Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier:          yJHDCnG8Fk71Dvz5U+8NLcW3O/LNZG5Ew7IGB/UsOBg=
Subject key identifier:   20:F9:FA:B9:A8:BD:E7:7D:E6:57:2F:D6:92:62:A6:37:59:9D:1A:F7
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       5CE745D73D884C743C79602ECCA450378A914296
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     28270
IP address blocks:        131.196.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e7:45:d7:3d:88:4c:74:3c:79:60:2e:cc:a4:50:37:8a:91:42:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=20F9FAB9A8BDE77DE6572FD69262A637599D1AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:90:99:d5:b9:44:7f:4f:b3:78:5a:56:c2:
                    9d:cb:0b:5c:0a:9a:83:18:70:f6:9e:30:44:9a:23:
                    d0:6c:5c:16:4b:f4:f0:f3:5e:8d:26:30:28:5e:ee:
                    cb:0d:63:8b:60:1f:63:62:ab:de:a8:bb:e9:92:9d:
                    22:1d:08:be:0e:1e:86:de:1d:39:98:f2:1c:9f:69:
                    2f:d7:48:53:25:ba:da:93:01:0d:db:81:3e:cb:bf:
                    02:9a:bf:38:ad:2d:80:04:4f:e5:b7:aa:61:25:43:
                    16:87:f2:fd:49:bb:96:81:be:f7:c6:4e:a4:e4:f9:
                    76:2e:9a:a3:13:b1:4d:be:42:8a:4e:43:51:01:ce:
                    42:b0:73:8c:07:6b:8a:a4:d0:6f:24:98:2d:da:e1:
                    28:82:17:5e:6c:ef:6e:18:bf:43:b6:f4:a5:09:91:
                    52:34:74:45:b4:ce:9e:e6:6d:69:ca:7b:f7:61:50:
                    db:82:1e:31:5d:a4:55:2e:b2:cc:a7:ac:1b:e2:eb:
                    93:53:35:a0:c0:7c:ea:77:f7:9c:62:af:a4:14:92:
                    d8:c7:2a:41:0e:00:8b:64:e9:5a:ee:dc:ea:6c:10:
                    66:57:52:ad:d9:26:d8:17:20:53:ca:85:a3:6f:22:
                    74:2f:4f:d2:51:36:8a:09:06:30:e2:51:5d:e5:1a:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:FA:B9:A8:BD:E7:7D:E6:57:2F:D6:92:62:A6:37:59:9D:1A:F7
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:7f:e6:7f:28:ba:78:cc:8e:3d:2e:a6:8e:3d:cc:96:bc:
         a7:b9:cf:8d:1f:68:fe:30:48:8c:bb:77:c9:d8:b5:bc:6d:29:
         1d:16:7c:b6:bb:5c:79:01:32:7d:65:bc:b7:58:1b:58:f8:23:
         00:cd:76:59:c5:2a:21:dc:4a:e5:93:8d:25:24:61:de:3d:ca:
         39:e7:dd:80:e1:47:31:da:2a:a1:12:79:78:5c:ee:8a:6c:b9:
         f7:89:a6:d7:1c:fa:25:f1:50:7d:42:14:3c:26:d4:29:55:bc:
         54:fc:4e:bb:5b:54:95:39:fb:4c:1b:7d:d3:cb:f3:ef:e7:80:
         ef:8b:06:aa:2e:d4:8d:e7:5c:7f:18:07:11:7d:90:f3:a7:06:
         06:30:d6:b7:c5:52:41:54:a1:7e:59:6b:c8:45:9a:f4:6c:3e:
         7a:f6:06:77:72:68:7e:05:c2:4b:47:a0:89:13:8b:37:4e:d7:
         47:af:50:01:80:44:03:2e:fc:b4:7a:3e:20:4f:63:c8:d1:aa:
         4c:fa:7b:76:76:b8:2c:a6:fe:57:d1:30:5f:cd:02:e7:80:c0:
         4c:22:f0:1c:f3:4e:05:a2:1e:4f:74:4f:b6:13:44:a7:b9:7f:
         67:a3:df:62:10:83:1d:31:77:b6:f2:6a:80:23:69:3b:91:58:
         ea:71:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net