Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35362e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          SMHt9Ykkfq2k7Da6Lc/WnjjIYs5WFcCgRGKzLA2bo9w=
Subject key identifier:   FA:0A:51:CB:A3:5A:9C:81:D6:7B:7A:1E:0D:3E:93:77:0C:83:B0:C0
Certificate issuer:       /CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
Certificate serial:       6ADB41C33F8B907AAF61FF24171334D4BC782F44
Authority key identifier: 9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32342d3234203d3e203631383734.roa
Signing time:             Thu 04 Apr 2024 16:16:48 +0000
ROA not before:           Thu 04 Apr 2024 16:11:48 +0000
ROA not after:            Thu 03 Apr 2025 16:16:48 +0000
asID:                     61874
IP address blocks:        131.0.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:db:41:c3:3f:8b:90:7a:af:61:ff:24:17:13:34:d4:bc:78:2f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
        Validity
            Not Before: Apr  4 16:11:48 2024 GMT
            Not After : Apr  3 16:16:48 2025 GMT
        Subject: CN=FA0A51CBA35A9C81D67B7A1E0D3E93770C83B0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f8:5c:b7:61:ad:0f:85:72:ab:0b:55:62:e9:
                    a3:fe:74:2f:ed:ed:40:2c:b6:92:2f:7c:b5:7c:42:
                    01:5c:16:ce:8a:6c:3d:7e:62:ab:cf:09:74:4a:2a:
                    a2:ae:9c:04:11:af:ca:fa:b8:b4:1f:15:44:8e:ac:
                    6a:01:5e:20:55:9e:42:14:37:be:99:f8:51:ee:38:
                    e1:c1:d9:d3:7f:a7:13:a3:ac:3a:82:a9:a6:05:c1:
                    4f:59:84:92:80:8d:44:aa:89:ed:16:45:ea:37:f2:
                    56:c1:42:38:aa:6e:7b:02:2e:61:b4:ee:c4:94:44:
                    eb:63:6f:6d:82:f6:d9:a4:b1:36:5e:52:5c:9d:50:
                    04:f7:aa:5b:ec:50:20:bf:9c:68:7b:f8:33:48:06:
                    e3:a6:25:0b:d0:10:5a:c1:72:1d:8e:ae:e4:a0:99:
                    d5:d4:7f:07:2e:88:f8:55:99:0c:64:d2:b0:c4:31:
                    ce:93:56:20:93:c3:af:87:cc:af:c6:5b:39:08:fc:
                    13:54:dc:9c:63:7a:3f:ce:b2:df:f2:bf:27:e9:7a:
                    bd:15:d9:04:63:d7:fe:66:90:07:95:65:d3:8c:97:
                    fc:81:55:05:70:15:0a:d2:e7:3e:49:e5:c2:82:5a:
                    05:7b:f0:34:1a:6e:ce:04:d1:6c:be:f3:0e:65:fd:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0A:51:CB:A3:5A:9C:81:D6:7B:7A:1E:0D:3E:93:77:0C:83:B0:C0
            X509v3 Authority Key Identifier:
                keyid:9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35362e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:fe:98:92:8d:7a:82:23:ff:3c:60:67:6e:35:ec:d5:e7:da:
         eb:33:7d:16:38:ec:e0:49:cf:75:8a:b5:bd:e2:a2:3f:e7:1c:
         c2:22:96:ef:99:2a:92:90:de:15:a1:19:db:2b:5a:c9:22:a3:
         9b:5d:2f:67:9f:30:67:17:25:b2:f3:fb:24:86:53:23:3f:6a:
         f6:61:3b:3b:bc:d7:72:f8:64:41:7f:84:56:65:b9:a1:83:66:
         61:d6:0c:72:ac:4e:95:cb:dc:02:d1:d2:83:d6:6d:82:38:f6:
         96:04:08:b4:84:97:f3:53:cc:d4:9b:e8:fa:0f:45:fc:8f:2c:
         4f:4d:76:e4:a0:09:a3:ec:8c:c4:14:16:e6:ab:ae:64:a8:4a:
         01:c3:07:0f:c0:db:7c:1a:cf:8d:d1:09:d6:e9:ea:82:62:93:
         7c:92:67:cf:54:21:72:87:f1:8b:a0:14:a0:2e:40:e6:00:ab:
         80:40:7d:e8:68:56:32:f8:d7:01:65:ab:73:48:b1:6c:ce:2b:
         ab:25:ae:14:4e:4c:d4:35:d5:cb:eb:2d:a7:77:a3:4e:9d:61:
         08:69:eb:ce:aa:e8:7a:8a:01:16:c2:67:b1:e4:ff:26:c2:3f:
         d3:67:8a:cd:21:34:cf:53:6b:ef:d6:db:60:05:46:03:92:3e:
         7f:9d:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 17:11:13 2024 by rpki-client on console-fra.rpki-client.org