Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
File:                     3133312e302e38342e302f32322d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          oIX+EVNF38CH6tB7CQr1tD/Dho+lAHDGa8kt+Me7Fe4=
Subject key identifier:   56:4D:AC:51:43:5E:4E:78:FC:D4:95:CE:09:CE:63:4F:58:CF:54:71
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       7E81DC0D0EE7BB5DFAD508CB1302ABA8F53371D0
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
Signing time:             Sat 20 Jan 2024 18:52:21 +0000
ROA not before:           Sat 20 Jan 2024 18:47:21 +0000
ROA not after:            Sat 18 Jan 2025 18:52:21 +0000
asID:                     262420
IP address blocks:        131.0.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:81:dc:0d:0e:e7:bb:5d:fa:d5:08:cb:13:02:ab:a8:f5:33:71:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:47:21 2024 GMT
            Not After : Jan 18 18:52:21 2025 GMT
        Subject: CN=564DAC51435E4E78FCD495CE09CE634F58CF5471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:aa:9a:d1:e1:4f:25:fb:24:93:34:27:57:
                    71:ac:70:90:4f:07:a8:33:c9:09:24:74:b6:9b:de:
                    16:1d:69:c8:1e:86:1c:4e:13:bc:8d:b8:de:3d:09:
                    35:8d:ba:3a:50:5f:7d:ac:7a:23:80:96:94:f7:e4:
                    21:37:51:f0:d2:fa:bd:3f:60:7d:95:cc:ea:49:de:
                    38:bd:c2:aa:ee:e8:62:10:7d:8f:f6:92:d4:9d:bd:
                    70:3f:25:ab:7b:40:01:2f:99:dc:cb:93:58:89:fa:
                    0c:b3:fa:9f:fa:ea:72:15:87:87:c8:62:a5:9c:11:
                    c6:a0:b7:09:22:74:af:c7:46:45:4f:ce:7a:51:d4:
                    23:48:00:cd:32:bc:74:70:4d:5f:a7:ec:6c:f8:0a:
                    5c:f5:cc:7d:8b:5c:1d:9a:b2:61:11:d8:ac:76:b5:
                    df:2b:a4:d6:d5:d2:2c:5e:2f:7d:ec:51:13:c2:2b:
                    39:d6:f3:c7:e5:18:31:39:82:90:74:0b:5c:6a:45:
                    89:d7:7b:cf:3a:2f:11:78:4f:77:68:36:c7:96:a7:
                    7b:0a:3f:f1:50:71:3d:73:e8:ff:15:02:17:71:36:
                    14:9d:b4:08:e3:45:eb:53:79:35:c9:01:d3:a5:d4:
                    8a:f9:45:22:a5:18:8c:ef:45:33:29:60:30:22:83:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4D:AC:51:43:5E:4E:78:FC:D4:95:CE:09:CE:63:4F:58:CF:54:71
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e302e38342e302f32322d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:48:86:57:9b:a8:0a:11:ef:ba:68:aa:fc:32:35:d4:36:
         76:9c:8f:54:71:8b:33:7a:64:8a:a8:ae:4d:06:05:92:aa:31:
         1f:dd:98:78:0b:b0:1e:95:a5:4f:54:65:28:b8:25:c0:db:a7:
         21:26:0d:78:3d:fc:7c:b2:1b:f8:44:07:d0:18:6e:9a:57:6f:
         3f:70:3e:2d:83:8e:90:35:f4:34:8a:b6:9d:ee:c7:01:6d:77:
         30:ad:65:e0:62:c8:eb:46:8a:f0:5b:69:5e:09:a6:4f:5f:86:
         4f:37:c9:21:a0:cd:c5:2f:9c:78:c9:52:f7:ff:c4:a1:24:fc:
         b2:92:b1:63:70:97:a2:d2:c5:52:19:37:cc:db:d4:ef:fa:8f:
         9a:6c:94:b6:da:f8:e3:cc:57:12:d1:cf:93:cb:31:97:50:ea:
         79:d5:f0:c8:35:0d:d2:c0:6a:5e:dc:f5:19:d5:e4:45:12:88:
         1d:64:19:ef:3d:ab:1e:77:e3:ef:7b:14:0f:94:a9:b3:43:7c:
         f6:96:4b:f9:47:1f:c1:4c:bd:de:f7:e3:70:c6:79:3f:b0:c0:
         c7:77:12:6c:1d:de:74:52:ab:06:7c:da:cc:57:0f:39:d4:37:
         6b:ba:50:4a:73:ab:0d:3a:64:48:06:81:1b:2a:1a:24:51:b6:
         c4:28:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org