Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3232203d3e203631383734.roa
File:                     3133312e302e35362e302f32322d3232203d3e203631383734.roa (raw, json)
Hash identifier:          qDYeHQQHcbBve8tuyWWdXU6ykXLLZs5fXZTVWU8YhK4=
Subject key identifier:   E8:83:80:3C:51:52:0B:96:32:B6:76:DE:28:D6:A4:69:C1:81:3B:AB
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       1F460E8F430C9D76C3E9CAF8C3A6384E8A19DE35
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3232203d3e203631383734.roa
Signing time:             Fri 08 Mar 2024 18:15:39 +0000
ROA not before:           Fri 08 Mar 2024 18:10:39 +0000
ROA not after:            Fri 07 Mar 2025 18:15:39 +0000
asID:                     61874
IP address blocks:        131.0.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:0e:8f:43:0c:9d:76:c3:e9:ca:f8:c3:a6:38:4e:8a:19:de:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar  8 18:10:39 2024 GMT
            Not After : Mar  7 18:15:39 2025 GMT
        Subject: CN=E883803C51520B9632B676DE28D6A469C1813BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fa:71:10:39:d6:81:0c:40:15:fd:28:cc:ed:
                    8f:4b:a9:26:fc:b9:83:1b:f3:4c:b3:05:75:14:92:
                    f2:fa:04:b8:6f:4c:91:86:16:9b:fe:51:93:5c:d4:
                    dc:7d:e1:ba:a7:ca:50:36:a6:c8:13:7f:0f:f2:50:
                    f1:21:56:9e:82:43:78:a5:10:8f:69:d0:0e:8e:54:
                    1e:b8:70:63:82:13:87:64:ab:fd:6e:ee:90:1f:f7:
                    aa:d5:9d:65:48:ab:f0:a5:25:33:22:f6:2a:83:b0:
                    23:c8:b1:0e:38:6d:d5:e0:89:b0:0d:5c:2a:29:e0:
                    f6:95:2f:cc:b2:b9:6f:dc:0f:7a:ad:b7:f6:a6:be:
                    43:59:70:7a:eb:b1:23:3c:f0:02:da:e4:bd:43:b7:
                    65:5a:31:be:a9:d7:a1:18:c7:e2:a6:d9:31:a6:06:
                    af:3e:ed:70:10:24:5d:75:31:2d:ac:c7:4c:23:e9:
                    b9:a3:84:59:2e:60:9b:d9:b3:c9:57:cf:99:af:1e:
                    c4:5a:f9:29:bf:04:8a:b0:f8:f0:d8:53:03:25:d7:
                    9c:7b:81:fb:cf:e4:d0:ea:a7:44:e1:27:99:55:0e:
                    47:2d:65:c1:4b:89:96:c5:51:15:9b:a9:7f:51:8d:
                    29:d7:02:52:af:cf:f2:8c:91:d5:b1:31:d8:27:24:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:80:3C:51:52:0B:96:32:B6:76:DE:28:D6:A4:69:C1:81:3B:AB
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3232203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:a2:55:38:af:17:32:31:78:c7:fd:d7:f0:0d:27:ca:e9:
         d8:90:7d:83:d2:24:7d:4c:c2:3b:3f:1f:e7:39:8a:12:44:a1:
