:f0:52:3f:8b:91:
         ed:e2:0b:d9:c2:42:20:19:ed:fa:56:eb:c0:84:a4:1b:44:ea:
         6f:10:86:e2:b4:7a:f6:99:91:73:75:75:ed:b9:c8:6a:e2:3e:
         73:93:c9:43:60:1c:08:91:2a:95:bd:ad:09:e2:a1:78:8f:bc:
         13:f6:19:cc:c6:7b:b4:82:a2:95:84:80:80:8d:de:e9:7d:31:
         69:e2:4f:b2:bb:85:c7:72:ed:f7:f2:27:08:3b:86:88:b7:ca:
         ed:e2:19:82:fd:fc:50:68:37:13:30:8e:ee:b1:f9:73:34:d5:
         fe:0c:6f:b8:34:4a:12:c5:ea:5f:b4:10:5a:80:b7:39:d4:38:
         1b:34:e0:26:3b:8b:4d:cd:37:45:dd:a1:b4:17:ee:a5:4f:de:
         23:52:b9:42:9f:4b:d6:d6:b2:aa:dd:01:6f:a6:6d:25:6f:d6:
         9f:47:ec:c8:3f:db:0c:06:8f:bf:83:38:c1:a1:7f:ab:9d:f1:
         45:0a:b5:f1:97:1e:8a:a9:4e:bf:7e:e3:bb:db:62:9f:13:40:
         71:8e:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org