Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e39322e302f32322d3234203d3e203533313335.roa
File:                     3133312e3232312e39322e302f32322d3234203d3e203533313335.roa (raw, json)
Hash identifier:          2XHNcZy3UCAWBzrDCaqFwb+vh+6xNC2HTbIZOWoXWvg=
Subject key identifier:   B9:3C:C5:54:F1:0F:3E:BC:6F:16:F9:1D:01:C3:F6:54:C7:66:A2:50
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       7D2FAE3DE149D26E6F253A9810BB056D97BF7B3F
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e39322e302f32322d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:19 +0000
ROA not before:           Sat 03 Feb 2024 12:48:19 +0000
ROA not after:            Sat 01 Feb 2025 12:53:19 +0000
asID:                     53135
IP address blocks:        131.221.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:ae:3d:e1:49:d2:6e:6f:25:3a:98:10:bb:05:6d:97:bf:7b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:19 2024 GMT
            Not After : Feb  1 12:53:19 2025 GMT
        Subject: CN=B93CC554F10F3EBC6F16F91D01C3F654C766A250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:f8:2e:1c:98:41:da:8e:11:36:d2:81:1c:
                    20:f6:0c:7d:b4:23:5b:83:03:4f:60:7c:32:b1:f6:
                    4a:e4:5d:1a:e6:7a:ec:89:cc:5e:a9:ab:dc:a9:12:
                    19:cf:01:c0:6c:80:fb:d0:01:cb:7d:a2:28:16:fb:
                    9d:66:aa:1b:7a:16:77:27:ab:39:97:b8:40:09:84:
                    70:7e:1d:37:fa:6a:96:8a:37:05:a9:7b:17:21:1b:
                    58:78:bb:88:42:9e:d8:e7:9b:af:a4:6e:b4:e6:f8:
                    5e:50:23:e3:fa:69:f8:18:12:eb:c2:e9:a0:bb:23:
                    c1:62:da:ac:eb:22:fc:31:c3:bd:39:4c:a5:2a:5b:
                    ce:ec:b6:9b:94:e6:d5:03:81:69:e9:24:78:00:1c:
                    8f:c2:45:dd:88:ab:f3:90:c9:be:90:fb:66:43:c4:
                    0d:73:e4:e9:32:e8:e4:bc:85:f3:9f:e4:3f:d8:9a:
                    14:6d:7b:62:54:d8:db:fa:11:d6:1f:f3:47:05:4d:
                    05:08:ec:27:a6:97:b9:d1:7a:9c:fd:6a:ad:8a:63:
                    ee:ad:51:ce:1f:7b:fd:65:b5:d0:87:c8:52:ce:4b:
                    84:2f:d4:68:40:61:32:9d:1c:fa:97:e8:c0:91:2a:
                    e0:f9:3d:e2:51:f1:58:12:7e:88:c8:ef:d0:23:c4:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3C:C5:54:F1:0F:3E:BC:6F:16:F9:1D:01:C3:F6:54:C7:66:A2:50
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3133312e3232312e39322e302f32322d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:11:36:6d:14:1d:2c:cd:df:9d:4c:45:de:75:b3:1a:df:
         ab:ba:20:84:d5:68:40:5f:be:47:6b:7e:a0:d9:f3:7c:24:a9:
         49:f5:4b:b4:33:3d:2e:54:24:1c:b4:1c:bb:35:4c:62:29:6f:
         bf:c8:e5:cc:d9:fd:24:2a:de:c6:0d:4e:76:1a:d1:64:d7:65:
         d7:fe:ba:2d:e8:eb:32:10:fa:2f:b6:00:04:b5:ee:79:6e:34:
         af:42:57:46:e2:2a:3d:39:bf:46:19:76:f6:7b:f1:5f:07:c9:
         02:0a:62:59:21:6b:ec:83:ff:96:c0:a1:93:57:cf:93:47:8a:
         3b:d8:6a:da:f7:81:5b:16:19:bb:17:b8:ff:b9:92:e2:5d:1e:
         6a:3c:59:c4:85:cc:a3:e8:cd:24:8a:f1:7e:46:49:ad:57:0d:
         6d:b0:e8:85:7b:54:d3:99:5f:05:00:7c:4f:b0:f2:25:38:aa:
         27:c5:92:34:be:92:55:4e:7b:4e:72:2e:d7:26:b0:e9:fe:14:
         8a:4e:de:c7:56:5c:41:55:0b:2d:11:db:7f:13:e9:50:aa:df:
         b0:c2:4b:06:af:65:a1:2c:5f:e1:ea:b8:6e:d7:2e:cb:df:da:
         63:e1:f2:1b:44:86:ac:6b:5a:36:fb:d1:e2:1f:cf:b8:2b:76:
         14:af:59:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfS+uPeFJ0m5vJTqYELsFbZe/ez8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDAyMDMxMjQ4MTlaFw0yNTAyMDExMjUzMTlaMDMxMTAvBgNV
BAMTKEI5M0NDNTU0RjEwRjNFQkM2RjE2RjkxRDAxQzNGNjU0Qzc2NkEyNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sPguHJhB2o4RNtKBHCD2DH20
I1uDA09gfDKx9krkXRrmeuyJzF6pq9ypEhnPAcBsgPvQAct9oigW+51mqht6Fncn
qzmXuEAJhHB+HTf6apaKNwWpexchG1h4u4hCntjnm6+kbrTm+F5QI+P6afgYEuvC
6aC7I8Fi2qzrIvwxw705TKUqW87stpuU5tUDgWnpJHgAHI/CRd2Iq/OQyb6Q+2ZD
xA1z5Oky6OS8hfOf5D/YmhRte2JU2Nv6EdYf80cFTQUI7Ceml7nRepz9aq2KY+6t
Uc4fe/1ltdCHyFLOS4Qv1GhAYTKdHPqX6MCRKuD5PeJR8VgSfojI79AjxA97AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuTzFVPEPPrxvFvkdAcP2VMdmolAwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3M3FZUFNLMkRXV2pDQmFtV2hOQzdyZ3JxaENRUEFqZEdIU2RDWm45VjZvLzAv
MzEzMzMxMmUzMjMyMzEyZTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg91cMA0GCSqGSIb3DQEBCwUAA4IBAQB9HhE2bRQd
LM3fnUxF3nWzGt+ruiCE1WhAX75Ha36g2fN8JKlJ9Uu0Mz0uVCQctBy7NUxiKW+/
yOXM2f0kKt7GDU52GtFk12XX/rot6OsyEPovtgAEte55bjSvQldG4io9Ob9GGXb2
e/FfB8kCCmJZIWvsg/+WwKGTV8+TR4o72Gra94FbFhm7F7j/uZLiXR5qPFnEhcyj
6M0kivF+RkmtVw1tsOiFe1TTmV8FAHxPsPIlOKonxZI0vpJVTntOci7XJrDp/hSK
Tt7HVlxBVQstEdt/E+lQqt+wwksGr2WhLF/h6rhu1y7L39pj4fIbRIasa1o2+9Hi
H8+4K3YUr1ma
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org