         98:a4:06:c2:ad:c6:74:bb:b7:57:cd:82:f7:a8:a3:6a:6e:32:
         98:5d:4c:34:94:57:4d:14:bf:80:52:f6:70:43:dc:81:e9:48:
         30:ae:8e:fc:93:b7:f8:66:f6:a4:5b:48:26:a0:db:3e:d2:20:
         2a:26:ed:10:ae:4c:ee:b9:d1:c6:6b:18:7e:98:b0:76:b4:6f:
         6b:b3:e7:59:c9:a7:f5:64:eb:6a:fb:23:b9:59:b9:c3:48:27:
         4e:d9:5f:ba:f9:06:0f:46:57:83:84:1c:5a:c3:f5:3f:9f:12:
         ca:73:84:6b:c3:0a:26:13:43:90:77:63:af:45:44:01:0c:84:
         a4:5c:bf:ee:77:4f:84:ad:ce:e2:72:03:97:4d:9f:65:29:cf:
         c7:4f:76:b8:b6:c5:d0:5b:f7:3f:eb:9d:bf:f7:c1:7d:fc:f0:
         d3:fc:ff:ee:7b:de:28:55:36:d4:df:52:2e:7f:24:8c:df:f2:
         e8:50:a9:71:fe:e4:05:18:2c:1c:f8:d6:0f:db:94:93:c9:6a:
         55:d7:11:1d:f7:2e:f5:7e:a4:97:55:8d:20:fc:34:2a:15:20:
         03:0d:33:16
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUH0YOj0MMnXbD6cr4w6Y4TooZ3jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk2NzQ1QTFGODkwQTc4MkEwNEZBRTkwNDhDNkUzNTU0
QkUxQUIwOTAeFw0yNDAzMDgxODEwMzlaFw0yNTAzMDcxODE1MzlaMDMxMTAvBgNV
BAMTKEU4ODM4MDNDNTE1MjBCOTYzMkI2NzZERTI4RDZBNDY5QzE4MTNCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3+nEQOdaBDEAV/SjM7Y9LqSb8
uYMb80yzBXUUkvL6BLhvTJGGFpv+UZNc1Nx94bqnylA2psgTfw/yUPEhVp6CQ3il
EI9p0A6OVB64cGOCE4dkq/1u7pAf96rVnWVIq/ClJTMi9iqDsCPIsQ44bdXgibAN
XCop4PaVL8yyuW/cD3qtt/amvkNZcHrrsSM88ALa5L1Dt2VaMb6p16EYx+Km2TGm
Bq8+7XAQJF11MS2sx0wj6bmjhFkuYJvZs8lXz5mvHsRa+Sm/BIqw+PDYUwMl15x7
gfvP5NDqp0ThJ5lVDkctZcFLiZbFURWbqX9RjSnXAlKvz/KMkdWxMdgnJFO5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU6IOAPFFSC5YytnbeKNakacGBO6swHwYDVR0j
BBgwFoAUuWdFofiQp4KgT66QSMbjVUvhqwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFoNVFoU1BMZlp3R2RCdFNmNU1IS0EyZ3hLY1FDUUNOaXY4b2kyYjJH
a0svMC9COTY3NDVBMUY4OTBBNzgyQTA0RkFFOTA0OEM2RTM1NTRCRTFBQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I5Njc0NUExRjg5MEE3ODJB
MDRGQUU5MDQ4QzZFMzU1NEJFMUFCMDkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxaDVRaFNQTGZad0dkQnRTZjVNSEtBMmd4S2NRQ1FDTml2OG9pMmIyR2tLLzAv
MzEzMzMxMmUzMDJlMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2MzEzODM3
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKDADgwDQYJKoZIhvcNAQELBQADggEBAACwolU4rxcyMXjH
/dfwDSfK6diQfYPSJH1Mwjs/H+c5ihJEoZikBsKtxnS7t1fNgveoo2puMphdTDSU
V00Uv4BS9nBD3IHpSDCujvyTt/hm9qRbSCag2z7SICom7RCuTO650cZrGH6YsHa0
b2uz51nJp/Vk62r7I7lZucNIJ07ZX7r5Bg9GV4OEHFrD9T+fEspzhGvDCiYTQ5B3
Y69FRAEMhKRcv+53T4StzuJyA5dNn2Upz8dPdri2xdBb9z/rnb/3wX388NP8/+57
3ihVNtTfUi5/JIzf8uhQqXH+5AUYLBz41g/blJPJalXXER33LvV+pJdVjSD8NCoV
IAMNMxY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org