Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa
File:                     3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          kk/Xq0nnSz5oKvi1iMZo/aXltRqdBQaiFwatSNpkAd8=
Subject key identifier:   61:15:50:A6:0F:74:B4:8F:96:26:D1:D5:FD:04:A4:B4:35:0F:4A:00
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       5DA1E6E80DAF413A2FDB27838162DC723E82967A
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        131.108.166.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a1:e6:e8:0d:af:41:3a:2f:db:27:83:81:62:dc:72:3e:82:96:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=611550A60F74B48F9626D1D5FD04A4B4350F4A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:3c:1d:5e:ac:d9:61:7d:c8:e6:06:24:d0:
                    c6:7f:60:b8:ec:b3:22:fc:28:86:e3:f3:0f:4d:8f:
                    85:a1:33:98:dc:51:6d:97:00:20:11:7d:aa:9a:39:
                    96:6a:d7:9d:86:b8:ab:33:be:04:87:47:62:eb:56:
                    29:6e:0d:7c:76:f5:69:4d:6b:33:f6:7b:b9:b4:18:
                    6e:dd:68:7e:a3:3d:01:52:53:a6:35:aa:6a:80:f6:
                    ea:a1:a6:b3:39:d7:f1:cd:b0:4b:27:e0:ca:4d:e5:
                    d6:ee:a2:00:78:5c:fa:ec:66:1e:01:82:99:2c:b8:
                    82:38:e9:24:00:48:9d:59:4b:b8:8a:e8:48:d0:f1:
                    9d:b1:17:ab:26:5a:1f:8c:bc:b6:cd:a0:83:8e:eb:
                    51:c3:a9:53:57:b0:00:2c:49:3b:89:25:f8:c6:c3:
                    cd:db:3f:cb:21:61:af:9f:8f:77:a8:30:86:71:2c:
                    d0:71:15:1a:32:c8:6e:e1:60:d7:24:e9:b9:dd:d9:
                    07:5a:56:ab:6a:80:11:22:52:56:6c:88:15:c9:d1:
                    81:e0:ce:56:a1:f3:4f:ec:7f:82:c8:27:9c:46:ca:
                    68:de:d5:ff:bf:e7:d1:13:5c:87:15:87:5a:dc:74:
                    3c:66:db:1b:6a:4c:8d:ec:8c:a2:28:58:cf:cb:15:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:15:50:A6:0F:74:B4:8F:96:26:D1:D5:FD:04:A4:B4:35:0F:4A:00
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133312e3130382e3136362e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:10:38:3f:19:fc:1c:ee:a5:3a:df:a7:22:65:ec:1a:91:5d:
         e5:a6:61:c3:44:f8:f4:0c:9b:f1:2a:74:e2:2a:59:30:99:db:
         d5:44:62:85:04:b6:f9:5c:dc:91:26:53:fb:74:d4:fa:c2:03:
         48:f1:b3:a5:0b:81:77:e6:02:4d:77:9c:f2:51:cc:98:87:ea:
         8e:d1:69:32:2a:b8:e8:87:55:54:18:b6:84:00:27:8f:ed:e1:
         75:bb:03:7a:99:79:a6:7a:98:c0:89:ce:e3:8f:4a:ea:fd:3c:
         74:87:f9:3f:65:e6:7c:4e:74:0f:72:7a:1b:46:ab:c4:dc:6a:
         e2:05:05:95:fa:0c:cf:c5:ec:2f:6c:6e:3a:6b:b9:37:f3:3b:
         ca:99:53:0a:c9:93:c5:f9:b8:44:65:b0:24:5b:a6:7d:59:0c:
         42:5e:fd:bb:00:7a:61:7f:a7:3a:88:3f:3d:66:70:4b:1e:8d:
         7b:71:a5:5e:5e:14:86:20:99:0c:03:3b:89:10:3c:00:73:84:
         37:83:b3:d6:5a:12:82:b7:f5:63:f3:83:65:e1:91:69:c0:a4:
         42:4a:0e:7e:7a:cd:e7:23:48:01:53:ff:b9:4b:5e:23:d3:55:
         90:e6:2e:6a:28:f5:62:9e:ee:9f:c6:51:7b:95:0e:cc:6f:f5:
         94:6b:9e:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXaHm6A2vQTov2yeDgWLccj6ClnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwNTIyQjQ3MkY3MTIwNUJCQTRCMzI5NzUyNjg1ODE4
MTg2OTI4MTAeFw0yNDA0MDMyMTQxMTZaFw0yNTA0MDIyMTQ2MTZaMDMxMTAvBgNV
BAMTKDYxMTU1MEE2MEY3NEI0OEY5NjI2RDFENUZEMDRBNEI0MzUwRjRBMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMjwdXqzZYX3I5gYk0MZ/YLjs
syL8KIbj8w9Nj4WhM5jcUW2XACARfaqaOZZq152GuKszvgSHR2LrViluDXx29WlN
azP2e7m0GG7daH6jPQFSU6Y1qmqA9uqhprM51/HNsEsn4MpN5dbuogB4XPrsZh4B
gpksuII46SQASJ1ZS7iK6EjQ8Z2xF6smWh+MvLbNoIOO61HDqVNXsAAsSTuJJfjG
w83bP8shYa+fj3eoMIZxLNBxFRoyyG7hYNck6bnd2QdaVqtqgBEiUlZsiBXJ0YHg
zlah80/sf4LIJ5xGymje1f+/59ETXIcVh1rcdDxm2xtqTI3sjKIoWM/LFSeTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYRVQpg90tI+WJtHV/QSktDUPSgAwHwYDVR0j
BBgwFoAUeAUitHL3EgW7pLMpdSaFgYGGkoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMS83ODA1MjJCNDcyRjcxMjA1QkJBNEIzMjk3NTI2ODU4MTgxODY5MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MDUyMkI0NzJGNzEyMDVC
QkE0QjMyOTc1MjY4NTgxODE4NjkyODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDbKYwDQYJKoZIhvcNAQELBQADggEBADYQOD8Z
/BzupTrfpyJl7BqRXeWmYcNE+PQMm/EqdOIqWTCZ29VEYoUEtvlc3JEmU/t01PrC
A0jxs6ULgXfmAk13nPJRzJiH6o7RaTIquOiHVVQYtoQAJ4/t4XW7A3qZeaZ6mMCJ
zuOPSur9PHSH+T9l5nxOdA9yehtGq8TcauIFBZX6DM/F7C9sbjpruTfzO8qZUwrJ
k8X5uERlsCRbpn1ZDEJe/bsAemF/pzqIPz1mcEsejXtxpV5eFIYgmQwDO4kQPABz
hDeDs9ZaEoK39WPzg2XhkWnApEJKDn56zecjSAFT/7lLXiPTVZDmLmoo9WKe7p/G
UXuVDsxv9ZRrnro=
-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org