Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
File:                     3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa (raw, json)
Hash identifier:          crfEnAfKvHfWKqV/nG9Mu0H/KpGQdmOONnCyWnrU59E=
Subject key identifier:   92:47:8A:09:03:5B:9F:2A:5E:68:38:FF:D7:4F:6E:73:3A:8B:FC:37
Certificate issuer:       /CN=34377E5CB3D1D279C7704E0C7C11B2B287EB3067
Certificate serial:       541799E595D3171D1EB632AA549A163ABEFF547B
Authority key identifier: 34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
Signing time:             Sun 25 Feb 2024 03:00:00 +0000
ROA not before:           Sun 25 Feb 2024 02:55:00 +0000
ROA not after:            Tue 25 Feb 2025 03:00:00 +0000
asID:                     54540
IP address blocks:        131.196.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:17:99:e5:95:d3:17:1d:1e:b6:32:aa:54:9a:16:3a:be:ff:54:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34377E5CB3D1D279C7704E0C7C11B2B287EB3067
        Validity
            Not Before: Feb 25 02:55:00 2024 GMT
            Not After : Feb 25 03:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:c3:d9:77:1d:bb:47:f1:d6:fb:08:14:5e:
                    28:6c:bc:87:bb:18:77:94:6f:29:5f:b3:71:6d:54:
                    b2:84:07:3f:b0:15:fe:c6:79:ad:6a:d6:8c:9a:74:
                    70:12:40:5e:2b:ee:19:50:a3:ef:a6:6b:14:87:aa:
                    1b:7b:f9:53:68:ca:1f:33:51:3e:53:16:e1:58:af:
                    f8:70:76:2f:73:77:60:81:fd:0c:c6:69:b0:10:55:
                    bf:2d:7f:d0:f7:50:02:61:8b:85:07:0c:f2:f9:ab:
                    49:72:1a:66:29:18:3f:91:c4:ae:78:34:d9:76:1c:
                    7d:32:e1:4c:8e:8b:e3:5c:4f:1a:6b:28:64:89:89:
                    22:c4:0a:b0:8d:41:8f:0d:b8:d9:e7:a6:f6:8e:41:
                    8b:fb:60:6e:7c:fb:56:98:29:15:fc:f1:46:db:b6:
                    5f:10:73:44:7d:ad:9f:08:6a:35:d7:07:2b:03:30:
                    18:f2:1f:86:3b:90:5c:4f:d7:76:62:d4:63:42:40:
                    26:31:c8:7b:94:c3:46:ef:12:eb:98:29:d7:82:dd:
                    6b:49:3f:3f:4a:ca:78:d8:16:f0:e9:4c:fe:90:2a:
                    7c:79:1a:66:97:dc:c1:62:67:08:8f:8d:61:6e:86:
                    ac:a5:75:77:cc:1c:d6:00:90:74:9b:1f:5c:48:b2:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:47:8A:09:03:5B:9F:2A:5E:68:38:FF:D7:4F:6E:73:3A:8B:FC:37
            X509v3 Authority Key Identifier:
                keyid:34:37:7E:5C:B3:D1:D2:79:C7:70:4E:0C:7C:11:B2:B2:87:EB:30:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34377E5CB3D1D279C7704E0C7C11B2B287EB3067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/0/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:a7:d7:01:fa:8d:b4:00:1e:ec:70:6a:b8:a8:c9:2e:25:
         29:16:ce:60:81:a5:8d:a7:80:ea:18:35:55:66:7a:11:3e:4d:
         e3:3d:7d:10:32:05:f2:d5:00:ec:2b:10:af:2a:58:20:44:03:
         eb:2e:f6:bb:97:80:03:f5:2e:07:1b:f9:af:4d:fb:11:4a:fd:
         c8:d1:61:3c:16:1b:34:26:d4:f5:0d:7f:05:d8:d2:27:2d:fd:
         b2:4b:3b:c4:48:51:a3:37:ed:fa:01:35:e3:d6:2d:3c:a3:23:
