Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3234203d3e203631383734.roa
File:                     3133312e302e35362e302f32322d3234203d3e203631383734.roa (raw, json)
Hash identifier:          lo/lFIoScPiF2hjg3RG06h6RgCUpClG5fHwg6s/DA48=
Subject key identifier:   EC:E8:F2:52:36:3F:CC:9A:6F:8E:EF:22:82:A9:73:EE:B4:37:74:2E
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       3129B794E3D541FAE938920F44E40DA647EDDA15
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3234203d3e203631383734.roa
Signing time:             Tue 12 Mar 2024 18:14:08 +0000
ROA not before:           Tue 12 Mar 2024 18:09:08 +0000
ROA not after:            Tue 11 Mar 2025 18:14:08 +0000
asID:                     61874
IP address blocks:        131.0.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:29:b7:94:e3:d5:41:fa:e9:38:92:0f:44:e4:0d:a6:47:ed:da:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar 12 18:09:08 2024 GMT
            Not After : Mar 11 18:14:08 2025 GMT
        Subject: CN=ECE8F252363FCC9A6F8EEF2282A973EEB437742E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:ee:18:7e:e5:12:de:48:ec:f6:83:c8:35:
                    1a:d7:9f:54:1a:81:8f:c6:15:d2:6d:08:61:26:ad:
                    44:4d:15:26:c1:9f:3e:05:7a:df:ba:8b:c0:49:9d:
                    c7:25:3c:bc:33:11:15:87:55:eb:f8:55:40:89:75:
                    51:ff:14:a3:3f:56:be:3d:2f:80:bd:da:7b:39:3f:
                    03:b7:cc:53:ba:16:54:cc:57:55:f6:4c:f8:4f:51:
                    ba:7f:35:9d:f1:c9:36:57:9a:56:b3:84:b3:be:ba:
                    dd:4d:53:40:a7:8e:9e:38:7e:ec:aa:05:6c:90:42:
                    ef:c3:c4:ae:34:45:82:30:11:9c:17:4c:af:ca:32:
                    42:26:fe:5c:cc:d0:3f:a7:78:0d:33:cb:17:10:9c:
                    ff:0b:b4:76:da:b4:ea:b9:5c:96:2c:fc:f5:6f:7f:
                    98:b5:47:21:03:a3:8c:4f:d3:42:89:e1:7d:1d:10:
                    e9:82:64:02:3c:27:6c:42:c8:ea:1f:16:ec:a8:f3:
                    d5:40:0d:ae:15:ef:5b:ff:af:3d:2b:f4:5e:65:a9:
                    6c:11:bc:cf:10:28:69:9c:4d:d0:24:02:01:90:aa:
                    41:fd:34:75:d5:b0:9e:14:d4:1e:5b:d1:56:82:e6:
                    35:49:32:ee:2c:7a:c0:7c:7f:66:a1:ed:9b:02:b8:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E8:F2:52:36:3F:CC:9A:6F:8E:EF:22:82:A9:73:EE:B4:37:74:2E
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:3e:64:be:54:98:29:56:09:ec:7b:ab:a8:d5:91:c5:a1:
         21:0a:9c:48:98:63:37:e5:65:d4:ab:a7:fb:65:15:87:b6:6f:
         3e:59:74:1f:2a:cb:4e:2e:33:e8:10:a5:11:61:77:8e:83:46:
         b0:a6:c9:d4:ff:12:c6:0e:2a:de:17:2f:1a:57:1a:44:f4:17:
         eb:94:5f:0f:cc:84:83:9b:b7:24:7e:f7:c0:fe:ae:82:24:e5:
         a9:a4:0e:f9:e1:28:a5:f3:9f:ba:70:a6:c6:18:f6:ef:16:38:
         d0:3f:42:23:f0:44:1d:58:7d:e3:d1:fa:75:a3:33:b2:ad:8a:
         b3:ce:bc:4e:02:6a:74:ff:c3:18:ef:c9:e0:dd:88:f7:ee:3d:
         be:56:bd:fe:db:8d:13:cf:bf:1e:aa:e9:d3:77:ed:9e:61:a4:
         72:c7:3d:0e:aa:65:69:b5:66:a2:6e:44:7e:3a:fe:10:8a:ed:
         db:9a:ca:4d:fd:53:6a:89:ef:c9:2f:ba:fd:c0:15:fa:47:6e:
         24:5a:e0:8a:43:ee:88:a2:9c:57:ca:ec:8c:63:33:41:6f:38:
         1b:55:cd:1f:49:91:ca:3b:15:05:99:5c:7f:18:36:52:d4:2e:
         2b:46:7f:23:87:a7:84:2c:80:53:07:8d:bf:3f:e4:5a:66:9d:
         36:7d:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org