Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31332e302f32342d3234203d3e203631363639.roa
File:                     3133312e3130382e31332e302f32342d3234203d3e203631363639.roa (raw, json)
Hash identifier:          BT0spUACPha5nz4l1fr3yLftx/cQ1rYG8uMAomUsFao=
Subject key identifier:   70:5A:3A:CE:F1:21:DB:AE:85:E4:69:2B:6A:AF:85:5D:A3:D2:D5:73
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       02F33F7C362077004EF67A82D9D25256A14CC6AC
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31332e302f32342d3234203d3e203631363639.roa
Signing time:             Thu 06 Oct 2022 15:16:54 +0000
ROA not before:           Thu 06 Oct 2022 15:11:54 +0000
ROA not after:            Thu 05 Oct 2023 15:16:54 +0000
asID:                     61669
IP address blocks:        131.108.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f3:3f:7c:36:20:77:00:4e:f6:7a:82:d9:d2:52:56:a1:4c:c6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:54 2022 GMT
            Not After : Oct  5 15:16:54 2023 GMT
        Subject: CN=705A3ACEF121DBAE85E4692B6AAF855DA3D2D573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:d3:bc:2c:ef:12:61:dd:af:7a:65:14:0b:
                    a2:d7:f9:a7:77:28:d5:7c:c2:c0:c3:f0:d2:a7:52:
                    06:7f:9b:b5:61:6e:a5:38:d3:c6:0f:d9:35:3b:6c:
                    14:be:c4:fa:4e:85:6e:aa:78:59:5f:45:29:fe:70:
                    cb:4f:3c:9a:a5:59:bc:3f:fa:2d:5a:91:70:c3:08:
                    b0:f1:53:a8:8b:f6:de:58:3d:e3:45:1b:da:52:3b:
                    a8:e6:cc:00:92:8b:b2:24:44:fc:48:b1:6f:90:91:
                    d8:4d:6f:d4:bf:fd:3c:2e:70:2f:63:35:47:12:56:
                    96:77:86:6a:82:c1:e7:2a:25:70:0d:90:01:24:48:
                    77:15:2b:14:21:da:a1:7c:27:53:ec:3a:72:73:b0:
                    55:2b:10:25:f3:47:5f:f6:40:83:c0:fe:18:a4:61:
                    7b:50:65:7c:3f:5f:34:57:29:b5:7c:fd:c8:a6:5f:
                    da:c4:c9:af:94:f3:a4:d5:bf:53:84:f9:56:d8:de:
                    9c:b4:9f:f0:2a:1f:99:01:bf:44:48:24:8b:c6:f4:
                    82:f4:03:5e:69:68:e1:8e:96:0c:87:9c:21:d8:14:
                    b1:f6:be:4d:f4:46:b3:bc:9e:69:b6:73:9d:7e:2a:
                    75:d7:55:2a:2e:9c:95:4f:d8:bc:bc:1f:f6:e1:84:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5A:3A:CE:F1:21:DB:AE:85:E4:69:2B:6A:AF:85:5D:A3:D2:D5:73
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31332e302f32342d3234203d3e203631363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7e:91:c3:37:d6:2e:78:41:2e:83:40:03:02:e0:77:50:98:
         9a:ed:63:da:de:6e:a3:8c:75:1e:85:12:62:c9:6e:df:df:94:
         b6:55:3e:ec:ed:e3:14:de:70:c0:72:e6:5b:35:cf:3c:49:d9:
         9e:cd:73:2b:67:7f:e5:7b:2c:b3:c9:dd:cb:fb:6e:bd:0c:43:
         c4:85:d1:83:65:09:02:97:69:49:b7:f8:28:37:01:37:84:e0:
         05:2a:44:81:5e:28:e5:7c:5a:c1:69:0f:b2:1c:e6:8f:71:0f:
         5f:91:d3:7f:d2:1d:ba:9c:44:eb:f5:0c:36:79:1c:5d:85:68:
         c2:62:cc:d0:dc:b0:6d:f7:de:6b:f1:f5:89:0a:66:90:8e:49:
         69:7f:38:1f:8b:46:99:92:88:8a:f9:d6:90:a4:34:dd:ef:e7:
         23:7f:a0:09:32:e1:33:70:57:f5:c8:b3:9e:ca:1e:99:77:66:
         cb:ba:62:65:87:3f:62:70:0f:a7:e0:2c:42:0d:95:ff:28:75:
         55:fb:04:bf:26:82:ad:1b:40:24:67:61:4b:02:56:5e:59:de:
         2a:b1:5c:19:15:dd:db:47:97:d4:74:26:9c:06:a9:60:9f:db:
         af:68:93:9c:c8:19:c7:b9:83:a6:3c:1e:03:fa:34:f6:ba:e8:
         89:92:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org