         23:c2:fe:0f:5a:8c:cb:f4:e0:14:45:77:bc:50:47:0d:40:6d:
         f9:1e:92:43:73:6f:57:c1:14:27:7d:ed:fd:0a:cc:04:0f:01:
         a0:78:c3:dd:e0:7d:ea:eb:8e:2f:b8:4a:a2:f3:45:30:b8:b6:
         b4:06:24:a7:db:72:06:9d:2a:89:ce:3c:2e:25:47:ee:ce:ce:
         12:e0:9b:18:5e:60:5d:31:e0:e2:23:9d:7b:f7:57:ff:a6:9e:
         65:4e:af:bf:d9:50:43:b3:fc:f9:b0:68:ab:4b:0d:11:21:72:
         47:f3:2a:01:c3:10:a9:bf:14:e6:be:8c:75:de:2f:d6:b9:ec:
         02:b8:c7:83:08:79:6f:a4:5c:5a:92:46:64:96:cb:83:a2:a9:
         96:69:ad:2e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVBeZ5ZXTFx0etjKqVJoWOr7/VHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQzNzdFNUNCM0QxRDI3OUM3NzA0RTBDN0MxMUIyQjI4
N0VCMzA2NzAeFw0yNDAyMjUwMjU1MDBaFw0yNTAyMjUwMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRThBQkMzRDk3NzFEQkI0N0Yx
RDZGQjA4MTQ1RTI4NkNCQzg3QkIxODc3OTQ2RjI5NUZCMzcxNkQ1NEIyODQwNzNG
QjAxNUZFQzY3OUFENkFENjhDOUE3NDcwMTI0MDVFMkJFRTE5NTBBM0VGQTY2QjE0
ODdBQTFCN0JGOTUzNjhDQTFGMzM1MTNFNTMxNkUxNThBRkY4NzA3NjJGNzM3NzYw
ODFGRDBDQzY2OUIwMTA1NUJGMkQ3RkQwRjc1MDAyNjE4Qjg1MDcwQ0YyRjlBQjQ5
NzIxQTY2MjkxODNGOTFDNEFFNzgzNEQ5NzYxQzdEMzJFMTRDOEU4QkUzNUM0RjFB
NkIyODY0ODk4OTIyQzQwQUIwOEQ0MThGMERCOEQ5RTdBNkY2OEU0MThCRkI2MDZF
N0NGQjU2OTgyOTE1RkNGMTQ2REJCNjVGMTA3MzQ0N0RBRDlGMDg2QTM1RDcwNzJC
MDMzMDE4RjIxRjg2M0I5MDVDNEZENzc2NjJENDYzNDI0MDI2MzFDODdCOTRDMzQ2
RUYxMkVCOTgyOUQ3ODJERDZCNDkzRjNGNEFDQTc4RDgxNkYwRTk0Q0ZFOTAyQTdD
NzkxQTY2OTdEQ0MxNjI2NzA4OEY4RDYxNkU4NkFDQTU3NTc3Q0MxQ0Q2MDA5MDc0
OUIxRjVDNDhCMjQ4REIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6KvD2Xcdu0fx1vsIFF4obLyHuxh3lG8pX7NxbVSyhAc/sBX+xnmt
ataMmnRwEkBeK+4ZUKPvpmsUh6obe/lTaMofM1E+UxbhWK/4cHYvc3dggf0Mxmmw
EFW/LX/Q91ACYYuFBwzy+atJchpmKRg/kcSueDTZdhx9MuFMjovjXE8aayhkiYki
xAqwjUGPDbjZ56b2jkGL+2BufPtWmCkV/PFG27ZfEHNEfa2fCGo11wcrAzAY8h+G
O5BcT9d2YtRjQkAmMch7lMNG7xLrmCnXgt1rST8/Ssp42Bbw6Uz+kCp8eRpml9zB
YmcIj41hboaspXV3zBzWAJB0mx9cSLJI2wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJJHigkDW58qXmg4/9dPbnM6i/w3MB8GA1UdIwQYMBaAFDQ3flyz0dJ5x3BODHwR
srKH6zBnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI
RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzAvMzQzNzdFNUNCM0QxRDI3
OUM3NzA0RTBDN0MxMUIyQjI4N0VCMzA2Ny5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zNDM3N0U1Q0IzRDFEMjc5Qzc3MDRFMEM3QzExQjJCMjg3RUIz
MDY3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bTNRYnRvdlpmVURYSEUydUJ0
QktCNHZIY20zaEdCbVNoam13UkRyZ3FlUi8wLzMxMzMzMTJlMzEzOTM2MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM0MzUzNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
g8SsMA0GCSqGSIb3DQEBCwUAA4IBAQA896fXAfqNtAAe7HBquKjJLiUpFs5ggaWN
p4DqGDVVZnoRPk3jPX0QMgXy1QDsKxCvKlggRAPrLva7l4AD9S4HG/mvTfsRSv3I
0WE8Fhs0JtT1DX8F2NInLf2ySzvESFGjN+36ATXj1i08oyMjwv4PWozL9OAURXe8
UEcNQG35HpJDc29XwRQnfe39CswEDwGgeMPd4H3q644vuEqi80UwuLa0BiSn23IG
nSqJzjwuJUfuzs4S4JsYXmBdMeDiI51791f/pp5lTq+/2VBDs/z5sGirSw0RIXJH
8yoBwxCpvxTmvox13i/WuewCuMeDCHlvpFxakkZklsuDoqmWaa0u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org