Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa
File:                     3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          B68DHbqVLQa3tcBI74utTrpf8t0ZRr8XuEUz1bHcwqk=
Subject key identifier:   E8:86:2D:ED:B1:7D:77:17:D3:4A:D5:F5:3C:3F:50:74:2F:D6:FB:21
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       7B798A40A12F2AE1F08366F3039444473C679B6E
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa
Signing time:             Mon 11 Dec 2023 18:15:55 +0000
ROA not before:           Mon 11 Dec 2023 18:10:55 +0000
ROA not after:            Mon 09 Dec 2024 18:15:55 +0000
asID:                     265911
IP address blocks:        131.196.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:8a:40:a1:2f:2a:e1:f0:83:66:f3:03:94:44:47:3c:67:9b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Dec 11 18:10:55 2023 GMT
            Not After : Dec  9 18:15:55 2024 GMT
        Subject: CN=E8862DEDB17D7717D34AD5F53C3F50742FD6FB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:cb:7b:d0:f5:ab:22:f3:9b:f5:bb:b1:a7:
                    bd:0b:9c:1d:ae:c1:04:f2:ca:9f:26:87:05:8a:83:
                    0e:96:8f:61:4c:78:c1:c2:8f:85:1e:d6:80:05:29:
                    5c:48:4a:6c:80:a3:2e:d9:91:f3:c0:dd:b3:98:0d:
                    55:a9:41:1d:90:75:4f:1f:e0:f8:12:46:26:76:23:
                    45:fd:7e:bb:dd:24:7d:fd:b3:38:f0:e9:aa:1c:c2:
                    ff:57:f3:1b:9c:28:0d:83:b1:b8:09:64:f9:2a:93:
                    af:c6:b9:45:2e:7b:ae:0a:e3:9e:74:75:39:98:73:
                    f5:4b:f3:51:e7:70:b5:66:69:ec:09:53:60:8c:c5:
                    9c:06:4f:95:20:71:6e:b8:3f:3e:aa:0f:57:42:8b:
                    ca:c8:0b:e8:cf:79:4a:cc:ce:44:89:e1:e3:20:53:
                    67:97:6d:5a:8b:75:cd:6c:4f:a1:f7:65:ba:af:35:
                    86:a4:5b:8c:50:71:07:c2:c5:80:cd:e5:27:d5:a5:
                    c6:67:9c:7e:66:5d:4a:bf:cb:bd:18:aa:8d:f4:1e:
                    9d:bd:63:73:f9:70:82:d1:d3:29:67:10:ad:fe:2c:
                    65:53:c2:3b:eb:98:19:7f:ba:25:6b:16:f8:52:39:
                    59:07:3a:07:5b:2f:7f:6a:30:cf:23:93:67:dc:c0:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:2D:ED:B1:7D:77:17:D3:4A:D5:F5:3C:3F:50:74:2F:D6:FB:21
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3133312e3139362e3134372e302f32342d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:5d:84:7e:a1:6b:43:08:95:45:47:e7:51:bb:94:7a:24:
         f6:33:7f:5a:38:68:3d:95:c8:7a:ba:08:88:0f:4a:27:4f:e9:
         49:32:6e:66:ca:52:30:23:30:b9:3f:86:07:af:fc:28:1c:9f:
         c7:ae:7a:6c:31:ba:18:0f:56:f1:5b:69:25:df:d7:c0:ae:48:
         6c:bc:1f:4b:f5:00:64:5e:be:61:de:1f:23:f7:01:0c:fe:d1:
         ac:e3:f6:2a:76:21:68:d0:a3:c8:e5:e1:38:cd:e8:83:b7:dc:
         e8:e4:d5:bb:62:14:d9:9a:69:11:8e:f4:e6:f4:c6:da:09:59:
         cc:33:90:f0:9c:11:58:25:0e:c6:a6:2a:89:52:89:b9:39:3d:
         81:cc:57:b8:ca:ae:c9:72:ff:a6:d3:25:1a:9d:b4:5f:d8:4c:
         4c:04:af:aa:63:d8:9e:ce:9b:6b:37:35:78:63:4a:2c:e4:90:
         fc:8e:da:31:e1:aa:5a:51:e2:99:3c:a7:11:09:45:8e:fc:68:
         75:3e:a4:b1:29:4f:b3:1d:f1:26:da:6b:df:37:95:e3:7e:1f:
         ff:c3:b0:ec:16:07:6f:d0:bd:d7:36:d8:84:14:cd:82:30:76:
         ee:79:8a:a2:0c:3e:06:d4:b0:c2:78:e9:3f:e5:4a:8a:9f:d8:
         67:6d:0a:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUe3mKQKEvKuHwg2bzA5RERzxnm24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0
QUMyNUNENjAeFw0yMzEyMTExODEwNTVaFw0yNDEyMDkxODE1NTVaMDMxMTAvBgNV
BAMTKEU4ODYyREVEQjE3RDc3MTdEMzRBRDVGNTNDM0Y1MDc0MkZENkZCMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdMt70PWrIvOb9buxp70LnB2u
wQTyyp8mhwWKgw6Wj2FMeMHCj4Ue1oAFKVxISmyAoy7ZkfPA3bOYDVWpQR2QdU8f
4PgSRiZ2I0X9frvdJH39szjw6aocwv9X8xucKA2DsbgJZPkqk6/GuUUue64K4550
dTmYc/VL81HncLVmaewJU2CMxZwGT5UgcW64Pz6qD1dCi8rIC+jPeUrMzkSJ4eMg
U2eXbVqLdc1sT6H3ZbqvNYakW4xQcQfCxYDN5SfVpcZnnH5mXUq/y70Yqo30Hp29
Y3P5cILR0ylnEK3+LGVTwjvrmBl/uiVrFvhSOVkHOgdbL39qMM8jk2fcwEYNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6IYt7bF9dxfTStX1PD9QdC/W+yEwHwYDVR0j
BBgwFoAUH3DcQYNJrOW++/AHKb0o3UrCXNYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzAvMUY3MERDNDE4MzQ5QUNFNUJFRkJGMDA3MjlCRDI4REQ0QUMyNUNENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8xRjcwREM0MTgzNDlBQ0U1QkVG
QkYwMDcyOUJEMjhERDRBQzI1Q0Q2LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzAvMzEz
MzMxMmUzMTM5MzYyZTMxMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NTM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIPEkzANBgkqhkiG9w0BAQsFAAOCAQEALoVdhH6h
a0MIlUVH51G7lHok9jN/WjhoPZXIeroIiA9KJ0/pSTJuZspSMCMwuT+GB6/8KByf
x656bDG6GA9W8VtpJd/XwK5IbLwfS/UAZF6+Yd4fI/cBDP7RrOP2KnYhaNCjyOXh
OM3og7fc6OTVu2IU2ZppEY705vTG2glZzDOQ8JwRWCUOxqYqiVKJuTk9gcxXuMqu
yXL/ptMlGp20X9hMTASvqmPYns6bazc1eGNKLOSQ/I7aMeGqWlHimTynEQlFjvxo
dT6ksSlPsx3xJtpr3zeV434f/8Ow7BYHb9C91zbYhBTNgjB27nmKogw+BtSwwnjp
P+VKip/YZ20KYw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org