Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35362e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          u4A+uSCAhpXdrcZYEdBiBqKmosRb25ycPeXYzONrMIo=
Subject key identifier:   88:A9:C8:AB:13:BD:E5:49:56:2F:4D:CA:99:0E:E8:43:30:14:AC:72
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       28C5A72D022ABE0E460A33D0748EAC193086A9E8
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32342d3234203d3e203631383734.roa
Signing time:             Fri 08 Mar 2024 18:15:19 +0000
ROA not before:           Fri 08 Mar 2024 18:10:19 +0000
ROA not after:            Fri 07 Mar 2025 18:15:19 +0000
asID:                     61874
IP address blocks:        131.0.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:a7:2d:02:2a:be:0e:46:0a:33:d0:74:8e:ac:19:30:86:a9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar  8 18:10:19 2024 GMT
            Not After : Mar  7 18:15:19 2025 GMT
        Subject: CN=88A9C8AB13BDE549562F4DCA990EE8433014AC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:92:34:6a:6f:ea:06:8e:d0:09:89:3f:74:
                    2b:72:68:01:2d:01:ee:bc:b7:02:21:33:95:a0:d0:
                    f9:54:dd:18:a0:85:e1:ff:af:9b:34:35:4b:7a:5e:
                    8f:e1:5f:c5:65:f5:4c:ce:f4:fb:76:a3:09:67:02:
                    5b:13:0b:28:96:e6:b5:e5:53:44:d2:b0:d4:fc:1a:
                    c8:04:8f:b7:23:4e:72:f6:0e:b6:5a:23:b2:e5:b6:
                    7e:3f:eb:c6:e2:fe:4c:7e:80:67:58:c2:2e:d7:60:
                    f1:a9:8b:0e:2e:7d:c7:c4:31:e1:b5:4a:25:de:e0:
                    7b:ec:8b:ca:8e:ab:e6:27:93:db:37:30:36:7d:2f:
                    40:65:25:59:7f:35:3f:9d:90:27:41:db:4a:0e:b6:
                    1e:5a:9c:ab:28:4d:36:20:27:bc:c0:ba:27:35:a1:
                    e8:b0:e9:77:3d:c7:75:14:8e:e0:3d:11:99:3e:54:
                    a0:fb:4e:e6:64:f9:28:c6:44:87:96:f9:85:43:41:
                    ce:cd:5b:3d:de:da:36:36:33:26:48:5d:7e:9c:7b:
                    9d:41:e3:6a:80:14:a1:45:a8:d0:c5:5f:6e:80:c4:
                    7e:79:4d:85:5e:5f:3b:d5:ae:c2:b1:0f:fc:ce:6f:
                    20:d5:34:92:6d:7a:92:2a:c1:cb:43:40:83:38:2f:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:C8:AB:13:BD:E5:49:56:2F:4D:CA:99:0E:E8:43:30:14:AC:72
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:c3:66:a7:6c:0d:f0:ee:27:f8:97:be:b3:22:23:1a:c8:
         c6:06:d5:22:b1:50:f7:b6:69:4f:86:36:fd:9a:d7:e6:ab:5c:
         9f:11:bf:7f:09:0e:52:8e:b8:cc:86:92:e0:0a:3b:49:ca:39:
         34:07:15:31:ca:32:20:c6:75:70:f5:35:d9:94:2f:b9:c9:18:
         33:01:4d:d7:f7:1b:fb:49:b1:79:b0:7b:c3:75:f2:c4:72:7e:
         05:72:50:9b:35:a3:11:1b:ea:b6:53:c4:b1:8a:72:05:51:80:
         a4:61:44:c6:9f:75:3b:04:8d:46:5b:bb:4d:89:f1:06:7c:3e:
         53:b0:4d:31:ff:0a:af:56:c3:a4:55:a1:53:97:7e:91:3f:90:
         30:3f:32:03:84:79:74:fd:ff:db:be:8e:84:53:a2:66:88:99:
         a5:d2:1e:5a:b7:ae:2a:01:e8:07:6f:42:45:0d:f1:9b:8b:85:
         01:23:cc:a3:3a:fb:8a:ed:e0:95:d9:95:45:4e:0e:ed:70:88:
         20:39:21:9b:1c:3b:c3:cf:bc:2e:2d:84:2a:84:6f:b9:c8:77:
         99:2d:5b:f9:31:18:0a:5e:22:5e:9b:31:22:31:72:dc:bd:45:
         b5:60:69:19:2f:01:9f:5b:07:45:ef:83:31:09:33:d8:8d:a7:
         1d:f0:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org