Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
File:                     3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          cwyVH3Xl4x43Vl+WoAm+fu88Pqx7raDPtpKc+LzjsLc=
Subject key identifier:   3C:CA:17:6D:47:62:4B:1C:C7:B2:6F:E6:73:10:2D:95:5C:5B:C3:B1
Certificate issuer:       /CN=543EAEA9D1F4201E7F2216F8B72D16BC14FC1577
Certificate serial:       5206CA53CB8D085FB9A0406A1A0F25278539988B
Authority key identifier: 54:3E:AE:A9:D1:F4:20:1E:7F:22:16:F8:B7:2D:16:BC:14:FC:15:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa
Signing time:             Thu 03 Aug 2023 19:29:26 +0000
ROA not before:           Thu 03 Aug 2023 19:24:26 +0000
ROA not after:            Thu 01 Aug 2024 19:29:26 +0000
asID:                     262675
IP address blocks:        131.255.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:06:ca:53:cb:8d:08:5f:b9:a0:40:6a:1a:0f:25:27:85:39:98:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543EAEA9D1F4201E7F2216F8B72D16BC14FC1577
        Validity
            Not Before: Aug  3 19:24:26 2023 GMT
            Not After : Aug  1 19:29:26 2024 GMT
        Subject: CN=3CCA176D47624B1CC7B26FE673102D955C5BC3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:83:ba:2a:a9:56:b1:61:36:a4:9c:a7:4d:
                    6b:26:63:92:c8:93:42:ff:a0:2e:0d:52:ff:af:7a:
                    ad:f8:8c:4d:7c:54:fd:5d:95:c2:ae:eb:93:6d:c6:
                    be:52:6a:fb:ad:9b:ca:49:c9:59:7b:f0:de:26:52:
                    7e:b5:05:55:b6:a5:7c:fb:b5:60:ea:e2:fd:cc:3d:
                    41:81:7e:87:b4:87:76:85:ac:3b:96:42:71:a3:4c:
                    bf:50:50:c6:11:18:2a:ea:c4:c1:24:18:67:44:85:
                    76:3d:9f:f1:f5:0b:fa:39:46:c2:ea:b0:02:df:04:
                    d7:5d:8e:6b:37:2d:41:2d:5c:91:42:56:a2:56:1e:
                    0a:3b:7e:4a:a5:11:58:a0:85:56:fb:d4:89:f9:d4:
                    1e:b4:1b:82:35:cd:a9:0e:57:22:e7:03:c5:e8:b3:
                    e4:06:de:46:a4:ff:38:4d:5a:32:b8:53:5a:a2:e6:
                    9f:44:19:af:bb:d9:e2:bb:a9:a3:56:92:6c:27:a9:
                    3e:1a:3a:0c:ca:3e:9d:0c:d4:d2:ef:2c:76:a1:ba:
                    aa:2b:ea:ea:69:14:2f:dc:ff:6d:ae:20:a6:3a:b3:
                    f3:28:f6:d7:63:ac:90:ae:be:48:38:89:50:b6:76:
                    a0:40:eb:be:13:55:b2:51:b9:89:f1:dd:98:d6:24:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:17:6D:47:62:4B:1C:C7:B2:6F:E6:73:10:2D:95:5C:5B:C3:B1
            X509v3 Authority Key Identifier:
                keyid:54:3E:AE:A9:D1:F4:20:1E:7F:22:16:F8:B7:2D:16:BC:14:FC:15:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:09:ef:6f:e7:6e:4f:5b:27:ec:ab:35:25:95:fa:4d:0d:45:
         fe:9e:77:ec:35:56:12:0d:62:44:65:ac:a8:5b:8b:11:3f:9c:
         09:7b:36:7b:35:fb:b5:d7:87:b4:31:47:83:89:28:61:44:31:
         f1:5e:bf:3b:6c:6f:44:51:7c:e9:4b:4c:74:11:a1:17:4f:78:
         52:41:94:da:11:37:5c:41:09:72:61:73:0d:3e:b7:c5:a0:b7:
         58:f6:fc:9c:57:46:5d:0b:21:b0:1b:a7:c0:0a:cf:c8:08:e1:
         21:b4:26:6b:ea:b2:28:d6:86:10:e1:e7:00:27:8c:8c:ab:7d:
         25:61:f6:58:71:2b:6e:63:1d:88:82:34:d4:95:ba:f0:36:c6:
         c7:0f:1d:33:77:89:14:03:75:95:b1:8d:6d:9e:6e:ec:a6:5d:
         66:32:e6:b4:9f:e8:80:1f:4c:1a:aa:cb:ba:9c:b9:e8:25:98:
         cf:ff:f0:81:c5:7f:25:6f:bf:1b:29:3f:9f:a2:e2:28:9b:43:
         7d:7f:26:9a:fa:0d:ea:2d:24:ac:a5:fe:55:8a:33:e2:85:53:
         31:1a:7d:f9:97:1a:bf:9a:8f:cb:e2:d7:49:d0:d7:bc:50:d8:
         38:b8:d2:d5:64:e4:75:74:e9:e8:27:cd:6c:f2:9a:9d:ce:aa:
         7d:46:23:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUgbKU8uNCF+5oEBqGg8lJ4U5mIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzRUFFQTlEMUY0MjAxRTdGMjIxNkY4QjcyRDE2QkMx
NEZDMTU3NzAeFw0yMzA4MDMxOTI0MjZaFw0yNDA4MDExOTI5MjZaMDMxMTAvBgNV
BAMTKDNDQ0ExNzZENDc2MjRCMUNDN0IyNkZFNjczMTAyRDk1NUM1QkMzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uYO6KqlWsWE2pJynTWsmY5LI
k0L/oC4NUv+veq34jE18VP1dlcKu65Ntxr5Savutm8pJyVl78N4mUn61BVW2pXz7
tWDq4v3MPUGBfoe0h3aFrDuWQnGjTL9QUMYRGCrqxMEkGGdEhXY9n/H1C/o5RsLq
sALfBNddjms3LUEtXJFCVqJWHgo7fkqlEVighVb71In51B60G4I1zakOVyLnA8Xo
s+QG3kak/zhNWjK4U1qi5p9EGa+72eK7qaNWkmwnqT4aOgzKPp0M1NLvLHahuqor
6uppFC/c/22uIKY6s/Mo9tdjrJCuvkg4iVC2dqBA674TVbJRuYnx3ZjWJFs1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPMoXbUdiSxzHsm/mcxAtlVxbw7EwHwYDVR0j
BBgwFoAUVD6uqdH0IB5/Ihb4ty0WvBT8FXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr
dzIvMC81NDNFQUVBOUQxRjQyMDFFN0YyMjE2RjhCNzJEMTZCQzE0RkMxNTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0M0VBRUE5RDFGNDIwMUU3
RjIyMTZGOEI3MkQxNkJDMTRGQzE1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzAv
MzEzMzMxMmUzMjM1MzUyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/zQwDQYJKoZIhvcNAQELBQADggEBAJEJ72/n
bk9bJ+yrNSWV+k0NRf6ed+w1VhINYkRlrKhbixE/nAl7Nns1+7XXh7QxR4OJKGFE
MfFevztsb0RRfOlLTHQRoRdPeFJBlNoRN1xBCXJhcw0+t8Wgt1j2/JxXRl0LIbAb
p8AKz8gI4SG0JmvqsijWhhDh5wAnjIyrfSVh9lhxK25jHYiCNNSVuvA2xscPHTN3
iRQDdZWxjW2ebuymXWYy5rSf6IAfTBqqy7qcueglmM//8IHFfyVvvxspP5+i4iib
Q31/Jpr6DeotJKyl/lWKM+KFUzEaffmXGr+aj8vi10nQ17xQ2Di40tVk5HV06egn
zWzymp3Oqn1GI5Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org