Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3232203d3e20323634323733.roa
File:                     3133382e3131382e3232302e302f32322d3232203d3e20323634323733.roa (raw, json)
Hash identifier:          E8lwANyH8mzWLupeOhR5d4Fqrw0PbMGkcEnO3eh2ISA=
Subject key identifier:   26:78:F8:45:70:7A:6B:4F:1F:E2:5B:94:5E:50:A9:7A:D0:47:B0:A2
Certificate issuer:       /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial:       6BEAED64D746F561DA5660DA740630CC104E4ED8
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3232203d3e20323634323733.roa
Signing time:             Wed 07 Feb 2024 12:58:37 +0000
ROA not before:           Wed 07 Feb 2024 12:53:37 +0000
ROA not after:            Wed 05 Feb 2025 12:58:37 +0000
asID:                     264273
IP address blocks:        138.118.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ea:ed:64:d7:46:f5:61:da:56:60:da:74:06:30:cc:10:4e:4e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
        Validity
            Not Before: Feb  7 12:53:37 2024 GMT
            Not After : Feb  5 12:58:37 2025 GMT
        Subject: CN=2678F845707A6B4F1FE25B945E50A97AD047B0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:82:d0:c5:4b:62:45:15:df:79:6a:c6:c4:
                    c4:06:02:3f:c0:8d:d4:2b:a4:83:56:d6:ba:32:23:
                    22:f5:70:67:72:94:69:5d:ce:d7:42:b5:df:ed:57:
                    4e:f8:a2:53:fa:68:89:96:56:6a:be:5e:5d:8a:18:
                    8e:5f:af:bd:2e:53:fa:0b:d5:16:e8:8f:bd:09:e0:
                    fd:3d:55:e1:af:ad:56:85:aa:30:2d:be:b4:80:22:
                    a9:89:86:7f:db:63:46:7f:f1:bd:67:80:12:a5:e6:
                    fc:87:d3:c9:a8:94:94:f9:68:28:cc:08:73:13:cb:
                    74:91:b9:79:fa:16:93:b3:cf:c2:28:a4:be:83:6e:
                    67:93:c4:f3:fc:b6:8b:eb:d2:12:11:83:09:c4:46:
                    ef:64:e3:98:5e:03:f6:e0:05:e9:84:fb:42:f9:dd:
                    8e:41:ec:53:44:10:c6:b2:39:dd:b9:c0:66:9a:bd:
                    eb:e0:68:4f:70:e9:60:be:dc:d6:e4:24:00:41:47:
                    9d:b5:26:84:b2:32:05:c1:c9:e1:e4:b0:29:5e:b1:
                    a6:57:34:b7:a7:a0:cf:6b:e2:a6:54:31:21:ec:07:
                    35:ce:d9:ea:78:79:81:67:4b:0e:a1:75:de:05:2d:
                    91:02:53:18:5b:c3:78:8b:ea:a8:fd:d4:1d:cf:18:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:F8:45:70:7A:6B:4F:1F:E2:5B:94:5E:50:A9:7A:D0:47:B0:A2
            X509v3 Authority Key Identifier:
                keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32322d3232203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:11:90:68:c0:ba:71:82:1b:f8:5c:bd:7b:1b:39:f8:04:
