Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
File:                     3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          XCKC2ZboSfCeBRZZ+b242jEy/4PWItodRATzzrpnNsw=
Subject key identifier:   39:80:4E:13:F2:70:55:B7:E3:5E:55:01:95:26:77:6D:88:45:4C:00
Certificate issuer:       /CN=A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA
Certificate serial:       5E75B5F12F0F0FFB121C7150A0CD817FD65803E2
Authority key identifier: A7:ED:2B:62:6B:4E:A3:61:FF:1A:EA:E9:78:7A:5D:70:51:D9:C6:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
Signing time:             Tue 13 Feb 2024 23:58:00 +0000
ROA not before:           Tue 13 Feb 2024 23:53:00 +0000
ROA not after:            Tue 11 Feb 2025 23:58:00 +0000
asID:                     271133
IP address blocks:        131.0.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:b5:f1:2f:0f:0f:fb:12:1c:71:50:a0:cd:81:7f:d6:58:03:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA
        Validity
            Not Before: Feb 13 23:53:00 2024 GMT
            Not After : Feb 11 23:58:00 2025 GMT
        Subject: CN=39804E13F27055B7E35E55019526776D88454C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:bb:fb:ad:af:33:a1:d2:9b:74:66:d6:47:
                    d8:ee:91:68:dd:61:14:e5:fe:02:2e:b8:60:95:74:
                    00:7f:5a:bd:4d:e1:3e:37:bc:cc:54:f1:21:9e:a7:
                    5d:d9:df:6b:23:90:3c:0a:bd:63:8f:df:04:4c:95:
                    a6:cf:b8:36:87:ab:6b:47:2a:56:bd:e0:c4:8c:77:
                    3f:82:82:fc:1d:cd:25:7e:59:f7:4d:c1:55:ed:24:
                    b2:ab:7d:92:38:fe:e2:5e:62:29:88:1b:60:39:07:
                    94:5f:2e:e1:0c:66:58:89:be:79:f4:1a:68:ce:0c:
                    31:46:28:5e:b3:5c:46:1e:c6:74:f8:5c:8b:3a:f5:
                    06:a0:cf:44:61:4f:eb:2d:fb:66:bf:3d:a3:c9:01:
                    14:21:fd:72:d3:1b:94:8f:95:de:87:f8:6e:bc:a6:
                    23:06:7f:f8:f1:21:1c:61:7d:47:48:49:47:4f:9a:
                    d4:d9:de:05:98:e0:2b:3b:25:9c:c7:ff:dd:19:d9:
                    ba:c8:85:df:7c:41:57:9d:b5:d0:34:3e:e6:d4:a1:
                    01:cd:27:b6:15:67:4f:f2:6c:d0:99:d6:03:a0:0c:
                    46:6e:4c:35:e1:7d:ba:89:64:c4:4b:1a:e1:9a:04:
                    60:95:34:c1:06:c7:01:a1:58:37:83:40:66:99:95:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:80:4E:13:F2:70:55:B7:E3:5E:55:01:95:26:77:6D:88:45:4C:00
            X509v3 Authority Key Identifier:
                keyid:A7:ED:2B:62:6B:4E:A3:61:FF:1A:EA:E9:78:7A:5D:70:51:D9:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A7ED2B626B4EA361FF1AEAE9787A5D7051D9C6AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:95:8c:3a:16:37:62:b6:fe:48:63:d3:99:34:c6:52:37:
         39:48:f2:73:f1:6f:75:91:07:8d:c6:9e:b0:0f:68:a8:35:5e:
         bd:d0:02:a2:a7:a2:cd:a2:17:50:a2:e5:ab:4c:04:2c:8b:ad:
         7e:13:f9:75:f5:94:9a:f4:4c:e2:a9:03:dc:b0:dd:59:ce:89:
         a1:51:14:11:be:c9:ec:4c:fe:e0:0e:07:00:62:92:f5:57:03:
         38:f9:8c:83:44:9f:de:13:dd:dd:f4:76:7e:43:a0:02:a4:f5:
         b2:d9:48:74:9a:68:2c:0a:55:c6:03:f3:30:b6:59:6a:b8:77:
         f0:f5:2d:3b:75:3f:33:44:ee:94:a6:76:c3:91:4c:d2:84:12:
         9b:61:11:a3:f0:da:0c:59:81:ff:1d:4d:85:3e:d4:67:28:f1:
         ec:c3:93:95:e6:af:14:47:47:e4:17:b3:5e:84:97:fd:8b:b9:
         3e:28:24:bf:f2:a7:b7:c9:47:09:dd:78:69:0d:39:c3:b8:07:
         e1:13:fe:7e:9e:38:69:88:9f:18:d4:eb:70:a3:15:69:d7:79:
         f3:b2:de:bb:d2:b2:46:7f:3c:b8:1a:a4:26:7b:53:fd:9d:22:
         4c:5d:15:12:fd:6f:ac:b4:65:a0:de:ff:f5:7b:bd:eb:63:36:
         34:11:b1:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXnW18S8PD/sSHHFQoM2Bf9ZYA+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdFRDJCNjI2QjRFQTM2MUZGMUFFQUU5Nzg3QTVENzA1
MUQ5QzZBQTAeFw0yNDAyMTMyMzUzMDBaFw0yNTAyMTEyMzU4MDBaMDMxMTAvBgNV
BAMTKDM5ODA0RTEzRjI3MDU1QjdFMzVFNTUwMTk1MjY3NzZEODg0NTRDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22Lv7ra8zodKbdGbWR9jukWjd
YRTl/gIuuGCVdAB/Wr1N4T43vMxU8SGep13Z32sjkDwKvWOP3wRMlabPuDaHq2tH
Kla94MSMdz+CgvwdzSV+WfdNwVXtJLKrfZI4/uJeYimIG2A5B5RfLuEMZliJvnn0
GmjODDFGKF6zXEYexnT4XIs69Qagz0RhT+st+2a/PaPJARQh/XLTG5SPld6H+G68
piMGf/jxIRxhfUdISUdPmtTZ3gWY4Cs7JZzH/90Z2brIhd98QVedtdA0PubUoQHN
J7YVZ0/ybNCZ1gOgDEZuTDXhfbqJZMRLGuGaBGCVNMEGxwGhWDeDQGaZleK7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOYBOE/JwVbfjXlUBlSZ3bYhFTAAwHwYDVR0j
BBgwFoAUp+0rYmtOo2H/GurpeHpdcFHZxqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnl3TFlwNm9oa1NldWNyd250RzNDNHE2bTlMaWJKYjRLeFBQZGJLc1hl
RzUvMC9BN0VEMkI2MjZCNEVBMzYxRkYxQUVBRTk3ODdBNUQ3MDUxRDlDNkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3RUQyQjYyNkI0RUEzNjFG
RjFBRUFFOTc4N0E1RDcwNTFEOUM2QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5d0xZcDZvaGtTZXVjcndudEczQzRxNm05TGliSmI0S3hQUGRiS3NYZUc1LzAv
MzEzMzMxMmUzMDJlMzEzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCgwB8MA0GCSqGSIb3DQEBCwUAA4IBAQBMdZWMOhY3
Yrb+SGPTmTTGUjc5SPJz8W91kQeNxp6wD2ioNV690AKip6LNohdQouWrTAQsi61+
E/l19ZSa9EziqQPcsN1ZzomhURQRvsnsTP7gDgcAYpL1VwM4+YyDRJ/eE93d9HZ+
Q6ACpPWy2Uh0mmgsClXGA/MwtllquHfw9S07dT8zRO6UpnbDkUzShBKbYRGj8NoM
WYH/HU2FPtRnKPHsw5OV5q8UR0fkF7NehJf9i7k+KCS/8qe3yUcJ3XhpDTnDuAfh
E/5+njhpiJ8Y1OtwoxVp13nzst670rJGfzy4GqQme1P9nSJMXRUS/W+stGWg3v/1
e73rYzY0EbFd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org