Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32342d3234203d3e20323634343337.roa
File:                     3133312e3232312e3137302e302f32342d3234203d3e20323634343337.roa (raw, json)
Hash identifier:          HQGf9FiWrKYUqIpuZ+mn+PVDW6En54/k7pco4xboo9M=
Subject key identifier:   D9:93:D6:A0:F3:72:11:14:45:AF:A3:84:3E:BA:F7:7B:12:1D:C8:A9
Certificate issuer:       /CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
Certificate serial:       62D9054CDF1F23A0311CC9071038F32FEDDC6A03
Authority key identifier: 4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32342d3234203d3e20323634343337.roa
Signing time:             Thu 21 Sep 2023 11:25:35 +0000
ROA not before:           Thu 21 Sep 2023 11:20:35 +0000
ROA not after:            Thu 19 Sep 2024 11:25:35 +0000
asID:                     264437
IP address blocks:        131.221.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d9:05:4c:df:1f:23:a0:31:1c:c9:07:10:38:f3:2f:ed:dc:6a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AA55836E6525963A361EEE07C0C7F8FA6B8CB14
        Validity
            Not Before: Sep 21 11:20:35 2023 GMT
            Not After : Sep 19 11:25:35 2024 GMT
        Subject: CN=D993D6A0F372111445AFA3843EBAF77B121DC8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:ca:0d:9f:71:fe:a6:4d:ce:d3:f0:6d:c3:
                    e0:c9:ad:60:7d:72:bb:38:a7:9d:cc:95:86:a3:54:
                    df:1c:a6:8b:22:b5:68:70:3b:f9:7d:8e:95:98:03:
                    67:ff:57:15:01:b3:8d:59:7a:53:00:d0:ea:0b:8c:
                    a0:f7:da:d3:e6:94:45:3e:00:1f:01:1e:5d:2a:61:
                    6a:32:17:de:d8:db:77:58:8b:7c:b6:db:5b:ec:66:
                    c0:9f:6c:22:58:28:de:22:20:10:89:41:0c:27:41:
                    10:28:35:2c:be:20:ea:65:79:00:bb:cb:0d:60:e3:
                    ae:eb:44:ad:a2:01:1a:a1:84:6f:7d:68:17:53:eb:
                    14:a2:4f:2a:7a:61:e5:51:7a:0a:21:87:09:25:68:
                    e1:da:32:7a:72:b6:1c:79:7a:14:8c:e6:20:ab:d7:
                    2f:7a:d5:7e:09:1a:c4:74:9a:ee:0a:7d:9c:de:f7:
                    80:a9:94:4a:3c:9b:51:76:cc:35:6f:f6:8f:8d:72:
                    40:9a:6c:52:80:6e:ea:56:2b:30:d6:b1:4e:9a:e3:
                    f7:ac:a5:c9:e5:07:c4:bc:7d:aa:7a:c9:57:8e:dc:
                    a9:59:3e:dc:84:b2:05:87:24:9c:b3:0d:10:94:f9:
                    3a:90:24:cb:9a:1f:c6:db:67:6f:16:a3:94:16:36:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:93:D6:A0:F3:72:11:14:45:AF:A3:84:3E:BA:F7:7B:12:1D:C8:A9
            X509v3 Authority Key Identifier:
                keyid:4A:A5:58:36:E6:52:59:63:A3:61:EE:E0:7C:0C:7F:8F:A6:B8:CB:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AA55836E6525963A361EEE07C0C7F8FA6B8CB14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3137302e302f32342d3234203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:fc:07:08:8d:24:e8:01:54:dc:ec:f2:59:92:65:04:3c:
         47:0a:4c:99:16:29:32:85:35:71:cf:c7:ec:e0:21:e2:8e:3f:
         e3:b4:5a:16:24:ff:3c:0a:93:81:52:ae:dc:17:08:e9:2a:0f:
         0e:4d:46:57:2d:46:d4:2c:f2:36:10:68:1c:a4:be:07:c3:46:
         33:ca:9f:b4:a5:28:ca:31:f1:78:04:0e:68:35:bd:2b:c8:2d:
         4d:37:75:2c:9d:f9:50:f0:76:95:c5:65:97:f2:52:b0:69:77:
         67:0b:65:d7:c2:35:34:95:ae:08:fb:31:88:f1:c3:cb:d8:72:
         f8:f7:b3:ae:22:62:cc:3e:d1:ad:20:38:2f:cf:42:d4:f1:83:
         87:98:b6:69:70:50:cb:a8:a5:64:db:ef:8d:36:3b:32:b1:ef:
         98:78:24:4f:da:45:40:a9:a0:1b:83:b6:e3:4b:20:d7:d3:3d:
         a7:40:7e:b0:fa:cb:5e:63:78:90:4c:4d:40:10:f7:a2:65:d5:
         40:5f:f8:f1:2d:b1:40:89:3a:e5:da:3b:2d:e3:04:7e:b3:09:
         00:b7:d9:94:3c:11:ad:7a:25:b2:b9:5a:57:f6:55:3b:84:69:
         29:91:6b:46:38:b3:e7:5e:cc:06:fb:29:59:99:15:a3:3b:86:
         f5:dd:f8:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYtkFTN8fI6AxHMkHEDjzL+3cagMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBNTU4MzZFNjUyNTk2M0EzNjFFRUUwN0MwQzdGOEZB
NkI4Q0IxNDAeFw0yMzA5MjExMTIwMzVaFw0yNDA5MTkxMTI1MzVaMDMxMTAvBgNV
BAMTKEQ5OTNENkEwRjM3MjExMTQ0NUFGQTM4NDNFQkFGNzdCMTIxREM4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqEsoNn3H+pk3O0/Btw+DJrWB9
crs4p53MlYajVN8cpositWhwO/l9jpWYA2f/VxUBs41ZelMA0OoLjKD32tPmlEU+
AB8BHl0qYWoyF97Y23dYi3y221vsZsCfbCJYKN4iIBCJQQwnQRAoNSy+IOpleQC7
yw1g467rRK2iARqhhG99aBdT6xSiTyp6YeVRegohhwklaOHaMnpythx5ehSM5iCr
1y961X4JGsR0mu4KfZze94CplEo8m1F2zDVv9o+NckCabFKAbupWKzDWsU6a4/es
pcnlB8S8fap6yVeO3KlZPtyEsgWHJJyzDRCU+TqQJMuaH8bbZ28Wo5QWNuN1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2ZPWoPNyERRFr6OEPrr3exIdyKkwHwYDVR0j
BBgwFoAUSqVYNuZSWWOjYe7gfAx/j6a4yxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJt
TDcvMC80QUE1NTgzNkU2NTI1OTYzQTM2MUVFRTA3QzBDN0Y4RkE2QjhDQjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBQTU1ODM2RTY1MjU5NjNB
MzYxRUVFMDdDMEM3RjhGQTZCOENCMTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVS2dxV2FzWVdjV2NrRTNkMVpBTm1MN0VUVU5tSzhmeXM0S051UlVCbUw3LzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdqjANBgkqhkiG9w0BAQsFAAOCAQEAOSv8
BwiNJOgBVNzs8lmSZQQ8RwpMmRYpMoU1cc/H7OAh4o4/47RaFiT/PAqTgVKu3BcI
6SoPDk1GVy1G1CzyNhBoHKS+B8NGM8qftKUoyjHxeAQOaDW9K8gtTTd1LJ35UPB2
lcVll/JSsGl3Zwtl18I1NJWuCPsxiPHDy9hy+PezriJizD7RrSA4L89C1PGDh5i2
aXBQy6ilZNvvjTY7MrHvmHgkT9pFQKmgG4O240sg19M9p0B+sPrLXmN4kExNQBD3
omXVQF/48S2xQIk65do7LeMEfrMJALfZlDwRrXolsrlaV/ZVO4RpKZFrRjiz517M
BvspWZkVozuG9d34KA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org