Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa
File:                     3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa (raw, json)
Hash identifier:          tvjaCL9PC0W62NYfpZwQ02jSuxJGNR8NdSWT3poAuIw=
Subject key identifier:   B5:93:0B:A9:34:30:68:1E:3E:4B:E7:6B:BE:E6:BE:8F:C2:FC:79:38
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       1283C7BDE90EEE6C7915E998D14E46371BBFF2B5
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:44:55 +0000
ROA not before:           Tue 24 Oct 2023 12:39:55 +0000
ROA not after:            Tue 22 Oct 2024 12:44:55 +0000
asID:                     61678
IP address blocks:        131.108.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:83:c7:bd:e9:0e:ee:6c:79:15:e9:98:d1:4e:46:37:1b:bf:f2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:39:55 2023 GMT
            Not After : Oct 22 12:44:55 2024 GMT
        Subject: CN=B5930BA93430681E3E4BE76BBEE6BE8FC2FC7938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:42:82:af:92:b5:8b:28:e2:7f:7f:2a:99:
                    23:a7:62:44:26:82:12:01:fb:f0:c9:90:e5:36:f9:
                    6f:e2:dc:10:c6:29:46:55:a7:3a:15:65:0b:e5:1a:
                    16:22:26:20:83:4d:67:79:86:e5:d5:c7:cc:5a:63:
                    bf:5a:9f:c8:da:b5:0b:a0:ae:f1:79:6a:ea:99:f1:
                    06:c5:a3:ae:d3:ca:e0:f1:30:53:20:8d:9e:6f:cc:
                    5f:d2:01:ed:1c:b0:1b:d2:27:d9:5a:18:92:2a:3d:
                    60:3b:e4:c2:06:eb:2a:86:bb:53:22:35:77:3f:8a:
                    58:34:39:bb:37:cb:d4:22:ff:2a:c4:5c:86:87:dc:
                    4e:58:6d:39:52:6e:a2:d9:e6:d9:00:ce:ce:2c:ab:
                    af:b9:a1:06:b1:85:6b:bc:93:0f:72:ca:a7:41:e0:
                    0a:dc:18:52:06:d0:bc:9a:df:51:f2:e3:5b:b3:09:
                    25:32:8d:b6:f4:07:67:de:33:14:cc:39:37:c9:ff:
                    74:f7:41:d4:44:f4:5f:cb:3d:d5:2c:a3:2b:36:d2:
                    90:c5:5c:bd:20:b0:3c:5a:e0:39:4d:11:a6:dc:59:
                    6e:72:5e:b1:15:8d:bb:e8:eb:b2:99:2e:da:7c:a7:
                    0e:20:f7:aa:3e:8a:36:f2:a6:a7:96:1a:7d:d5:94:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:93:0B:A9:34:30:68:1E:3E:4B:E7:6B:BE:E6:BE:8F:C2:FC:79:38
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133312e3130382e3136372e302f32342d3234203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:18:8d:13:70:a2:eb:6f:dc:6b:1f:27:93:29:1e:f2:7c:
         00:34:36:d1:93:b8:20:91:59:7c:91:4c:8c:bb:bd:4f:7b:2a:
         87:ff:0f:01:a5:74:bc:0a:ed:47:95:bb:35:2e:b3:2a:a1:25:
         57:d8:5e:ed:c4:be:e8:93:01:39:1b:f3:1f:87:cb:b2:81:4f:
         a2:5b:d2:c3:06:e9:5e:c1:ea:f3:ef:30:a3:d4:56:a3:4e:12:
         fd:cc:c9:91:da:c0:e2:2a:27:af:35:bc:71:f9:d5:9e:58:2f:
         cd:32:fd:c2:3e:1c:1f:20:67:8a:b7:a9:61:03:2e:df:6a:98:
         99:6f:27:2a:df:40:e9:cc:46:71:a5:87:cc:64:aa:61:eb:56:
         23:5c:45:9f:70:43:a4:6d:5f:03:e6:75:16:ad:4e:fa:0d:09:
         1a:96:2b:09:c9:47:13:3c:fa:70:45:e5:f6:60:2d:67:89:08:
         7c:9a:59:02:bc:9c:be:98:71:6d:29:25:58:2b:77:99:de:77:
         c9:ce:89:44:e0:89:f4:f4:fc:3b:9a:f9:f9:ae:5a:88:41:61:
         01:29:e4:c8:75:8e:e9:ce:f6:a6:f7:4d:cb:5e:36:02:7a:ad:
         80:04:c9:7c:bd:09:5f:59:07:97:25:02:d3:42:42:e9:f2:73:
         5d:3f:e5:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEoPHvekO7mx5FemY0U5GNxu/8rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjM5NTVaFw0yNDEwMjIxMjQ0NTVaMDMxMTAvBgNV
BAMTKEI1OTMwQkE5MzQzMDY4MUUzRTRCRTc2QkJFRTZCRThGQzJGQzc5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEc0KCr5K1iyjif38qmSOnYkQm
ghIB+/DJkOU2+W/i3BDGKUZVpzoVZQvlGhYiJiCDTWd5huXVx8xaY79an8jatQug
rvF5auqZ8QbFo67TyuDxMFMgjZ5vzF/SAe0csBvSJ9laGJIqPWA75MIG6yqGu1Mi
NXc/ilg0Obs3y9Qi/yrEXIaH3E5YbTlSbqLZ5tkAzs4sq6+5oQaxhWu8kw9yyqdB
4ArcGFIG0Lya31Hy41uzCSUyjbb0B2feMxTMOTfJ/3T3QdRE9F/LPdUsoys20pDF
XL0gsDxa4DlNEabcWW5yXrEVjbvo67KZLtp8pw4g96o+ijbypqeWGn3VlFExAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtZMLqTQwaB4+S+drvua+j8L8eTgwHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbKcwDQYJKoZIhvcNAQELBQADggEBAKbxGI0T
cKLrb9xrHyeTKR7yfAA0NtGTuCCRWXyRTIy7vU97Kof/DwGldLwK7UeVuzUusyqh
JVfYXu3EvuiTATkb8x+Hy7KBT6Jb0sMG6V7B6vPvMKPUVqNOEv3MyZHawOIqJ681
vHH51Z5YL80y/cI+HB8gZ4q3qWEDLt9qmJlvJyrfQOnMRnGlh8xkqmHrViNcRZ9w
Q6RtXwPmdRatTvoNCRqWKwnJRxM8+nBF5fZgLWeJCHyaWQK8nL6YcW0pJVgrd5ne
d8nOiUTgifT0/Dua+fmuWohBYQEp5Mh1junO9qb3TcteNgJ6rYAEyXy9CV9ZB5cl
AtNCQunyc10/5dU=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org