Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          lWpcAWpHg1d8OJuo22K4ZWt5AzXcXrAVb8fliGKetA8=
Subject key identifier:   47:08:2A:FD:23:0F:82:73:1E:9B:A3:53:8C:9C:DE:BE:59:42:FE:15
Certificate issuer:       /CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
Certificate serial:       525E897A0C509DBE349C09425F37ACFD52C9532E
Authority key identifier: AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
Signing time:             Thu 18 Jan 2024 19:48:12 +0000
ROA not before:           Thu 18 Jan 2024 19:43:12 +0000
ROA not after:            Thu 16 Jan 2025 19:48:12 +0000
asID:                     265425
IP address blocks:        168.195.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:89:7a:0c:50:9d:be:34:9c:09:42:5f:37:ac:fd:52:c9:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E
        Validity
            Not Before: Jan 18 19:43:12 2024 GMT
            Not After : Jan 16 19:48:12 2025 GMT
        Subject: CN=47082AFD230F82731E9BA3538C9CDEBE5942FE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:c5:57:b0:6c:7e:94:44:ed:94:85:b8:50:
                    36:1a:c7:ea:1e:3a:da:47:83:ef:a1:13:16:11:7e:
                    e8:d7:e3:58:cf:10:7f:dd:56:25:69:fc:04:ce:92:
                    7c:ab:2b:b4:0a:5e:bc:89:ac:52:80:80:80:5e:73:
                    c4:4c:a1:78:f2:60:a7:b8:46:3a:c6:95:cf:e7:84:
                    e3:ec:df:64:b1:87:22:f6:9c:df:8a:d2:bb:72:bc:
                    63:b8:9c:bf:49:44:b3:a2:f3:2d:c7:ea:f5:fd:6c:
                    11:f9:08:e5:95:d6:8d:98:e3:65:b3:95:c8:de:ba:
                    29:39:3e:6c:16:13:08:fd:70:a4:7a:d2:28:63:b9:
                    2b:ed:67:b6:f9:eb:e3:04:4c:66:fc:cc:93:ed:c2:
                    2a:94:40:77:be:bc:f7:72:51:17:6b:97:1b:c8:6f:
                    13:7f:52:6b:c7:d8:69:fa:02:2d:db:18:d8:2b:f3:
                    a6:70:81:cd:42:aa:4c:75:b6:89:47:8f:d6:11:66:
                    48:16:4c:56:85:2b:82:89:cf:38:f3:d6:67:45:9b:
                    6d:6a:ad:4d:44:22:72:fd:44:c4:4a:3d:94:05:76:
                    89:89:c6:86:f6:a2:f0:fe:64:fc:e2:03:e7:7a:f9:
                    39:a1:20:1e:cd:a7:50:a5:12:e2:59:d4:d5:98:46:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:2A:FD:23:0F:82:73:1E:9B:A3:53:8C:9C:DE:BE:59:42:FE:15
            X509v3 Authority Key Identifier:
                keyid:AE:BE:4A:8C:0B:91:8A:62:DC:00:B5:C6:39:1F:F5:B6:DD:E2:9A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AEBE4A8C0B918A62DC00B5C6391FF5B6DDE29A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/1/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:39:4a:59:fd:86:b9:90:b1:45:37:2a:75:3c:b4:6a:3c:
