Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
File:                     3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          33RSSFvRzbrPb4Y330vxue8OonmYDOVRCRVIsIGMyck=
Subject key identifier:   E6:1D:7D:91:06:7E:9F:0E:6C:AC:C0:86:E5:E9:7E:04:85:4D:58:0D
Certificate issuer:       /CN=4073FA1C2A2E4732C9C4BE9301B36F1801D3904E
Certificate serial:       6B7E08F197FDA7B17A6399F0234D1CF7579BC42A
Authority key identifier: 40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
Signing time:             Thu 04 Apr 2024 15:01:06 +0000
ROA not before:           Thu 04 Apr 2024 14:56:06 +0000
ROA not after:            Thu 03 Apr 2025 15:01:06 +0000
asID:                     271133
IP address blocks:        131.0.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:08:f1:97:fd:a7:b1:7a:63:99:f0:23:4d:1c:f7:57:9b:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4073FA1C2A2E4732C9C4BE9301B36F1801D3904E
        Validity
            Not Before: Apr  4 14:56:06 2024 GMT
            Not After : Apr  3 15:01:06 2025 GMT
        Subject: CN=E61D7D91067E9F0E6CACC086E5E97E04854D580D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:ba:1e:bd:24:c5:24:07:3b:ac:8d:d9:65:
                    da:45:a8:a2:06:44:e0:ad:54:70:38:af:b3:b8:90:
                    b4:13:0f:97:3e:da:43:de:1d:7e:99:b1:1e:37:e0:
                    cb:fb:ea:4f:c8:38:18:7a:77:5f:4f:c8:82:d1:23:
                    bc:57:e5:6c:a5:d4:37:7c:53:b0:e9:0f:05:4b:7c:
                    dd:b4:d4:85:64:d8:39:f8:91:09:ee:5c:82:5c:b8:
                    aa:14:d9:8f:d3:4b:c2:0a:cb:64:db:a5:e3:04:b3:
                    1a:8b:f1:14:7b:90:ae:74:50:e1:5a:d3:aa:79:e8:
                    42:9b:06:96:89:8e:40:ed:f8:c7:10:a7:63:bc:9b:
                    7d:d1:80:d0:54:94:b8:f3:77:71:13:51:bc:95:c6:
                    1c:7e:04:f5:29:38:a0:f6:51:15:89:2a:86:91:a9:
                    67:40:76:ec:6a:da:6f:30:d1:40:af:c0:4b:20:f8:
                    ab:4c:cb:24:da:d0:6c:a8:57:97:dc:a8:0b:2b:01:
                    94:a7:2d:6a:ad:93:e4:77:6a:21:47:e6:fa:e9:18:
                    2e:c6:af:13:72:8a:87:10:ec:2f:21:71:51:93:e0:
                    08:70:58:e3:18:a5:a6:98:c7:9e:0c:17:75:bf:a0:
                    8e:e1:f5:30:36:be:d5:2b:5d:ff:f1:cc:76:32:82:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:7D:91:06:7E:9F:0E:6C:AC:C0:86:E5:E9:7E:04:85:4D:58:0D
            X509v3 Authority Key Identifier:
                keyid:40:73:FA:1C:2A:2E:47:32:C9:C4:BE:93:01:B3:6F:18:01:D3:90:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4073FA1C2A2E4732C9C4BE9301B36F1801D3904E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/1/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:60:93:4c:3e:7b:37:84:2e:48:0a:ac:1b:d7:9f:09:e8:5a:
         74:06:69:d0:a9:f0:db:0c:ca:48:e6:16:b3:cb:69:8b:28:85:
         bd:72:bb:51:b0:c8:87:3d:fb:f7:00:c3:72:71:9d:f0:8d:8e:
         79:16:70:5d:a5:e6:a5:4d:61:d0:53:af:0e:b6:13:2e:bf:4e:
         b6:75:40:0c:89:63:df:a1:26:3f:f8:24:1c:40:25:96:1a:b2:
         f9:35:d9:41:a8:64:31:59:a5:9d:59:c6:72:33:0e:98:5a:ca:
         19:d1:d3:6c:e9:98:f8:a0:d7:e6:04:33:db:4f:5d:40:a2:28:
         79:0c:c9:36:3a:8d:16:15:b7:84:54:9d:8f:7b:64:61:77:f7:
         af:da:42:2c:70:82:14:e2:10:4c:19:c1:1c:31:f7:3e:5c:5f:
         24:81:17:33:f2:78:c8:d6:45:9b:5a:2b:13:12:1f:72:b7:bc:
         13:17:0a:c6:2e:ad:c8:c3:a0:f6:d1:ba:32:c6:d4:18:aa:52:
         d3:23:d9:42:a0:77:2d:5a:38:17:52:d5:22:1d:84:9c:c5:89:
         fe:d7:9e:aa:6e:39:6b:f5:19:54:9e:a6:05:22:36:8b:f3:02:
         26:28:02:23:e7:b7:49:bc:a3:42:87:dc:51:c7:eb:d8:3c:07:
         55:f0:1f:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa34I8Zf9p7F6Y5nwI00c91ebxCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA3M0ZBMUMyQTJFNDczMkM5QzRCRTkzMDFCMzZGMTgw
MUQzOTA0RTAeFw0yNDA0MDQxNDU2MDZaFw0yNTA0MDMxNTAxMDZaMDMxMTAvBgNV
BAMTKEU2MUQ3RDkxMDY3RTlGMEU2Q0FDQzA4NkU1RTk3RTA0ODU0RDU4MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bLoevSTFJAc7rI3ZZdpFqKIG
ROCtVHA4r7O4kLQTD5c+2kPeHX6ZsR434Mv76k/IOBh6d19PyILRI7xX5Wyl1Dd8
U7DpDwVLfN201IVk2Dn4kQnuXIJcuKoU2Y/TS8IKy2TbpeMEsxqL8RR7kK50UOFa
06p56EKbBpaJjkDt+McQp2O8m33RgNBUlLjzd3ETUbyVxhx+BPUpOKD2URWJKoaR
qWdAduxq2m8w0UCvwEsg+KtMyyTa0GyoV5fcqAsrAZSnLWqtk+R3aiFH5vrpGC7G
rxNyiocQ7C8hcVGT4AhwWOMYpaaYx54MF3W/oI7h9TA2vtUrXf/xzHYygvlLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5h19kQZ+nw5srMCG5el+BIVNWA0wHwYDVR0j
BBgwFoAUQHP6HCouRzLJxL6TAbNvGAHTkE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnl3TFlwNm9oa1NldWNyd250RzNDNHE2bTlMaWJKYjRLeFBQZGJLc1hl
RzUvMS80MDczRkExQzJBMkU0NzMyQzlDNEJFOTMwMUIzNkYxODAxRDM5MDRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNzNGQTFDMkEyRTQ3MzJD
OUM0QkU5MzAxQjM2RjE4MDFEMzkwNEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5d0xZcDZvaGtTZXVjcndudEczQzRxNm05TGliSmI0S3hQUGRiS3NYZUc1LzEv
MzEzMzMxMmUzMDJlMzEzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzEzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCgwB8MA0GCSqGSIb3DQEBCwUAA4IBAQA5YJNMPns3
hC5ICqwb158J6Fp0BmnQqfDbDMpI5hazy2mLKIW9crtRsMiHPfv3AMNycZ3wjY55
FnBdpealTWHQU68OthMuv062dUAMiWPfoSY/+CQcQCWWGrL5NdlBqGQxWaWdWcZy
Mw6YWsoZ0dNs6Zj4oNfmBDPbT11Aoih5DMk2Oo0WFbeEVJ2Pe2Rhd/ev2kIscIIU
4hBMGcEcMfc+XF8kgRcz8njI1kWbWisTEh9yt7wTFwrGLq3Iw6D20boyxtQYqlLT
I9lCoHctWjgXUtUiHYScxYn+156qbjlr9RlUnqYFIjaL8wImKAIj57dJvKNCh9xR
x+vYPAdV8B8f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org