Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
File:                     3133312e302e3138302e302f32322d3234203d3e203631373037.roa (raw, json)
Hash identifier:          MoNg2d7K5aUn2zLJ/YgQ+QlcnvkyY48FSQkXR4Eo/Zo=
Subject key identifier:   8E:7B:76:22:45:5B:34:55:80:9D:5D:99:E5:9D:BB:F6:F3:D0:95:FE
Certificate issuer:       /CN=40D2B6BC49BE13D6C26168179BD8261A93CAEC30
Certificate serial:       2A54F0A7058DECAE97E11C777A3A587825EAC26C
Authority key identifier: 40:D2:B6:BC:49:BE:13:D6:C2:61:68:17:9B:D8:26:1A:93:CA:EC:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
Signing time:             Mon 11 Mar 2024 18:01:13 +0000
ROA not before:           Mon 11 Mar 2024 17:56:13 +0000
ROA not after:            Mon 10 Mar 2025 18:01:13 +0000
asID:                     61707
IP address blocks:        131.0.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:54:f0:a7:05:8d:ec:ae:97:e1:1c:77:7a:3a:58:78:25:ea:c2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D2B6BC49BE13D6C26168179BD8261A93CAEC30
        Validity
            Not Before: Mar 11 17:56:13 2024 GMT
            Not After : Mar 10 18:01:13 2025 GMT
        Subject: CN=8E7B7622455B3455809D5D99E59DBBF6F3D095FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:4d:60:29:6a:e4:d0:d3:3c:12:6a:28:d3:
                    0a:f4:b5:2b:e3:b2:ad:e5:dd:6e:b3:fe:18:80:59:
                    5f:59:20:20:43:90:f1:e9:9a:59:d3:6b:28:b0:46:
                    f3:1b:dc:13:7f:b0:b5:32:5d:a3:20:04:21:80:8b:
                    91:76:b3:c9:bd:7c:c4:a9:f3:42:a5:fb:e9:fe:9b:
                    54:a7:e5:76:b2:0c:aa:4d:82:2a:71:16:1d:54:fc:
                    41:96:59:b6:a8:45:99:2c:06:42:57:f6:7d:97:ea:
                    d3:ae:9e:38:6e:12:e7:8f:08:9b:94:ed:3f:4c:4e:
                    56:21:1b:0b:81:1a:11:3d:4d:d4:1e:1a:ec:f1:be:
                    4d:b0:cf:d4:51:41:8e:03:ed:e7:23:07:e0:e7:7a:
                    70:f8:fa:3a:87:09:b2:79:d4:95:2d:e8:87:19:a3:
                    44:91:ce:3b:47:15:bd:92:29:61:34:49:66:9d:18:
                    66:63:a0:d2:27:5e:c6:b0:90:d7:89:74:46:fe:96:
                    8c:13:a7:aa:eb:57:3e:39:8c:82:25:d3:ce:35:76:
                    43:30:bd:62:c8:e5:13:c7:60:00:2a:f8:6a:d5:a6:
                    93:9d:f4:98:68:d1:a2:15:49:0e:d2:18:65:d1:dd:
                    ce:a6:81:b6:33:39:d4:71:cd:d3:26:e4:33:c3:3e:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7B:76:22:45:5B:34:55:80:9D:5D:99:E5:9D:BB:F6:F3:D0:95:FE
            X509v3 Authority Key Identifier:
                keyid:40:D2:B6:BC:49:BE:13:D6:C2:61:68:17:9B:D8:26:1A:93:CA:EC:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40D2B6BC49BE13D6C26168179BD8261A93CAEC30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138302e302f32322d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:34:91:75:6a:c6:2f:43:0c:10:4b:3f:7b:2f:8d:9b:9e:
         9d:68:b9:88:fd:74:62:8a:a5:96:80:5e:dc:59:74:4d:7c:ea:
         0c:d7:06:a5:d0:1f:9a:ef:79:79:8b:c9:e7:c3:e3:1c:ab:8e:
         02:d7:7f:22:06:e5:f1:5a:50:3d:c8:4b:a8:2c:78:73:2f:87:
         a9:06:73:5b:3e:fc:b2:88:e0:b5:70:ef:3a:f2:91:ca:85:61:
         ef:49:73:fb:30:03:b2:23:25:9c:5c:d9:54:41:1d:b0:6e:21:
         3c:68:e9:17:14:7c:39:10:ca:93:01:5a:31:ca:a4:ae:15:1e:
         5b:32:70:8f:f7:5d:1a:7b:6b:33:f1:bd:92:a4:b6:9c:bc:2c:
         71:0b:e3:45:05:46:25:67:59:2b:27:08:e2:2c:15:07:63:39:
         18:14:78:ec:f3:59:c6:68:68:a2:75:4b:47:a1:3d:ba:07:af:
         c9:1e:ea:24:9f:23:38:bd:12:dc:e7:f0:11:86:d5:35:e1:fd:
         bb:ac:11:e7:40:01:0c:69:d7:5e:0d:72:64:5b:76:14:58:c4:
         96:e3:30:a8:71:7e:d1:e3:b6:85:81:e2:5f:32:f9:54:24:2a:
         1e:bc:8d:0e:33:15:11:ee:c4:e1:6d:2d:83:62:e6:4f:6b:44:
         be:8f:ee:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKlTwpwWN7K6X4Rx3ejpYeCXqwmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEMkI2QkM0OUJFMTNENkMyNjE2ODE3OUJEODI2MUE5
M0NBRUMzMDAeFw0yNDAzMTExNzU2MTNaFw0yNTAzMTAxODAxMTNaMDMxMTAvBgNV
BAMTKDhFN0I3NjIyNDU1QjM0NTU4MDlENUQ5OUU1OURCQkY2RjNEMDk1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHE1gKWrk0NM8Emoo0wr0tSvj
sq3l3W6z/hiAWV9ZICBDkPHpmlnTayiwRvMb3BN/sLUyXaMgBCGAi5F2s8m9fMSp
80Kl++n+m1Sn5XayDKpNgipxFh1U/EGWWbaoRZksBkJX9n2X6tOunjhuEuePCJuU
7T9MTlYhGwuBGhE9TdQeGuzxvk2wz9RRQY4D7ecjB+DnenD4+jqHCbJ51JUt6IcZ
o0SRzjtHFb2SKWE0SWadGGZjoNInXsawkNeJdEb+lowTp6rrVz45jIIl0841dkMw
vWLI5RPHYAAq+GrVppOd9Jho0aIVSQ7SGGXR3c6mgbYzOdRxzdMm5DPDPozXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUjnt2IkVbNFWAnV2Z5Z279vPQlf4wHwYDVR0j
BBgwFoAUQNK2vEm+E9bCYWgXm9gmGpPK7DAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2NUTGdKdDU1aGdKNTlncW15ekoyUEs4VkhER216TlV4UER1QjllS3pn
WHQvMC80MEQyQjZCQzQ5QkUxM0Q2QzI2MTY4MTc5QkQ4MjYxQTkzQ0FFQzMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQwRDJCNkJDNDlCRTEzRDZD
MjYxNjgxNzlCRDgyNjFBOTNDQUVDMzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjVExnSnQ1NWhnSjU5Z3FteXpKMlBLOFZIREdtek5VeFBEdUI5ZUt6Z1h0LzAv
MzEzMzMxMmUzMDJlMzEzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoMAtDANBgkqhkiG9w0BAQsFAAOCAQEAGzU0kXVqxi9D
DBBLP3svjZuenWi5iP10YoqlloBe3Fl0TXzqDNcGpdAfmu95eYvJ58PjHKuOAtd/
Igbl8VpQPchLqCx4cy+HqQZzWz78sojgtXDvOvKRyoVh70lz+zADsiMlnFzZVEEd
sG4hPGjpFxR8ORDKkwFaMcqkrhUeWzJwj/ddGntrM/G9kqS2nLwscQvjRQVGJWdZ
KycI4iwVB2M5GBR47PNZxmhoonVLR6E9ugevyR7qJJ8jOL0S3OfwEYbVNeH9u6wR
50ABDGnXXg1yZFt2FFjEluMwqHF+0eO2hYHiXzL5VCQqHryNDjMVEe7E4W0tg2Lm
T2tEvo/uZg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:21:06 2025 by rpki-client