Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa
File:                     3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa (raw, json)
Hash identifier:          JiilxOPB9gk/7Xsha68RXEIFGblDl4tiZvKYCw+2wuo=
Subject key identifier:   44:A6:C0:16:CB:75:92:2C:77:0E:33:85:75:A3:8F:15:CA:57:AB:D9
Certificate issuer:       /CN=B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8
Certificate serial:       729BA0A036C248CE847070B135F31693EA7B9934
Authority key identifier: B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa
Signing time:             Thu 04 Apr 2024 07:43:10 +0000
ROA not before:           Thu 04 Apr 2024 07:38:10 +0000
ROA not after:            Thu 03 Apr 2025 07:43:10 +0000
asID:                     61686
IP address blocks:        131.100.232.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:a0:a0:36:c2:48:ce:84:70:70:b1:35:f3:16:93:ea:7b:99:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8
        Validity
            Not Before: Apr  4 07:38:10 2024 GMT
            Not After : Apr  3 07:43:10 2025 GMT
        Subject: CN=44A6C016CB75922C770E338575A38F15CA57ABD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:a6:fb:c8:92:11:21:15:ba:27:e3:8c:e0:
                    2c:49:05:6b:37:41:ef:e0:bf:ca:87:73:d3:80:82:
                    27:1a:02:41:4a:ea:51:d2:f9:74:f8:59:94:16:8e:
                    29:51:c8:2d:6a:b7:1c:f3:cc:a1:f4:cb:76:f6:83:
                    8b:38:c2:93:18:ed:d1:97:e0:a3:31:58:8d:7f:c3:
                    0c:8d:44:c0:4e:11:26:36:02:e3:a5:26:b0:b7:27:
                    51:d3:c2:3c:2f:a6:f9:25:59:4e:44:57:6b:95:39:
                    39:67:08:3d:b7:26:db:2a:9c:d3:67:3e:58:d0:10:
                    38:53:eb:71:99:0c:39:b7:75:e7:cf:c5:03:bf:24:
                    8d:09:ab:f1:22:8d:19:16:1e:95:b4:6e:a9:4a:60:
                    7d:7d:26:91:bb:b2:46:87:93:93:b7:a3:ff:42:c5:
                    41:1a:bc:ad:7a:74:99:7d:a2:c3:76:10:2d:76:54:
                    02:33:5e:d6:0a:4a:94:b9:33:99:3e:6a:45:01:ae:
                    90:4e:40:ce:3b:9c:b2:30:6a:5c:a5:7c:ee:09:45:
                    68:bc:f5:2f:51:a3:5b:11:94:7c:ce:64:c4:87:87:
                    10:4f:03:16:99:f0:c2:bf:6f:81:ff:40:8b:29:12:
                    97:7b:71:c9:29:6b:0c:20:14:9c:14:48:f2:64:b8:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:C0:16:CB:75:92:2C:77:0E:33:85:75:A3:8F:15:CA:57:AB:D9
            X509v3 Authority Key Identifier:
                keyid:B9:E7:9F:5B:48:E5:CE:50:2B:6B:62:B2:BE:BF:13:7D:A3:01:C0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E79F5B48E5CE502B6B62B2BEBF137DA301C0D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/1/3133312e3130302e3233322e302f32322d3332203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:42:11:d7:54:ce:84:e7:01:e3:7b:21:31:71:12:43:dc:
         6a:1d:69:23:af:be:ae:bf:83:ba:ed:32:09:96:91:0d:5f:32:
         ba:b8:32:ea:2e:01:1a:f7:49:d9:f3:ea:b4:d9:b2:94:15:8a:
         42:c8:23:b5:6c:a4:9c:70:c5:b5:06:91:e6:ce:1b:d5:b8:3f:
         88:20:2a:39:e3:0d:60:78:b3:d5:5e:ca:e5:e7:e0:36:d2:02:
         ca:8c:78:ca:d8:a3:57:2e:e5:bf:f4:53:de:24:19:f5:6d:dc:
         47:46:93:57:73:ab:a1:a1:16:f1:c2:00:00:d8:ae:dc:13:29:
         b2:3c:dd:af:be:c7:f4:31:f2:7f:fb:82:d0:5e:b5:ea:5d:0a:
         3e:1d:f2:ec:e9:20:cd:c8:a1:08:94:44:8a:60:60:44:b2:a5:
         c2:0e:24:d6:5a:86:1f:07:f7:49:86:10:09:0d:eb:cf:68:9a:
         50:d5:d5:43:ab:06:90:68:ff:1b:83:81:b0:87:73:17:01:0b:
         49:c5:39:85:69:fe:81:33:ec:c9:e8:20:15:02:6d:a7:da:6e:
         49:51:0b:ba:47:eb:68:62:4c:8c:ac:05:3d:c6:ec:11:bd:99:
         f1:cb:09:e9:b8:b6:da:be:82:8c:1e:50:a7:e7:8f:b6:36:94:
         a3:4d:32:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcpugoDbCSM6EcHCxNfMWk+p7mTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFNzlGNUI0OEU1Q0U1MDJCNkI2MkIyQkVCRjEzN0RB
MzAxQzBEODAeFw0yNDA0MDQwNzM4MTBaFw0yNTA0MDMwNzQzMTBaMDMxMTAvBgNV
BAMTKDQ0QTZDMDE2Q0I3NTkyMkM3NzBFMzM4NTc1QTM4RjE1Q0E1N0FCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYqb7yJIRIRW6J+OM4CxJBWs3
Qe/gv8qHc9OAgicaAkFK6lHS+XT4WZQWjilRyC1qtxzzzKH0y3b2g4s4wpMY7dGX
4KMxWI1/wwyNRMBOESY2AuOlJrC3J1HTwjwvpvklWU5EV2uVOTlnCD23JtsqnNNn
PljQEDhT63GZDDm3defPxQO/JI0Jq/EijRkWHpW0bqlKYH19JpG7skaHk5O3o/9C
xUEavK16dJl9osN2EC12VAIzXtYKSpS5M5k+akUBrpBOQM47nLIwalylfO4JRWi8
9S9Ro1sRlHzOZMSHhxBPAxaZ8MK/b4H/QIspEpd7cckpawwgFJwUSPJkuNanAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURKbAFst1kix3DjOFdaOPFcpXq9kwHwYDVR0j
BBgwFoAUueefW0jlzlAra2Kyvr8TfaMBwNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2RXU2tmVEFjQk4xREFBYTdWbjdBYXkzenZzclQxam5TUVlEYVM5ZXhW
OGcvMS9COUU3OUY1QjQ4RTVDRTUwMkI2QjYyQjJCRUJGMTM3REEzMDFDMEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RTc5RjVCNDhFNUNFNTAy
QjZCNjJCMkJFQkYxMzdEQTMwMUMwRDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdkV1NrZlRBY0JOMURBQWE3Vm43QWF5M3p2c3JUMWpuU1FZRGFTOWV4VjhnLzEv
MzEzMzMxMmUzMTMwMzAyZTMyMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNjM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZOgwDQYJKoZIhvcNAQELBQADggEBACOyQhHX
VM6E5wHjeyExcRJD3GodaSOvvq6/g7rtMgmWkQ1fMrq4MuouARr3Sdnz6rTZspQV
ikLII7VspJxwxbUGkebOG9W4P4ggKjnjDWB4s9VeyuXn4DbSAsqMeMrYo1cu5b/0
U94kGfVt3EdGk1dzq6GhFvHCAADYrtwTKbI83a++x/Qx8n/7gtBetepdCj4d8uzp
IM3IoQiURIpgYESypcIOJNZahh8H90mGEAkN689omlDV1UOrBpBo/xuDgbCHcxcB
C0nFOYVp/oEz7MnoIBUCbafabklRC7pH62hiTIysBT3G7BG9mfHLCem4ttq+gowe
UKfnj7Y2lKNNMgo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org