Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31342e302f32342d3234203d3e203631363639.roa
File:                     3133312e3130382e31342e302f32342d3234203d3e203631363639.roa (raw, json)
Hash identifier:          IaRKXIvNUBjllrGmd0L+nACnZ2VRogx+vzLPq4jEY7o=
Subject key identifier:   48:74:45:FE:54:0A:CE:77:E5:72:63:E3:07:10:AA:40:01:91:5E:C1
Certificate issuer:       /CN=56D9A1201889650DCAB74085B3A0433357A372C2
Certificate serial:       4028356D836EDBDBEA1B9A081D7C168A3C8C7608
Authority key identifier: 56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31342e302f32342d3234203d3e203631363639.roa
Signing time:             Thu 06 Oct 2022 15:16:57 +0000
ROA not before:           Thu 06 Oct 2022 15:11:57 +0000
ROA not after:            Thu 05 Oct 2023 15:16:57 +0000
asID:                     61669
IP address blocks:        131.108.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:28:35:6d:83:6e:db:db:ea:1b:9a:08:1d:7c:16:8a:3c:8c:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D9A1201889650DCAB74085B3A0433357A372C2
        Validity
            Not Before: Oct  6 15:11:57 2022 GMT
            Not After : Oct  5 15:16:57 2023 GMT
        Subject: CN=487445FE540ACE77E57263E30710AA4001915EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:d5:2c:e1:0d:5a:98:42:de:93:9e:67:b4:
                    5c:e2:83:85:fd:da:e5:4f:a8:85:47:2d:87:d5:60:
                    46:ba:2d:ac:db:92:ed:0b:0f:e1:50:60:21:d8:d3:
                    03:98:e8:cd:bd:78:85:8e:29:93:f1:19:e4:91:7a:
                    75:ad:8e:86:a3:1a:16:df:54:7f:50:c4:4c:fc:48:
                    2e:e7:1a:39:1c:2c:8e:b2:d1:84:9b:26:fb:9b:de:
                    7d:10:25:ac:d8:fb:25:a9:cf:dd:ca:2c:4d:1f:e7:
                    dc:59:5b:da:ce:ea:55:39:24:f3:37:79:13:de:8c:
                    46:10:e5:02:57:f1:78:bb:7a:5c:01:4c:e4:84:60:
                    dd:a9:3e:a9:8f:c7:46:76:7c:d0:6f:7e:77:cc:d6:
                    12:fe:78:d9:29:98:1a:26:83:30:05:74:8b:d0:3a:
                    70:52:ae:1d:10:e8:af:d1:e5:90:f1:ce:a5:f5:fc:
                    d2:39:82:22:27:af:f3:47:d0:96:09:80:ea:a8:e8:
                    53:70:8f:22:d0:7f:0f:b3:88:96:24:c7:53:09:6e:
                    bb:e8:cc:76:ab:41:05:85:ca:32:08:a7:f1:b7:54:
                    cc:3a:43:de:20:57:27:bc:9c:3c:a3:5b:7c:b3:6c:
                    fe:bf:6c:4a:db:d8:53:79:06:ff:95:78:f4:67:cd:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:45:FE:54:0A:CE:77:E5:72:63:E3:07:10:AA:40:01:91:5E:C1
            X509v3 Authority Key Identifier:
                keyid:56:D9:A1:20:18:89:65:0D:CA:B7:40:85:B3:A0:43:33:57:A3:72:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/56D9A1201889650DCAB74085B3A0433357A372C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56D9A1201889650DCAB74085B3A0433357A372C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/3133312e3130382e31342e302f32342d3234203d3e203631363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:6a:e5:50:d8:82:35:5d:6b:bd:c8:7a:4f:13:14:cc:28:a6:
         60:9b:50:85:d7:ee:be:ba:e6:88:b0:b5:1b:09:7d:39:b8:ee:
         80:1f:b6:26:4a:75:40:b0:5a:3b:72:ef:78:3c:1a:72:19:81:
         94:3d:0a:bc:86:62:29:ad:48:63:94:b9:00:9f:8a:a1:0e:19:
         44:7b:9c:98:7c:ce:47:52:15:fe:0f:c6:bc:d4:66:39:e6:b6:
         05:73:4f:55:12:6f:43:8e:ce:7e:d8:8a:8f:95:96:4f:2f:09:
         f8:ad:ec:6f:ab:fa:d6:af:cf:f3:8e:d7:35:a2:14:37:62:3d:
         73:72:8f:c9:cb:24:ea:bc:d0:e4:04:9e:ec:34:c5:2f:8c:a6:
         86:31:79:33:11:53:89:a7:ee:c6:75:f9:57:88:7b:ee:21:29:
         b5:55:b2:fd:95:cd:83:24:a0:74:aa:e3:59:99:e7:e5:07:45:
         fb:8d:18:50:39:d5:97:5a:4c:16:b2:30:54:b4:7d:42:88:b9:
         f5:d3:ed:b6:a1:95:8d:80:90:bf:09:e7:69:6a:2a:49:1d:36:
         b4:26:f7:81:d0:c4:ea:a1:63:f6:cc:7a:fa:57:ef:93:7c:de:
         bf:f0:af:c5:ec:a9:29:5a:d8:c2:52:93:2e:87:4e:74:71:01:
         45:9a:d5:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQCg1bYNu29vqG5oIHXwWijyMdggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZEOUExMjAxODg5NjUwRENBQjc0MDg1QjNBMDQzMzM1
N0EzNzJDMjAeFw0yMjEwMDYxNTExNTdaFw0yMzEwMDUxNTE2NTdaMDMxMTAvBgNV
BAMTKDQ4NzQ0NUZFNTQwQUNFNzdFNTcyNjNFMzA3MTBBQTQwMDE5MTVFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6T9Us4Q1amELek55ntFzig4X9
2uVPqIVHLYfVYEa6Lazbku0LD+FQYCHY0wOY6M29eIWOKZPxGeSRenWtjoajGhbf
VH9QxEz8SC7nGjkcLI6y0YSbJvub3n0QJazY+yWpz93KLE0f59xZW9rO6lU5JPM3
eRPejEYQ5QJX8Xi7elwBTOSEYN2pPqmPx0Z2fNBvfnfM1hL+eNkpmBomgzAFdIvQ
OnBSrh0Q6K/R5ZDxzqX1/NI5giInr/NH0JYJgOqo6FNwjyLQfw+ziJYkx1MJbrvo
zHarQQWFyjIIp/G3VMw6Q94gVye8nDyjW3yzbP6/bErb2FN5Bv+VePRnzZrvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSHRF/lQKznflcmPjBxCqQAGRXsEwHwYDVR0j
BBgwFoAUVtmhIBiJZQ3Kt0CFs6BDM1ejcsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tuc0ptc2ZMb2dLRlVna01ua0J5WGtucXFmczdqQUJtV0VkQ24yNXZa
MXYvMC81NkQ5QTEyMDE4ODk2NTBEQ0FCNzQwODVCM0EwNDMzMzU3QTM3MkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2RDlBMTIwMTg4OTY1MERD
QUI3NDA4NUIzQTA0MzMzNTdBMzcyQzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrbnNKbXNmTG9nS0ZVZ2tNbmtCeVhrbnFxZnM3akFCbVdFZENuMjV2WjF2LzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2wOMA0GCSqGSIb3DQEBCwUAA4IBAQA0auVQ2II1
XWu9yHpPExTMKKZgm1CF1+6+uuaIsLUbCX05uO6AH7YmSnVAsFo7cu94PBpyGYGU
PQq8hmIprUhjlLkAn4qhDhlEe5yYfM5HUhX+D8a81GY55rYFc09VEm9Djs5+2IqP
lZZPLwn4rexvq/rWr8/zjtc1ohQ3Yj1zco/JyyTqvNDkBJ7sNMUvjKaGMXkzEVOJ
p+7GdflXiHvuISm1VbL9lc2DJKB0quNZmeflB0X7jRhQOdWXWkwWsjBUtH1CiLn1
0+22oZWNgJC/CedpaipJHTa0JveB0MTqoWP2zHr6V++TfN6/8K/F7KkpWtjCUpMu
h050cQFFmtXl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org