Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136392e302f32342d3234203d3e20323634343337.roa
File:                     3133312e3232312e3136392e302f32342d3234203d3e20323634343337.roa (raw, json)
Hash identifier:          N5lDc8r38kfcNhOEW3tL2LxEKLg8P4SBoJ60sHLSEx0=
Subject key identifier:   4E:7F:23:5D:6F:56:FB:E8:4B:7E:6F:55:81:6E:A8:A5:F8:69:3B:3A
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       129022C7CB9A7D258545C4004618A90ED0F9774B
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136392e302f32342d3234203d3e20323634343337.roa
Signing time:             Thu 21 Sep 2023 11:25:34 +0000
ROA not before:           Thu 21 Sep 2023 11:20:34 +0000
ROA not after:            Thu 19 Sep 2024 11:25:34 +0000
asID:                     264437
IP address blocks:        131.221.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:90:22:c7:cb:9a:7d:25:85:45:c4:00:46:18:a9:0e:d0:f9:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Sep 21 11:20:34 2023 GMT
            Not After : Sep 19 11:25:34 2024 GMT
        Subject: CN=4E7F235D6F56FBE84B7E6F55816EA8A5F8693B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:ac:61:0d:39:31:a5:ac:52:60:b5:63:6d:
                    6c:38:1a:25:7a:60:ee:68:90:c7:b8:74:b0:71:8b:
                    8b:6f:ba:99:2c:9e:8a:a5:27:9f:77:84:a5:a3:e5:
                    11:66:3a:1b:13:2e:8b:c4:ec:0f:5b:35:66:06:14:
                    d3:42:d8:a8:7e:d1:a4:0c:d9:04:0a:a6:a1:22:08:
                    ae:82:4a:95:e4:6c:51:97:36:f4:63:42:34:e7:7b:
                    4d:56:c7:6f:c8:7e:18:bd:7c:82:30:a5:0c:80:e0:
                    5d:19:e0:de:2f:9a:f7:a6:91:59:10:26:02:88:d8:
                    79:47:d8:9c:14:f1:d3:f4:29:54:6e:04:84:14:bc:
                    d4:c0:c0:6c:d6:3b:ef:03:b3:00:ec:ba:cd:95:50:
                    9e:8a:bc:75:4e:96:97:52:a0:84:f6:73:15:e6:80:
                    99:01:03:8e:20:ef:12:ff:35:3d:be:48:be:20:d2:
                    6c:d6:db:86:00:42:56:0b:56:d4:37:d7:40:2c:b5:
                    a0:cc:a6:ab:96:90:d9:eb:0c:89:78:da:3e:e2:10:
                    fa:69:d9:e2:f5:56:ae:b2:7e:87:25:20:f8:f1:33:
                    81:e8:b4:32:6a:01:45:59:db:72:d1:b9:81:2e:2c:
                    41:63:ed:1a:f6:2e:ef:a3:3e:2f:a5:f1:76:c3:17:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:23:5D:6F:56:FB:E8:4B:7E:6F:55:81:6E:A8:A5:F8:69:3B:3A
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136392e302f32342d3234203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:bc:b4:71:9d:fd:37:f6:4a:eb:cf:54:80:f6:e4:d4:1b:20:
         97:e4:38:01:19:3c:f2:d3:1f:f9:7f:fc:43:61:0e:6e:28:ce:
         5a:47:73:68:9b:f4:ea:7d:72:97:a0:e4:ed:ea:8a:0d:6c:96:
         de:b5:18:5a:e4:b7:bf:02:83:8e:e1:25:23:e6:50:14:31:43:
         0e:74:dd:02:c0:ba:35:ed:ca:db:01:75:ba:ca:ad:9c:3a:64:
         dd:b3:b3:3d:bb:80:37:f8:7f:d3:ef:26:1f:76:ae:cd:42:2d:
         bb:56:4c:75:e8:ba:fc:9e:f2:c7:c1:b8:9d:d0:a2:5f:08:9b:
         cd:e2:d8:6f:c2:4e:2e:5c:3d:36:aa:53:74:5a:f9:14:cd:e2:
         40:1b:60:2d:c2:02:76:05:38:53:86:e1:e6:33:85:3c:bf:59:
         69:9d:65:b9:bf:32:f7:b3:28:94:e1:85:38:47:f0:a4:34:5e:
         68:48:25:2c:9f:d3:93:9c:cf:57:da:83:5e:97:fc:9e:17:94:
         ff:21:97:1e:48:8f:35:d4:5c:2a:b8:39:ad:e8:26:36:25:41:
         29:b0:49:9d:b5:a7:d4:b7:a3:f2:78:53:13:90:23:dd:86:89:
         f7:3e:cd:dc:96:96:0b:42:d0:87:ce:17:49:7b:1b:06:da:e1:
         a7:90:8a:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEpAix8uafSWFRcQARhipDtD5d0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBNTU4MzZFNjUyNTk2M0EzNjFFRUUwN0MwQzdGOEZB
NkI4Q0IxNDAeFw0yMzA5MjExMTIwMzRaFw0yNDA5MTkxMTI1MzRaMDMxMTAvBgNV
BAMTKDRFN0YyMzVENkY1NkZCRTg0QjdFNkY1NTgxNkVBOEE1Rjg2OTNCM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7KxhDTkxpaxSYLVjbWw4GiV6
YO5okMe4dLBxi4tvupksnoqlJ593hKWj5RFmOhsTLovE7A9bNWYGFNNC2Kh+0aQM
2QQKpqEiCK6CSpXkbFGXNvRjQjTne01Wx2/Ifhi9fIIwpQyA4F0Z4N4vmvemkVkQ
JgKI2HlH2JwU8dP0KVRuBIQUvNTAwGzWO+8DswDsus2VUJ6KvHVOlpdSoIT2cxXm
gJkBA44g7xL/NT2+SL4g0mzW24YAQlYLVtQ310AstaDMpquWkNnrDIl42j7iEPpp
2eL1Vq6yfoclIPjxM4HotDJqAUVZ23LRuYEuLEFj7Rr2Lu+jPi+l8XbDF/ABAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTn8jXW9W++hLfm9VgW6opfhpOzowHwYDVR0j
BBgwFoAUSqVYNuZSWWOjYe7gfAx/j6a4yxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJt
TDcvMC80QUE1NTgzNkU2NTI1OTYzQTM2MUVFRTA3QzBDN0Y4RkE2QjhDQjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQTU1ODM2RTY1MjU5NjNB
MzYxRUVFMDdDMEM3RjhGQTZCOENCMTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVS2dxV2FzWVdjV2NrRTNkMVpBTm1MN0VUVU5tSzhmeXM0S051UlVCbUw3LzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdqTANBgkqhkiG9w0BAQsFAAOCAQEAF7y0
cZ39N/ZK689UgPbk1Bsgl+Q4ARk88tMf+X/8Q2EObijOWkdzaJv06n1yl6Dk7eqK
DWyW3rUYWuS3vwKDjuElI+ZQFDFDDnTdAsC6Ne3K2wF1usqtnDpk3bOzPbuAN/h/
0+8mH3auzUItu1ZMdei6/J7yx8G4ndCiXwibzeLYb8JOLlw9NqpTdFr5FM3iQBtg
LcICdgU4U4bh5jOFPL9ZaZ1lub8y97MolOGFOEfwpDReaEglLJ/Tk5zPV9qDXpf8
nheU/yGXHkiPNdRcKrg5regmNiVBKbBJnbWn1Lej8nhTE5Aj3YaJ9z7N3JaWC0LQ
h84XSXsbBtrhp5CKkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org