Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136322e302f32342d3234203d3e20323634343334.roa
File:                     3133312e3232312e3136322e302f32342d3234203d3e20323634343334.roa (raw, json)
Hash identifier:          Xds01SICV7nITXOS2NC2EXPKak3TRJIVWYrZ6C3g2Jg=
Subject key identifier:   5A:8E:CD:6E:7C:2E:3D:FE:94:1C:B2:11:E8:9F:E2:70:87:EF:EE:C4
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       1BDE0EB32CEEAFCCBEAEEBBEDCF61F20488C3590
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136322e302f32342d3234203d3e20323634343334.roa
Signing time:             Wed 17 May 2023 14:32:18 +0000
ROA not before:           Wed 17 May 2023 14:27:18 +0000
ROA not after:            Wed 15 May 2024 14:32:18 +0000
asID:                     264434
IP address blocks:        131.221.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:de:0e:b3:2c:ee:af:cc:be:ae:eb:be:dc:f6:1f:20:48:8c:35:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 17 14:27:18 2023 GMT
            Not After : May 15 14:32:18 2024 GMT
        Subject: CN=5A8ECD6E7C2E3DFE941CB211E89FE27087EFEEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:01:c4:ab:5f:12:4e:25:a6:09:c0:b0:8d:
                    1d:26:10:67:82:26:00:c8:a2:82:51:0b:e1:8b:da:
                    9f:0f:05:ae:4a:5d:09:ea:e2:53:62:61:65:b9:01:
                    39:fc:5b:cc:5c:89:80:54:36:76:e1:63:fa:3c:0b:
                    5f:a8:16:5d:64:71:5b:97:ca:5c:db:cd:b5:13:05:
                    b1:50:25:8f:7d:80:2e:13:91:23:d8:1b:e9:e3:61:
                    22:cf:4e:a7:22:36:81:1a:50:ae:95:50:ad:70:8c:
                    19:83:56:a5:30:00:12:99:ff:90:d3:57:2f:c5:91:
                    b7:2e:89:17:f5:4e:5f:74:b5:8d:09:e2:4d:b3:99:
                    1e:fa:68:b7:3a:6f:c0:77:1e:c9:2d:01:3c:9f:35:
                    c8:ce:9d:1d:f7:ed:40:dd:a8:48:bf:f3:47:7f:76:
                    a7:3a:79:cd:e5:22:9e:b7:7f:c8:36:a9:24:51:40:
                    a8:d3:c8:ac:b0:f4:6a:1d:aa:d8:ea:03:dc:4b:6f:
                    8a:27:9e:67:fd:3d:bd:f1:6b:4a:73:3d:26:c0:72:
                    fe:94:72:58:9d:94:09:99:8e:05:9a:29:15:ed:6e:
                    67:ea:a2:a8:20:5d:ce:88:71:b9:66:cb:ae:93:ab:
                    57:67:3a:e1:f1:9b:7f:43:20:6b:3e:7a:c4:e6:e7:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:CD:6E:7C:2E:3D:FE:94:1C:B2:11:E8:9F:E2:70:87:EF:EE:C4
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/3133312e3232312e3136322e302f32342d3234203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:44:ca:e1:f5:16:ba:c7:63:b1:8d:71:ca:d0:d9:83:0e:
         6b:33:df:c1:67:75:1e:7f:c4:45:37:32:4f:ee:da:25:eb:2f:
         64:ce:1e:fd:3b:fc:ec:d7:ed:f7:3c:2b:23:c3:e0:be:9b:7d:
         64:d9:3d:05:1c:88:a3:1b:03:cf:e9:3a:a9:10:30:83:3f:a3:
         cd:58:54:57:23:a9:92:47:2b:96:d3:ce:15:9a:48:3f:19:db:
         33:50:9c:5a:ae:51:7b:b1:bb:49:e3:f0:5e:d4:a7:81:cc:c1:
         51:77:62:b6:a6:e4:b5:c1:6f:36:e3:c0:29:93:fd:53:34:dd:
         ce:cc:a3:c3:07:82:57:16:ad:43:cb:81:06:16:3c:db:fc:51:
         72:6d:2d:1d:7c:fb:6b:45:2d:b5:1d:15:cc:8a:61:28:e6:5c:
         81:cb:3c:27:b9:33:93:15:04:f1:0a:3f:40:5d:9f:59:28:ab:
         31:8e:bf:fa:bb:9b:09:3f:93:50:40:c4:9e:51:a4:a0:43:97:
         bd:06:fc:13:5d:4d:ae:3f:b4:b2:d1:f9:6a:df:28:20:7a:e0:
         99:41:b2:52:24:d0:71:e2:ff:af:a1:5e:0b:59:ce:f6:f2:55:
         06:54:77:ac:a9:92:d7:db:9b:25:72:79:5e:bb:78:da:b5:b1:
         40:f6:6f:5a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG94Osyzur8y+ruu+3PYfIEiMNZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzQjgzNzRDRUYwREEzOUQ4NzA4ODFBMDY3OUMwNUMw
NDBFNTE0NTAeFw0yMzA1MTcxNDI3MThaFw0yNDA1MTUxNDMyMThaMDMxMTAvBgNV
BAMTKDVBOEVDRDZFN0MyRTNERkU5NDFDQjIxMUU4OUZFMjcwODdFRkVFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9QHEq18STiWmCcCwjR0mEGeC
JgDIooJRC+GL2p8PBa5KXQnq4lNiYWW5ATn8W8xciYBUNnbhY/o8C1+oFl1kcVuX
ylzbzbUTBbFQJY99gC4TkSPYG+njYSLPTqciNoEaUK6VUK1wjBmDVqUwABKZ/5DT
Vy/FkbcuiRf1Tl90tY0J4k2zmR76aLc6b8B3HsktATyfNcjOnR337UDdqEi/80d/
dqc6ec3lIp63f8g2qSRRQKjTyKyw9GodqtjqA9xLb4onnmf9Pb3xa0pzPSbAcv6U
clidlAmZjgWaKRXtbmfqoqggXc6Icblmy66Tq1dnOuHxm39DIGs+esTm55+hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWo7NbnwuPf6UHLIR6J/icIfv7sQwHwYDVR0j
BBgwFoAUWjuDdM7w2jnYcIgaBnnAXAQOUUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZkcUJlNWN5Q1g3ZXFoOWI5ZFJyaWZ5Wll1NldxUENyelp3NEJMVGJD
Q0cvMC81QTNCODM3NENFRjBEQTM5RDg3MDg4MUEwNjc5QzA1QzA0MEU1MTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBM0I4Mzc0Q0VGMERBMzlE
ODcwODgxQTA2NzlDMDVDMDQwRTUxNDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGZHFCZTVjeUNYN2VxaDliOWRScmlmeVpZdTZXcVBDcnpadzRCTFRiQ0NHLzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdojANBgkqhkiG9w0BAQsFAAOCAQEAa2tE
yuH1FrrHY7GNccrQ2YMOazPfwWd1Hn/ERTcyT+7aJesvZM4e/Tv87Nft9zwrI8Pg
vpt9ZNk9BRyIoxsDz+k6qRAwgz+jzVhUVyOpkkcrltPOFZpIPxnbM1CcWq5Re7G7
SePwXtSngczBUXditqbktcFvNuPAKZP9UzTdzsyjwweCVxatQ8uBBhY82/xRcm0t
HXz7a0UttR0VzIphKOZcgcs8J7kzkxUE8Qo/QF2fWSirMY6/+rubCT+TUEDEnlGk
oEOXvQb8E11Nrj+0stH5at8oIHrgmUGyUiTQceL/r6FeC1nO9vJVBlR3rKmS19ub
JXJ5Xrt42rWxQPZvWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org