Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32322d3234203d3e203631383734.roa
File:                     3133312e302e35362e302f32322d3234203d3e203631383734.roa (raw, json)
Hash identifier:          EAfwpvHFuOgqv0vjR9En44D0Yne+HkzQ3p2DUcRCa8U=
Subject key identifier:   11:40:2A:C2:B4:D1:50:87:57:EB:40:C7:D0:8A:FB:73:69:0F:1B:3A
Certificate issuer:       /CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
Certificate serial:       2B9F8F77239D598125C6B8432963966BF43D7468
Authority key identifier: 9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32322d3234203d3e203631383734.roa
Signing time:             Thu 04 Apr 2024 16:16:48 +0000
ROA not before:           Thu 04 Apr 2024 16:11:48 +0000
ROA not after:            Thu 03 Apr 2025 16:16:48 +0000
asID:                     61874
IP address blocks:        131.0.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9f:8f:77:23:9d:59:81:25:c6:b8:43:29:63:96:6b:f4:3d:74:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
        Validity
            Not Before: Apr  4 16:11:48 2024 GMT
            Not After : Apr  3 16:16:48 2025 GMT
        Subject: CN=11402AC2B4D1508757EB40C7D08AFB73690F1B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:8b:d6:86:a0:27:15:78:52:2d:67:59:2e:
                    36:b0:ae:49:1f:f7:52:4e:87:3a:c4:44:d9:ad:b6:
                    31:de:a0:8b:cd:0f:fa:7c:73:ee:ba:c8:6a:01:8d:
                    f1:83:fe:b9:ce:80:92:a8:40:b7:60:29:93:4b:68:
                    4d:28:77:2a:b3:24:4d:16:f3:b2:8e:c3:73:14:da:
                    91:c9:ad:a4:17:01:d7:01:7a:30:e3:a9:d6:d8:58:
                    82:87:c3:73:9d:f5:7c:f0:b9:b8:d6:e2:17:02:9d:
                    01:2b:3f:8b:99:e8:21:a5:f5:24:36:04:f5:f0:19:
                    c9:0a:54:84:fc:1a:8b:b5:33:51:6f:87:38:69:8e:
                    f7:e8:d7:c3:8e:bb:da:d7:81:7f:1b:bc:5f:73:96:
                    1e:27:ce:83:67:8e:a3:63:cf:89:2e:1c:77:c0:fe:
                    18:25:48:11:8a:d6:bc:44:a4:85:7b:3e:ee:ea:64:
                    e7:1f:1d:91:63:df:34:12:ed:d7:7b:42:53:31:48:
                    6e:a6:64:f7:6a:5e:a3:3f:96:e5:91:77:60:ca:97:
                    94:ed:d0:d9:b9:e4:41:4a:72:3b:16:37:84:9b:de:
                    40:d3:a7:98:63:68:5d:4c:a8:c5:60:71:13:96:5a:
                    1d:b5:c7:6e:e9:82:46:5f:9e:6b:84:dd:b7:dc:ce:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:2A:C2:B4:D1:50:87:57:EB:40:C7:D0:8A:FB:73:69:0F:1B:3A
            X509v3 Authority Key Identifier:
                keyid:9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32322d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:25:ed:c0:00:28:d2:4d:b7:c7:cf:15:33:36:e8:7d:51:96:
         3d:75:35:72:8a:d4:04:19:54:05:14:61:22:b4:ac:9e:2f:fd:
         52:30:61:f3:4c:78:35:4f:11:bc:5e:22:65:b5:37:7c:c4:2f:
         18:d5:6a:dd:a9:12:10:f9:c0:e0:66:a9:f9:1a:16:a8:16:5b:
         d8:6b:d7:c1:a7:cf:40:33:11:cc:8d:a2:99:2d:4e:11:56:d5:
         1b:4c:ac:d2:e3:eb:75:89:79:53:f2:21:9a:89:16:0f:b9:a9:
         c2:e1:93:79:31:10:42:fc:2e:d8:a8:8b:78:45:78:c5:8f:5c:
         12:04:24:14:b6:be:9a:ac:5f:66:c8:b7:53:fa:ae:7f:a2:98:
         3a:a3:5f:ff:d3:94:99:64:3c:07:96:24:6c:23:34:7e:bb:5f:
         07:4f:0a:2e:8e:e0:c2:ef:6a:66:0c:62:32:5d:ff:a8:92:f6:
         aa:0f:9f:0f:e1:39:4b:93:f6:ee:1e:82:d1:b3:63:23:1a:ac:
         b3:bb:59:07:1f:51:db:0c:1c:08:95:fc:f4:fe:57:02:91:e8:
         76:53:d5:06:94:39:e0:e1:1b:95:13:5a:cb:9a:2e:e0:35:0a:
         98:9d:d3:83:45:ff:62:99:06:a0:c0:51:31:4f:68:c1:de:3d:
         a7:e2:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:26:31 2024 by rpki-client on console-ams.rpki-client.org