Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File:                     3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier:          cSZU51XHmzXhEaIbE4fAdCoz+cZQsY92JWXtP/8GWF8=
Subject key identifier:   56:BE:20:3D:92:0A:B9:0C:5B:C5:3E:21:99:94:4A:66:FA:46:5E:F2
Certificate issuer:       /CN=0D11E05BC3103AA6468F6AE76F1AA0713AF150A5
Certificate serial:       0D9B87CD4389BE14B848C8EF87BE0993EB7C7B9B
Authority key identifier: 0D:11:E0:5B:C3:10:3A:A6:46:8F:6A:E7:6F:1A:A0:71:3A:F1:50:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D11E05BC3103AA6468F6AE76F1AA0713AF150A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time:             Tue 06 Feb 2024 17:33:11 +0000
ROA not before:           Tue 06 Feb 2024 17:28:11 +0000
ROA not after:            Tue 04 Feb 2025 17:33:11 +0000
asID:                     61756
IP address blocks:        131.100.72.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9b:87:cd:43:89:be:14:b8:48:c8:ef:87:be:09:93:eb:7c:7b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D11E05BC3103AA6468F6AE76F1AA0713AF150A5
        Validity
            Not Before: Feb  6 17:28:11 2024 GMT
            Not After : Feb  4 17:33:11 2025 GMT
        Subject: CN=56BE203D920AB90C5BC53E2199944A66FA465EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:3d:c4:a6:e4:95:53:20:3e:44:1e:aa:31:
                    5c:73:0c:5f:b6:0d:35:5d:06:24:20:82:8d:41:a4:
                    96:05:fe:07:c7:da:bd:88:64:16:4e:d1:97:e4:b2:
                    a1:e9:d0:2a:27:b2:58:6a:5e:88:0f:e9:54:b5:68:
                    43:5c:05:c0:1f:93:25:bd:6d:09:14:8a:64:ce:fa:
                    c2:c8:ff:2a:d2:ad:2b:1a:a4:0c:21:dd:0a:e2:3e:
                    95:7b:3a:d5:50:51:e9:d2:2a:e4:bb:f0:87:09:03:
                    42:bc:b1:62:3f:74:3d:4d:11:57:99:b9:f9:90:5d:
                    b5:3a:3b:74:21:87:70:72:ac:43:c1:5d:24:4d:90:
                    20:be:1a:cc:e0:ba:ed:66:82:0b:10:f1:83:0b:bf:
                    23:ed:36:10:53:92:54:67:6f:1d:47:0a:0f:48:a2:
                    79:ac:98:c7:df:68:c3:30:a0:31:de:1a:dc:88:10:
                    0b:06:15:36:7a:70:a4:4d:27:fa:11:c9:8e:58:d3:
                    e0:18:c7:7a:ca:3b:59:7f:a8:50:80:f6:73:14:72:
                    6c:32:35:e7:01:dd:0f:52:cd:54:4b:7c:2a:49:e5:
                    75:fe:0e:ae:aa:a0:0d:3b:e1:09:4d:83:04:b2:6d:
                    c1:b3:4d:2e:1b:c7:94:37:7b:80:3a:93:f2:3c:0d:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:20:3D:92:0A:B9:0C:5B:C5:3E:21:99:94:4A:66:FA:46:5E:F2
            X509v3 Authority Key Identifier:
                keyid:0D:11:E0:5B:C3:10:3A:A6:46:8F:6A:E7:6F:1A:A0:71:3A:F1:50:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/0D11E05BC3103AA6468F6AE76F1AA0713AF150A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D11E05BC3103AA6468F6AE76F1AA0713AF150A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:36:3c:44:62:01:45:f0:ff:17:b5:3e:f6:cd:e7:7e:69:e5:
         d6:4c:59:e0:44:10:74:6e:33:e2:d5:a8:37:e0:d3:7e:ec:58:
         fa:1d:43:c1:8e:2c:69:38:e7:1a:c1:07:e5:c3:16:f9:ef:66:
         73:b6:ac:38:05:ee:7a:3e:d0:75:e9:5a:5f:b6:65:e6:9d:8c:
         9e:be:56:91:f1:ca:d1:ad:f7:a8:b3:08:a7:a2:e2:20:36:58:
         70:9a:23:92:2a:34:e7:0b:87:7f:b8:0d:83:8f:ae:9d:ac:24:
         6e:f1:fb:7f:39:7e:44:d5:5d:44:bd:3b:93:8b:54:9a:c1:a7:
         42:7f:26:4b:86:67:60:1d:0e:89:4c:33:04:88:a9:67:41:1a:
         40:cd:f3:2f:98:4d:3d:30:dc:5c:d3:ad:5b:f4:8c:75:e8:61:
         94:98:2f:97:01:f6:95:d4:82:59:5f:fe:b5:01:66:fe:dd:75:
         1a:c5:2b:dd:c3:9c:1c:74:48:fc:51:66:af:2e:70:e1:68:ba:
         41:38:06:2d:45:c7:25:3e:09:0e:36:93:e5:bd:df:0f:76:3f:
         d6:3d:48:f7:b1:36:18:e6:76:17:89:c5:a8:c3:0d:cc:04:de:
         01:ce:37:6d:53:30:a4:46:c5:d8:a2:59:ef:b7:23:2a:d8:7a:
         2a:7e:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org