Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35372e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35372e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          zUGs8Xr5dvkO5EOsmbwD6Ujp9eNg3w96TITQ2msfIL4=
Subject key identifier:   6B:D7:DD:70:B5:39:48:CE:1C:8E:3B:68:D5:48:03:B3:77:D3:2C:70
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       7AD3C04487E759415A06AC9809701C9FDF2ED897
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35372e302f32342d3234203d3e203631383734.roa
Signing time:             Fri 08 Mar 2024 18:15:19 +0000
ROA not before:           Fri 08 Mar 2024 18:10:19 +0000
ROA not after:            Fri 07 Mar 2025 18:15:19 +0000
asID:                     61874
IP address blocks:        131.0.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d3:c0:44:87:e7:59:41:5a:06:ac:98:09:70:1c:9f:df:2e:d8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar  8 18:10:19 2024 GMT
            Not After : Mar  7 18:15:19 2025 GMT
        Subject: CN=6BD7DD70B53948CE1C8E3B68D54803B377D32C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:20:54:f6:f5:48:d4:4a:4d:4e:d4:a1:73:
                    ab:dc:5d:6c:f4:c3:38:de:8e:6f:7f:e8:56:d0:87:
                    3f:84:9d:d9:6c:ab:0a:4d:65:a8:82:5e:59:ee:8f:
                    a2:8e:35:5f:d4:e1:75:ee:c1:a2:0a:6e:1e:02:ab:
                    d0:8e:e0:c7:7a:24:c5:47:7d:2e:5e:69:20:bc:e0:
                    c5:e0:17:e8:b5:ba:52:e9:59:67:8c:b9:16:c0:6b:
                    a8:00:fc:55:16:eb:7c:19:cc:68:c7:ed:bb:99:0c:
                    c8:81:56:fc:f8:76:80:46:e0:22:b1:eb:e3:2e:c0:
                    01:5b:66:1b:86:00:45:2f:79:90:71:d2:9b:da:dd:
                    d1:d3:82:70:7b:fb:dc:05:30:0b:49:3d:aa:f4:41:
                    15:73:2a:26:5b:44:74:17:ca:65:aa:d9:ad:56:5e:
                    62:ba:31:8f:a0:62:89:5e:ba:1b:96:9f:52:08:96:
                    aa:cd:c1:c1:a3:e0:4d:2b:5c:ba:ab:03:6e:7f:8f:
                    80:25:3a:8b:57:ff:a4:e5:e3:de:84:c1:b0:79:f5:
                    a3:c4:12:89:83:a9:cd:66:7f:16:ac:52:46:70:f3:
                    73:81:19:23:14:81:e0:cf:3d:6c:20:91:d3:94:7d:
                    e4:d4:57:73:92:87:4f:a4:3d:f3:8f:8b:b8:b1:97:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D7:DD:70:B5:39:48:CE:1C:8E:3B:68:D5:48:03:B3:77:D3:2C:70
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35372e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:fb:eb:96:58:1d:11:58:55:a0:02:f8:75:18:f5:d7:8a:
         4e:f2:74:a1:f2:92:30:e4:5f:99:9a:f4:16:fe:85:d0:36:98:
         22:5a:bf:e1:3a:ac:86:43:1b:f9:90:b3:b9:f6:d6:2f:03:15:
         1f:a9:e5:fc:06:80:a8:b4:5f:1e:19:ff:a1:8e:e2:88:91:99:
         c6:90:24:26:82:47:82:67:21:21:18:bb:41:b2:3d:f0:f9:69:
         65:95:33:34:31:cc:a7:d7:c7:8f:d5:86:4f:91:9c:4a:44:9d:
         62:79:d5:5d:c3:57:f3:dd:46:fb:5b:95:e8:0e:eb:ae:13:c8:
         ed:80:37:17:73:19:49:a9:93:ef:ac:9d:d3:85:14:f7:91:20:
         2c:51:c6:5b:42:9a:7f:c4:39:7e:e9:2a:40:5e:5d:81:3e:95:
         ef:82:1e:dc:91:94:ca:82:3b:a6:92:a6:54:5d:15:9b:8a:b2:
         ac:a7:96:66:4e:b4:ec:98:26:b3:06:32:57:af:1b:b5:cc:10:
         15:cb:21:b4:12:50:8f:d0:bb:ed:ee:d7:da:2f:31:12:a7:b7:
         99:87:88:46:86:0e:d2:7c:bf:3e:8c:d2:16:24:04:b1:8b:9b:
         d2:b3:0b:02:b0:c0:05:58:17:7d:f6:b3:7b:55:69:ef:fd:62:
         03:7f:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org