Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3232203d3e203631363639.roa
File:                     3133312e3130382e31322e302f32322d3232203d3e203631363639.roa (raw, json)
Hash identifier:          e0CGLnlwyc7Po9CclDJT6Ypejx17p7ZuzhyO6PRH/xU=
Subject key identifier:   40:FA:CC:13:3C:82:2B:B1:0C:5B:7B:05:AD:CC:5D:60:23:0A:EF:52
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       0B8A2DC5A910F2304DDF449EE488DC206CF94731
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3232203d3e203631363639.roa
Signing time:             Thu 06 Oct 2022 15:17:01 +0000
ROA not before:           Thu 06 Oct 2022 15:12:01 +0000
ROA not after:            Thu 05 Oct 2023 15:17:01 +0000
asID:                     61669
IP address blocks:        131.108.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8a:2d:c5:a9:10:f2:30:4d:df:44:9e:e4:88:dc:20:6c:f9:47:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:12:01 2022 GMT
            Not After : Oct  5 15:17:01 2023 GMT
        Subject: CN=40FACC133C822BB10C5B7B05ADCC5D60230AEF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:d9:0f:b4:97:af:9c:5b:61:3a:07:33:d9:
                    54:cc:de:ec:84:63:c8:1a:ea:75:e2:06:55:3c:fa:
                    a0:9a:ee:ff:39:d7:c5:2d:44:a7:90:1c:55:8d:2e:
                    e5:65:74:e1:3e:08:ef:fa:d1:86:70:b4:a0:5b:24:
                    d9:00:37:40:8b:f8:52:4a:a0:90:1b:5e:a9:59:05:
                    5b:f9:ef:36:b4:77:2a:55:cb:8b:24:8d:e9:0f:0b:
                    19:f9:ca:62:44:c4:c8:a9:0d:29:88:05:35:8d:8c:
                    b7:ad:a4:34:da:2c:41:86:21:d5:94:a1:22:af:c3:
                    96:42:1a:a9:60:a7:92:fa:8b:07:eb:4c:8d:31:d4:
                    99:81:e1:a3:3c:fa:cc:e9:09:92:8c:4c:c2:fc:32:
                    15:9e:17:5b:52:b6:a8:67:42:d7:f4:0e:4a:25:3a:
                    45:84:c4:a5:19:7c:65:70:50:55:98:3a:cb:fc:05:
                    d9:6a:8e:63:1c:82:d9:1b:22:21:43:ec:63:23:f6:
                    27:aa:de:35:48:95:a1:da:f4:90:01:ab:60:86:86:
                    2f:1d:54:d5:34:1c:f9:a8:c1:4a:ac:13:fb:3a:e2:
                    38:6f:f3:12:c4:cb:39:0b:e6:c3:47:5a:0f:7c:c9:
                    2e:5e:93:7c:f5:d5:4a:53:5b:46:8a:bc:a7:cb:74:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:CC:13:3C:82:2B:B1:0C:5B:7B:05:AD:CC:5D:60:23:0A:EF:52
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31322e302f32322d3232203d3e203631363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:f4:56:5e:d0:e9:97:fb:23:0c:65:2f:17:e7:9c:ef:df:
         76:80:07:d1:76:b4:1f:6f:a6:39:53:7f:f6:7b:84:e7:0d:5e:
         ea:23:cf:4f:da:7e:c8:30:31:22:9c:f3:95:89:42:dd:e1:5c:
         ca:d3:22:05:f2:95:96:8d:23:21:fe:c2:63:3c:f8:18:77:35:
         59:2f:0b:dc:b6:aa:53:11:48:d4:c6:eb:58:36:8b:09:c1:f2:
         ca:bc:fa:e3:83:df:90:0c:c7:e8:e8:0f:e6:57:75:45:d3:32:
         32:68:96:4b:e9:98:52:e9:ad:33:12:d3:03:83:83:91:b5:e4:
         2e:34:f6:1a:49:18:1f:f2:1a:7d:c8:18:6b:a6:35:a8:eb:d0:
         b2:01:b9:ab:fd:53:47:3f:38:b5:25:7b:c7:de:29:35:42:cb:
         50:58:94:c5:4e:0a:82:33:94:dc:77:72:2a:91:79:93:48:38:
         fa:4d:07:21:7e:fd:ce:0f:72:d5:63:4f:b8:9d:8d:ae:45:ba:
         d0:18:89:d2:fc:4c:39:30:91:02:36:42:97:e4:ff:c9:a8:7a:
         60:68:b0:27:d4:58:09:94:bf:00:88:ea:46:b3:3a:23:c4:5e:
         64:53:bc:6f:dc:f4:df:4d:1f:69:3e:5b:f5:f7:a8:c1:18:36:
         32:67:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org