Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3234203d3e203631373531.roa
File:                     3133312e37322e3235322e302f32322d3234203d3e203631373531.roa (raw, json)
Hash identifier:          T2ppxSbcSlnSF4640vkb+5skYblnkMlAyJxmjzbAy/s=
Subject key identifier:   67:5A:DC:00:39:16:6B:75:99:6A:DD:13:0E:28:C1:18:FB:46:9B:B2
Certificate issuer:       /CN=469A53B9F91A9A8071D2848E6D2024DF31F63E43
Certificate serial:       4E5611ACA29F69E0D8634851BF05941135881FA7
Authority key identifier: 46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3234203d3e203631373531.roa
Signing time:             Thu 20 Oct 2022 20:43:42 +0000
ROA not before:           Thu 20 Oct 2022 20:38:42 +0000
ROA not after:            Thu 19 Oct 2023 20:43:42 +0000
asID:                     61751
IP address blocks:        131.72.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:56:11:ac:a2:9f:69:e0:d8:63:48:51:bf:05:94:11:35:88:1f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469A53B9F91A9A8071D2848E6D2024DF31F63E43
        Validity
            Not Before: Oct 20 20:38:42 2022 GMT
            Not After : Oct 19 20:43:42 2023 GMT
        Subject: CN=675ADC0039166B75996ADD130E28C118FB469BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:72:83:9e:42:fc:0f:f0:b4:e4:7f:b5:e9:
                    e8:08:cc:16:e4:b4:fd:56:66:38:75:eb:2c:a4:01:
                    6c:d6:b5:05:da:a6:dd:49:7d:b1:76:2b:68:e0:52:
                    23:6b:a4:01:2c:2b:46:1e:ec:81:c5:0d:e9:69:ae:
                    bc:37:50:06:08:f2:2b:a4:55:f5:fc:14:c9:30:4a:
                    67:62:46:9d:74:ff:28:cf:72:43:04:02:78:c4:38:
                    67:df:92:cb:e7:7d:45:76:54:3a:27:8b:fc:ca:28:
                    cc:77:db:22:3d:bc:74:95:85:6f:3d:8a:78:59:b9:
                    2c:02:5e:ca:e4:f4:fd:07:c4:65:d1:ef:c1:7c:f6:
                    ab:b4:70:ec:13:15:09:b3:9e:91:8b:e3:95:fb:a1:
                    61:c7:14:cc:ed:22:44:96:c9:47:49:19:a5:09:3e:
                    2f:fa:79:d9:7e:69:26:ac:e6:b0:df:48:d2:fb:89:
                    56:2a:74:93:79:6b:ca:e8:6d:5c:96:aa:7c:0d:b7:
                    99:e1:f4:7d:cd:12:46:17:9a:e6:96:ec:7b:76:fc:
                    cd:fc:85:73:a8:ac:ca:8c:22:a6:1b:bc:ce:0a:98:
                    2a:5a:2b:78:c7:45:71:72:55:4e:f6:29:c7:60:f8:
                    e0:dc:8e:ba:14:02:37:3f:26:e0:93:09:c3:26:9b:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:DC:00:39:16:6B:75:99:6A:DD:13:0E:28:C1:18:FB:46:9B:B2
            X509v3 Authority Key Identifier:
                keyid:46:9A:53:B9:F9:1A:9A:80:71:D2:84:8E:6D:20:24:DF:31:F6:3E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/469A53B9F91A9A8071D2848E6D2024DF31F63E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3234203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:96:2d:24:b4:2a:94:53:f4:d1:d1:50:25:e8:8b:e2:38:7f:
         d4:9f:14:eb:38:c4:79:f3:f0:1a:69:55:37:15:63:2d:8b:a9:
         51:74:8f:eb:31:99:d4:07:9c:78:3f:6c:30:c0:c3:63:0d:37:
         39:12:ab:49:c6:46:a9:a7:99:58:f2:77:68:37:d3:27:db:57:
         2e:5b:76:2a:56:1d:27:4b:32:a1:59:88:8d:41:90:24:94:84:
         61:30:9a:1d:dc:30:f2:4e:5d:1c:9a:ed:4b:12:a1:2d:a4:b6:
         a3:b7:50:fe:6e:96:08:04:a6:75:65:d0:12:20:6f:b4:31:42:
         80:4e:70:38:a6:6e:64:d8:bf:b9:a2:2d:7d:0f:53:4f:fd:5c:
         54:66:53:4d:d2:6f:2e:f7:65:3a:44:1f:da:da:52:72:62:d0:
         8b:fb:71:8e:17:25:b0:a0:ec:ee:99:55:8c:21:26:42:85:a3:
         9c:c9:68:76:a2:10:63:e2:c0:f1:25:21:d1:b5:19:9c:3c:7a:
         cc:4c:a9:8c:f6:2d:5e:67:dd:48:36:ad:7a:46:d4:90:c0:32:
         47:7a:02:08:24:0e:22:49:67:f1:03:ea:4b:e7:aa:41:84:8d:
         0c:5f:33:9b:40:2b:2f:5f:9d:e4:f6:61:d9:ae:b9:6e:75:37:
         31:21:af:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTlYRrKKfaeDYY0hRvwWUETWIH6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY5QTUzQjlGOTFBOUE4MDcxRDI4NDhFNkQyMDI0REYz
MUY2M0U0MzAeFw0yMjEwMjAyMDM4NDJaFw0yMzEwMTkyMDQzNDJaMDMxMTAvBgNV
BAMTKDY3NUFEQzAwMzkxNjZCNzU5OTZBREQxMzBFMjhDMTE4RkI0NjlCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6XKDnkL8D/C05H+16egIzBbk
tP1WZjh16yykAWzWtQXapt1JfbF2K2jgUiNrpAEsK0Ye7IHFDelprrw3UAYI8iuk
VfX8FMkwSmdiRp10/yjPckMEAnjEOGffksvnfUV2VDoni/zKKMx32yI9vHSVhW89
inhZuSwCXsrk9P0HxGXR78F89qu0cOwTFQmznpGL45X7oWHHFMztIkSWyUdJGaUJ
Pi/6edl+aSas5rDfSNL7iVYqdJN5a8robVyWqnwNt5nh9H3NEkYXmuaW7Ht2/M38
hXOorMqMIqYbvM4KmCpaK3jHRXFyVU72Kcdg+ODcjroUAjc/JuCTCcMmm/K9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ1rcADkWa3WZat0TDijBGPtGm7IwHwYDVR0j
BBgwFoAURppTufkamoBx0oSObSAk3zH2PkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa
UFMvMC80NjlBNTNCOUY5MUE5QTgwNzFEMjg0OEU2RDIwMjRERjMxRjYzRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ2OUE1M0I5RjkxQTlBODA3
MUQyODQ4RTZEMjAyNERGMzFGNjNFNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0QTNNUEN3WDdKTDNqUUs5cjVkR0FpSHVvOVZTTWpLVE41TmdxazZ2WlBTLzAv
MzEzMzMxMmUzNzMyMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzczNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0j8MA0GCSqGSIb3DQEBCwUAA4IBAQAJli0ktCqU
U/TR0VAl6IviOH/UnxTrOMR58/AaaVU3FWMti6lRdI/rMZnUB5x4P2wwwMNjDTc5
EqtJxkapp5lY8ndoN9Mn21cuW3YqVh0nSzKhWYiNQZAklIRhMJod3DDyTl0cmu1L
EqEtpLajt1D+bpYIBKZ1ZdASIG+0MUKATnA4pm5k2L+5oi19D1NP/VxUZlNN0m8u
92U6RB/a2lJyYtCL+3GOFyWwoOzumVWMISZChaOcyWh2ohBj4sDxJSHRtRmcPHrM
TKmM9i1eZ91INq16RtSQwDJHegIIJA4iSWfxA+pL56pBhI0MXzObQCsvX53k9mHZ
rrludTcxIa++
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org