         36:42:33:95:53:9a:6b:5b:9d:85:df:cf:35:13:08:c3:39:da:
         ef:e4:61:d9:40:33:8c:d4:c4:aa:e3:3f:48:12:39:c4:78:21:
         65:61:b2:ff:b5:9a:18:2e:ab:96:19:d1:72:e8:9a:44:62:66:
         bd:c1:43:71:78:f0:84:64:90:e7:2a:c7:3c:5c:7e:78:b6:d8:
         35:7a:69:13:ab:c8:0e:99:76:ab:6f:44:9c:a7:2e:e1:28:59:
         a5:5b:cb:30:d6:03:3c:1e:50:3d:bd:06:bc:81:2d:f6:09:b3:
         f3:c5:60:cf:f2:d2:be:02:5c:a8:74:4f:7d:6f:70:2e:9a:4a:
         40:3c:21:0c:8a:1f:e6:36:fe:9c:bc:38:54:7a:0f:60:9d:ff:
         1b:6f:53:ec:94:74:af:b9:81:cc:d1:60:59:e5:2b:b9:a9:83:
         92:72:6f:ea:7c:67:b3:ea:61:bf:54:3f:08:71:87:fb:08:b4:
         4e:7b:1b:5d:d7:16:2f:cf:ab:fd:cf:0f:63:6e:77:b0:e3:ef:
         b1:4e:9d:29:07:01:bc:6e:bf:da:88:95:51:62:c0:87:02:59:
         f6:99:7a:13:16:85:09:d8:f2:ce:5e:1d:d9:59:17:f4:ef:2a:
         e1:2b:13:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa+rtZNdG9WHaVmDadAYwzBBOTtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyQTBEQ0EyNUYzMDc2N0E2Q0NBNjkzMjRFRTIzNTZB
Qzc3NURFNzAeFw0yNDAyMDcxMjUzMzdaFw0yNTAyMDUxMjU4MzdaMDMxMTAvBgNV
BAMTKDI2NzhGODQ1NzA3QTZCNEYxRkUyNUI5NDVFNTBBOTdBRDA0N0IwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG74LQxUtiRRXfeWrGxMQGAj/A
jdQrpINW1royIyL1cGdylGldztdCtd/tV074olP6aImWVmq+Xl2KGI5fr70uU/oL
1Rboj70J4P09VeGvrVaFqjAtvrSAIqmJhn/bY0Z/8b1ngBKl5vyH08molJT5aCjM
CHMTy3SRuXn6FpOzz8IopL6DbmeTxPP8tovr0hIRgwnERu9k45heA/bgBemE+0L5
3Y5B7FNEEMayOd25wGaavevgaE9w6WC+3NbkJABBR521JoSyMgXByeHksClesaZX
NLenoM9r4qZUMSHsBzXO2ep4eYFnSw6hdd4FLZECUxhbw3iL6qj91B3PGO3PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJnj4RXB6a08f4luUXlCpetBHsKIwHwYDVR0j
BBgwFoAU9CoNyiXzB2emzKaTJO4jVqx3XecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFNVm5Rbmk5OXZ3QTdIcjZqV25ORXc0a1d0blQ0R1A5ZWZnWW5IbTVn
MlkvMC9GNDJBMERDQTI1RjMwNzY3QTZDQ0E2OTMyNEVFMjM1NkFDNzc1REU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0MkEwRENBMjVGMzA3NjdB
NkNDQTY5MzI0RUUyMzU2QUM3NzVERTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxTVZuUW5pOTl2d0E3SHI2alduTkV3NGtXdG5UNEdQOWVmZ1luSG01ZzJZLzAv
MzEzMzM4MmUzMTMxMzgyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMyMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop23DANBgkqhkiG9w0BAQsFAAOCAQEAplER
kGjAunGCG/hcvXsbOfgENkIzlVOaa1udhd/PNRMIwzna7+Rh2UAzjNTEquM/SBI5
xHghZWGy/7WaGC6rlhnRcuiaRGJmvcFDcXjwhGSQ5yrHPFx+eLbYNXppE6vIDpl2
q29EnKcu4ShZpVvLMNYDPB5QPb0GvIEt9gmz88Vgz/LSvgJcqHRPfW9wLppKQDwh
DIof5jb+nLw4VHoPYJ3/G29T7JR0r7mBzNFgWeUruamDknJv6nxns+phv1Q/CHGH
+wi0TnsbXdcWL8+r/c8PY253sOPvsU6dKQcBvG6/2oiVUWLAhwJZ9pl6ExaFCdjy
zl4d2VkX9O8q4SsTyg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:12 2025 by rpki-client