Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35382e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35382e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          Cdofc6JZDp47ybzwuxRE8gpyah+9keVehTm/9EnXrBE=
Subject key identifier:   05:F3:24:03:60:07:B7:95:D7:2C:D0:D4:4B:1C:71:C1:D8:B6:CE:88
Certificate issuer:       /CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
Certificate serial:       67A18345FDD5D9DE0317CB984705FF8282546A5B
Authority key identifier: B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35382e302f32342d3234203d3e203631383734.roa
Signing time:             Fri 08 Mar 2024 18:15:19 +0000
ROA not before:           Fri 08 Mar 2024 18:10:19 +0000
ROA not after:            Fri 07 Mar 2025 18:15:19 +0000
asID:                     61874
IP address blocks:        131.0.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a1:83:45:fd:d5:d9:de:03:17:cb:98:47:05:ff:82:82:54:6a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96745A1F890A782A04FAE9048C6E3554BE1AB09
        Validity
            Not Before: Mar  8 18:10:19 2024 GMT
            Not After : Mar  7 18:15:19 2025 GMT
        Subject: CN=05F324036007B795D72CD0D44B1C71C1D8B6CE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:23:02:e7:db:ad:56:ff:9d:00:f4:0f:85:
                    a8:c3:92:bb:42:4a:7c:91:fa:c2:78:7d:ce:1e:a2:
                    66:e5:be:09:11:04:22:43:7a:63:0d:17:a6:d9:ff:
                    fb:ea:85:57:af:1e:62:2b:3f:91:ed:97:07:3a:1a:
                    cc:96:ab:81:cd:13:6f:c5:ea:e4:20:d7:2b:ad:9d:
                    1f:ee:4d:b3:84:29:69:e8:f1:b0:72:1f:51:a3:15:
                    1e:1b:9a:8a:ce:87:ea:f2:d8:d5:e9:8f:bb:17:46:
                    00:03:af:b3:d9:d2:7b:dc:36:02:f5:52:24:cd:f9:
                    db:b5:fb:90:ae:01:d1:38:8c:bf:14:e5:e4:2f:7b:
                    3e:e1:fd:14:f7:72:15:5f:b4:8b:86:07:67:11:fd:
                    c9:51:7a:48:92:78:28:fe:96:61:6c:54:d9:b1:3f:
                    27:fa:59:26:6a:ab:e7:43:bd:36:d3:f3:9a:c5:9c:
                    8e:a9:01:c4:e7:53:1b:fd:e5:d6:e2:c8:a4:e9:5b:
                    d7:c3:75:60:8e:18:de:91:22:f6:81:c1:c5:8b:cf:
                    44:46:c4:fb:20:15:56:38:f5:3b:42:d9:82:0c:83:
                    fa:c0:e9:ac:87:2c:e5:69:3e:9f:00:34:92:06:35:
                    a6:b6:98:03:04:90:a6:7d:09:43:20:59:19:25:2f:
                    09:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F3:24:03:60:07:B7:95:D7:2C:D0:D4:4B:1C:71:C1:D8:B6:CE:88
            X509v3 Authority Key Identifier:
                keyid:B9:67:45:A1:F8:90:A7:82:A0:4F:AE:90:48:C6:E3:55:4B:E1:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B96745A1F890A782A04FAE9048C6E3554BE1AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35382e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:28:28:26:33:b3:b4:bf:7f:28:78:57:99:b4:e3:7c:fd:
         e6:0e:6a:27:d9:f0:f4:c7:fa:35:c1:dd:69:44:33:18:54:1f:
         98:10:82:77:11:41:cd:ee:78:68:10:4f:35:bc:e4:d5:2b:35:
         e8:3e:60:1d:81:c7:0d:61:5e:77:f2:4f:cd:fa:8e:e1:ab:74:
         14:29:68:38:49:d7:58:dd:01:65:8f:cf:6c:0c:c0:58:17:8b:
         e5:dd:73:3a:cc:13:cb:52:80:3c:04:68:62:ef:37:d1:b7:bc:
         21:e4:ea:a1:76:ff:93:70:3b:1b:a4:a0:7c:13:54:e6:6e:6d:
         1d:5e:b6:7e:dc:93:bf:85:c0:af:45:73:e3:81:c2:10:aa:d6:
         2a:1a:63:6c:b5:9b:61:11:fa:36:6d:fb:ad:59:de:7f:12:84:
         73:36:56:f5:b4:f0:06:53:96:7c:5f:e4:ab:c0:1b:7a:71:d3:
         42:11:6a:ba:56:a8:06:5f:8e:ba:f5:b6:f2:91:c8:76:a1:eb:
         b4:37:74:1d:55:3d:9b:3c:77:2b:03:11:3c:3c:d9:3f:36:a3:
         bd:9e:58:66:f8:1d:44:ea:aa:51:14:8e:37:8e:64:3b:23:2d:
         1c:2d:06:07:c4:07:3e:92:97:b7:5e:2b:50:25:ee:b8:a5:5f:
         57:7b:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org