Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa
File:                     3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa (raw, json)
Hash identifier:          ni7C2M4n9aRp1D2eIDbSQFP4eNOD+VI7xOdNWeyHuDw=
Subject key identifier:   17:52:54:0D:BB:05:B1:49:9C:85:B5:D0:97:D2:42:7D:6A:AA:AA:C7
Certificate issuer:       /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial:       0FAD54DEF7999F91E7FF15534C8F34BEB6754B90
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa
Signing time:             Wed 07 Feb 2024 12:58:38 +0000
ROA not before:           Wed 07 Feb 2024 12:53:38 +0000
ROA not after:            Wed 05 Feb 2025 12:58:38 +0000
asID:                     264273
IP address blocks:        138.118.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ad:54:de:f7:99:9f:91:e7:ff:15:53:4c:8f:34:be:b6:75:4b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
        Validity
            Not Before: Feb  7 12:53:38 2024 GMT
            Not After : Feb  5 12:58:38 2025 GMT
        Subject: CN=1752540DBB05B1499C85B5D097D2427D6AAAAAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:00:12:99:d9:ea:1b:8b:72:5d:e6:90:1c:
                    47:ce:6d:2e:94:d8:c9:5e:32:a6:f3:22:8d:bc:0c:
                    2b:b0:5a:54:3c:92:26:20:19:4e:53:a7:31:80:aa:
                    36:4c:89:1a:92:0a:d6:5b:e9:8f:4d:92:ec:4a:64:
                    49:9c:69:3c:9b:e8:47:67:6b:85:5f:d8:68:e1:3b:
                    db:7a:c0:86:98:10:e1:b1:da:b9:cb:68:60:3d:80:
                    be:ec:96:26:13:9f:dc:d8:5b:21:9f:25:07:47:51:
                    be:f0:99:73:6a:10:d2:af:18:19:90:c2:d0:c6:3d:
                    f8:53:98:59:3d:bc:23:0c:23:da:1c:d3:3d:e3:27:
                    11:58:bd:6d:b6:81:9e:c5:0d:5b:9d:a5:c2:37:1b:
                    f1:22:24:b7:43:11:b1:9e:9c:54:fe:8c:4f:d0:1a:
                    a5:1e:0f:da:2b:94:33:65:e3:d8:87:89:48:e3:ef:
                    7c:29:6e:cb:c4:de:4f:92:18:23:1d:bf:6d:ab:99:
                    7d:f9:8b:1d:01:12:10:d1:e0:51:47:1d:e8:5a:a9:
                    53:3c:c5:d8:3f:ef:dc:b5:63:15:3b:72:b1:aa:2b:
                    42:56:32:45:cf:02:b1:2b:4d:12:c6:71:c7:df:52:
                    42:14:21:8b:d0:9f:eb:0e:d0:6b:e2:f8:89:29:d7:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:54:0D:BB:05:B1:49:9C:85:B5:D0:97:D2:42:7D:6A:AA:AA:C7
            X509v3 Authority Key Identifier:
                keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232302e302f32342d3234203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2c:4c:43:f9:98:9e:31:f6:bb:c7:76:28:ed:b8:b7:b1:92:
         3c:b9:27:a6:97:28:4f:d8:02:52:7a:09:0a:a4:48:30:54:d0:
         1d:b9:8e:e8:ad:58:34:5e:54:ca:de:4e:1f:38:3c:c9:0b:05:
         76:6e:d5:5c:b1:1f:a5:d1:34:db:a3:39:67:98:eb:ea:01:0c:
         f7:e8:d8:44:7d:d6:e6:7f:5f:1b:83:5a:64:63:3f:1a:75:2e:
         33:aa:81:4c:05:d2:a8:e8:9f:9e:54:26:7f:aa:60:77:f4:76:
         e8:17:f7:bf:25:4e:e4:55:a6:5e:0c:8a:89:b1:08:f2:ed:b9:
         b9:fd:52:12:90:0d:5e:1d:80:7c:80:9f:a7:67:a9:09:ad:46:
         2b:ab:a6:e4:ca:ee:1f:85:3e:fc:ed:50:7f:14:a3:12:3e:53:
         76:47:82:fb:96:46:f1:55:8a:a1:14:d5:8d:9a:a9:32:5a:43:
         e5:72:57:59:b3:61:f2:d0:de:9e:69:c8:37:cc:bb:a1:5c:b8:
         85:6f:e0:b0:52:5f:8a:37:63:b3:1a:1a:31:0f:8c:ca:7d:07:
         42:ff:b2:e9:58:b1:dd:65:6c:b4:aa:2f:f5:9c:74:89:08:f0:
         cb:17:6e:ee:77:06:2e:dc:08:a2:da:f7:69:ca:45:a3:6c:20:
         40:72:b5:77
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD61U3veZn5Hn/xVTTI80vrZ1S5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyQTBEQ0EyNUYzMDc2N0E2Q0NBNjkzMjRFRTIzNTZB
Qzc3NURFNzAeFw0yNDAyMDcxMjUzMzhaFw0yNTAyMDUxMjU4MzhaMDMxMTAvBgNV
BAMTKDE3NTI1NDBEQkIwNUIxNDk5Qzg1QjVEMDk3RDI0MjdENkFBQUFBQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cwASmdnqG4tyXeaQHEfObS6U
2MleMqbzIo28DCuwWlQ8kiYgGU5TpzGAqjZMiRqSCtZb6Y9NkuxKZEmcaTyb6Edn
a4Vf2GjhO9t6wIaYEOGx2rnLaGA9gL7sliYTn9zYWyGfJQdHUb7wmXNqENKvGBmQ
wtDGPfhTmFk9vCMMI9oc0z3jJxFYvW22gZ7FDVudpcI3G/EiJLdDEbGenFT+jE/Q
GqUeD9orlDNl49iHiUjj73wpbsvE3k+SGCMdv22rmX35ix0BEhDR4FFHHehaqVM8
xdg/79y1YxU7crGqK0JWMkXPArErTRLGccffUkIUIYvQn+sO0Gvi+Ikp15ldAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUF1JUDbsFsUmchbXQl9JCfWqqqscwHwYDVR0j
BBgwFoAU9CoNyiXzB2emzKaTJO4jVqx3XecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFNVm5Rbmk5OXZ3QTdIcjZqV25ORXc0a1d0blQ0R1A5ZWZnWW5IbTVn
MlkvMC9GNDJBMERDQTI1RjMwNzY3QTZDQ0E2OTMyNEVFMjM1NkFDNzc1REU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0MkEwRENBMjVGMzA3NjdB
NkNDQTY5MzI0RUUyMzU2QUM3NzVERTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxTVZuUW5pOTl2d0E3SHI2alduTkV3NGtXdG5UNEdQOWVmZ1luSG01ZzJZLzAv
MzEzMzM4MmUzMTMxMzgyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp23DANBgkqhkiG9w0BAQsFAAOCAQEAgSxM
Q/mYnjH2u8d2KO24t7GSPLknppcoT9gCUnoJCqRIMFTQHbmO6K1YNF5Uyt5OHzg8
yQsFdm7VXLEfpdE026M5Z5jr6gEM9+jYRH3W5n9fG4NaZGM/GnUuM6qBTAXSqOif
nlQmf6pgd/R26Bf3vyVO5FWmXgyKibEI8u25uf1SEpANXh2AfICfp2epCa1GK6um
5MruH4U+/O1QfxSjEj5TdkeC+5ZG8VWKoRTVjZqpMlpD5XJXWbNh8tDenmnIN8y7
oVy4hW/gsFJfijdjsxoaMQ+Myn0HQv+y6Vix3WVstKov9Zx0iQjwyxdu7ncGLtwI
otr3acpFo2wgQHK1dw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:07 2025 by rpki-client