Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36322e302f32332d3233203d3e20323632333534.roa
File:                     3133312e3130302e36322e302f32332d3233203d3e20323632333534.roa (raw, json)
Hash identifier:          DdNz5hLBGr4l3RcdBW0FVN0HdwkrIJIxe9Yc1e2epyo=
Subject key identifier:   5A:B5:43:B9:FB:1B:9E:F7:CC:62:44:44:88:05:E6:56:9D:99:1A:62
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       02DCE02BB25811E8FD32A5EBC8043FF954AFE777
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36322e302f32332d3233203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:34 +0000
ROA not before:           Wed 06 Mar 2024 14:09:34 +0000
ROA not after:            Wed 05 Mar 2025 14:14:34 +0000
asID:                     262354
IP address blocks:        131.100.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dc:e0:2b:b2:58:11:e8:fd:32:a5:eb:c8:04:3f:f9:54:af:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:34 2024 GMT
            Not After : Mar  5 14:14:34 2025 GMT
        Subject: CN=5AB543B9FB1B9EF7CC6244448805E6569D991A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:48:43:37:75:b1:02:92:b3:b2:15:41:f7:
                    53:c4:a8:05:ed:cb:bd:be:56:b3:01:53:9e:c4:79:
                    fb:8a:51:3a:8f:a0:88:94:68:bc:c9:71:e8:da:00:
                    dc:2c:5e:40:d0:4d:82:8c:3e:48:05:0c:16:0e:26:
                    28:9f:2e:a7:d1:d4:e0:e5:5d:f2:07:ca:fb:29:74:
                    90:f9:3e:9a:e0:5b:66:00:b1:65:a4:d2:68:4e:34:
                    8c:78:45:7e:85:53:8f:56:d3:40:bf:f6:2a:d0:dc:
                    e5:ae:00:96:e7:7b:07:93:0d:db:de:55:20:f3:2a:
                    75:9b:8a:c4:00:dc:86:08:84:38:cf:ee:4d:85:16:
                    72:c3:0c:70:93:de:2e:73:aa:07:f3:66:91:a0:db:
                    44:c7:1d:8e:4c:00:cb:5b:9b:a9:9f:92:42:d3:5e:
                    e9:a4:0d:a8:0f:20:8d:37:8a:a1:1a:d6:84:c5:0b:
                    ea:86:d9:68:be:1d:99:49:53:9d:d2:fe:dc:aa:aa:
                    43:0b:32:9d:40:62:72:78:eb:4a:52:80:ee:22:74:
                    74:83:4a:9e:ff:da:fa:3e:c0:e1:f7:b6:26:e1:8d:
                    34:38:9a:41:f8:ea:3a:29:48:a7:36:2c:8b:49:d2:
                    51:44:73:f7:02:94:74:3d:d2:14:69:09:d1:8c:b7:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B5:43:B9:FB:1B:9E:F7:CC:62:44:44:88:05:E6:56:9D:99:1A:62
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133312e3130302e36322e302f32332d3233203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:83:56:9c:46:2d:4e:19:c5:1c:b1:76:64:5a:e5:b6:15:
         81:94:f3:b0:cb:83:55:92:9f:20:a9:2c:79:65:b2:ff:00:e8:
         4a:64:c5:07:bf:b5:e8:ae:ba:e3:ce:04:f7:70:61:fb:05:74:
         76:a9:35:9f:b4:53:2e:85:0d:ec:e6:78:4e:4c:cf:9b:86:a4:
         21:a4:69:0a:1d:f0:b4:43:ea:69:8a:33:70:31:d7:a9:84:fb:
         41:13:7c:a4:ae:80:25:69:19:fd:87:db:b2:fa:27:a2:63:0d:
         dd:a9:ac:35:fd:62:d3:54:ec:0f:c7:08:57:b7:c3:ec:f3:d2:
         01:95:45:2d:a5:f2:8e:43:02:f6:83:95:8c:e4:04:7d:1f:d6:
         65:c7:75:0a:2f:02:4b:2c:17:8d:9d:60:5c:85:c6:37:c6:70:
         da:99:c5:b6:37:c9:3c:6f:4c:6e:7a:42:dd:53:52:48:69:9b:
         d6:f2:0d:dd:56:22:de:c2:af:1e:20:00:06:fa:be:4f:ae:ec:
         e1:ef:fc:37:11:39:c9:76:04:8c:b5:2b:c1:f6:9f:ce:72:59:
         30:5f:a5:8d:a5:9f:c6:16:cc:97:f8:a9:69:ac:b2:64:83:2d:
         2e:8c:e4:7d:c8:e9:42:f2:1f:dd:27:4a:b9:4f:e2:4d:89:8f:
         86:e0:f8:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAtzgK7JYEej9MqXryAQ/+VSv53cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDAzMDYxNDA5MzRaFw0yNTAzMDUxNDE0MzRaMDMxMTAvBgNV
BAMTKDVBQjU0M0I5RkIxQjlFRjdDQzYyNDQ0NDg4MDVFNjU2OUQ5OTFBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4khDN3WxApKzshVB91PEqAXt
y72+VrMBU57EefuKUTqPoIiUaLzJcejaANwsXkDQTYKMPkgFDBYOJiifLqfR1ODl
XfIHyvspdJD5PprgW2YAsWWk0mhONIx4RX6FU49W00C/9irQ3OWuAJbneweTDdve
VSDzKnWbisQA3IYIhDjP7k2FFnLDDHCT3i5zqgfzZpGg20THHY5MAMtbm6mfkkLT
XumkDagPII03iqEa1oTFC+qG2Wi+HZlJU53S/tyqqkMLMp1AYnJ460pSgO4idHSD
Sp7/2vo+wOH3tibhjTQ4mkH46jopSKc2LItJ0lFEc/cClHQ90hRpCdGMt+xrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWrVDufsbnvfMYkREiAXmVp2ZGmIwHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzEzMzMxMmUzMTMwMzAyZTM2MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZD4wDQYJKoZIhvcNAQELBQADggEBAJP0g1ac
Ri1OGcUcsXZkWuW2FYGU87DLg1WSnyCpLHllsv8A6EpkxQe/teiuuuPOBPdwYfsF
dHapNZ+0Uy6FDezmeE5Mz5uGpCGkaQod8LRD6mmKM3Ax16mE+0ETfKSugCVpGf2H
27L6J6JjDd2prDX9YtNU7A/HCFe3w+zz0gGVRS2l8o5DAvaDlYzkBH0f1mXHdQov
AkssF42dYFyFxjfGcNqZxbY3yTxvTG56Qt1TUkhpm9byDd1WIt7Crx4gAAb6vk+u
7OHv/DcROcl2BIy1K8H2n85yWTBfpY2ln8YWzJf4qWmssmSDLS6M5H3I6ULyH90n
SrlP4k2Jj4bg+AI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:53:13 2025 by rpki-client