         1f:7d:dc:3b:af:2a:02:be:6f:56:2b:4f:ba:a1:88:db:81:b4:
         c1:59:95:08:0e:a8:d6:d0:91:ef:2e:8f:ca:b8:c7:04:1b:d6:
         04:96:a8:13:c9:2c:b0:39:58:9f:57:c5:56:3f:86:e7:f7:60:
         b8:11:ef:bc:ba:98:83:c2:1c:5d:8d:bf:77:e4:83:39:3b:1a:
         73:9e:00:cb:62:e1:99:c4:3c:86:6c:27:ca:ca:88:fe:54:ad:
         27:4e:64:1a:e8:59:92:47:e5:5b:d0:c4:da:05:59:67:38:7d:
         20:93:a8:bb:5d:d8:de:43:d6:ba:af:73:11:5d:63:77:cc:3b:
         2d:f4:81:64:a6:f4:b7:5b:ee:0d:4f:77:bb:c3:b0:9f:96:6c:
         69:1c:a8:ef:91:eb:d9:9e:30:c8:3c:d1:99:bc:f6:bb:31:44:
         cb:33:8e:8c:e4:11:7f:8e:be:5f:92:18:ab:78:9d:ec:bf:02:
         f5:b4:4c:fb:80:28:65:e9:fd:c6:fb:a2:bb:f3:8f:d7:36:f2:
         d8:58:28:a8:c9:90:cc:94:f7:a0:03:a1:a7:12:e0:ac:1b:60:
         43:6f:dc:7e:af:0b:83:97:8c:78:84:c9:90:3a:8d:63:11:8f:
         69:26:30:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUl6JegxQnb40nAlCXzes/VLJUy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCRTRBOEMwQjkxOEE2MkRDMDBCNUM2MzkxRkY1QjZE
REUyOUEwRTAeFw0yNDAxMTgxOTQzMTJaFw0yNTAxMTYxOTQ4MTJaMDMxMTAvBgNV
BAMTKDQ3MDgyQUZEMjMwRjgyNzMxRTlCQTM1MzhDOUNERUJFNTk0MkZFMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAsVXsGx+lETtlIW4UDYax+oe
OtpHg++hExYRfujX41jPEH/dViVp/ATOknyrK7QKXryJrFKAgIBec8RMoXjyYKe4
RjrGlc/nhOPs32SxhyL2nN+K0rtyvGO4nL9JRLOi8y3H6vX9bBH5COWV1o2Y42Wz
lcjeuik5PmwWEwj9cKR60ihjuSvtZ7b56+METGb8zJPtwiqUQHe+vPdyURdrlxvI
bxN/UmvH2Gn6Ai3bGNgr86Zwgc1Cqkx1tolHj9YRZkgWTFaFK4KJzzjz1mdFm21q
rU1EInL9RMRKPZQFdomJxob2ovD+ZPziA+d6+TmhIB7Np1ClEuJZ1NWYRpQNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURwgq/SMPgnMem6NTjJzevllC/hUwHwYDVR0j
BBgwFoAUrr5KjAuRimLcALXGOR/1tt3img4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVXMVM1RnNhTUhpNE5vWjlGeVF1S3lpeU14Q3VQZzZVeGlQNng1QTdV
NGgvMS9BRUJFNEE4QzBCOTE4QTYyREMwMEI1QzYzOTFGRjVCNkRERTI5QTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FFQkU0QThDMEI5MThBNjJE
QzAwQjVDNjM5MUZGNUI2RERFMjlBMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFVzFTNUZzYU1IaTROb1o5RnlRdUt5aXlNeEN1UGc2VXhpUDZ4NUE3VTRoLzEv
MzEzNjM4MmUzMTM5MzUyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzNDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowx8wDQYJKoZIhvcNAQELBQADggEBAJGsOUpZ
/Ya5kLFFNyp1PLRqPB993DuvKgK+b1YrT7qhiNuBtMFZlQgOqNbQke8uj8q4xwQb
1gSWqBPJLLA5WJ9XxVY/huf3YLgR77y6mIPCHF2Nv3fkgzk7GnOeAMti4ZnEPIZs
J8rKiP5UrSdOZBroWZJH5VvQxNoFWWc4fSCTqLtd2N5D1rqvcxFdY3fMOy30gWSm
9Ldb7g1Pd7vDsJ+WbGkcqO+R69meMMg80Zm89rsxRMszjozkEX+Ovl+SGKt4ney/
AvW0TPuAKGXp/cb7orvzj9c28thYKKjJkMyU96ADoacS4KwbYENv3H6vC4OXjHiE
yZA6jWMRj2kmMBc=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org