Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3232203d3e20323634333932.roa
File:                     3133312e3136312e3138382e302f32322d3232203d3e20323634333932.roa (raw, json)
Hash identifier:          M/48txUroaojFlOfNpfrXOrllRhG98c1Z0Xu/pdbG1U=
Subject key identifier:   1E:EF:78:A2:91:22:8B:8F:61:40:66:16:B3:FC:A7:0F:51:9F:71:94
Certificate issuer:       /CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
Certificate serial:       0C92DEA6AF45D1AB0CB301C13F1FFD8B8E744342
Authority key identifier: FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3232203d3e20323634333932.roa
Signing time:             Tue 05 Mar 2024 16:51:51 +0000
ROA not before:           Tue 05 Mar 2024 16:46:51 +0000
ROA not after:            Tue 04 Mar 2025 16:51:51 +0000
asID:                     264392
IP address blocks:        131.161.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:92:de:a6:af:45:d1:ab:0c:b3:01:c1:3f:1f:fd:8b:8e:74:43:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Validity
            Not Before: Mar  5 16:46:51 2024 GMT
            Not After : Mar  4 16:51:51 2025 GMT
        Subject: CN=1EEF78A291228B8F61406616B3FCA70F519F7194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:e9:42:0c:63:01:ad:17:1d:54:db:99:ae:
                    2c:6b:15:93:bc:09:ae:af:d3:48:20:fe:d0:28:91:
                    fa:3f:23:ef:ab:03:59:ed:c6:94:23:c1:27:a6:27:
                    b2:d3:f4:c6:47:d6:f8:4e:fe:2e:25:da:09:16:ab:
                    f3:65:ec:df:03:e1:2f:e7:70:a2:d1:de:bf:c3:27:
                    f6:f6:dd:0a:ce:e1:b6:77:e1:ce:8e:d2:98:da:ab:
                    74:a7:20:c3:55:c7:66:33:be:90:22:87:17:38:ca:
                    d3:97:05:0b:33:3b:ef:c9:1b:e2:ed:2d:b8:98:9d:
                    e1:d3:96:2d:12:8c:c0:41:9d:b1:20:c2:56:0b:48:
                    ec:59:af:aa:af:e0:bd:8e:d3:32:44:d9:47:24:1f:
                    2b:55:f9:1a:21:91:8b:e6:84:91:2f:ef:56:9e:26:
                    4f:fd:eb:8c:10:3e:69:b9:e7:02:58:7f:17:ab:50:
                    22:0f:6f:d9:d3:5a:30:b6:c1:af:7b:8f:0f:87:8f:
                    33:49:06:9a:4a:f4:44:91:e8:c6:31:30:5b:4d:20:
                    17:df:a2:19:db:9b:84:c3:50:56:10:5d:38:2b:4d:
                    d7:f3:38:67:25:e9:b0:11:5a:05:17:22:d8:ef:72:
                    a3:ee:38:c2:b9:60:f0:62:14:6d:80:61:c7:a8:e6:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:78:A2:91:22:8B:8F:61:40:66:16:B3:FC:A7:0F:51:9F:71:94
            X509v3 Authority Key Identifier:
                keyid:FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/3133312e3136312e3138382e302f32322d3232203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:7e:fb:12:97:7e:c6:ba:90:0e:f6:f8:d9:2d:aa:55:45:
         cb:60:fb:b8:4a:03:d2:63:75:d3:d5:15:a4:38:a3:99:e0:04:
         99:99:d2:e1:af:2b:e8:94:bc:7d:26:13:35:c0:8d:7b:0c:1d:
         7b:d7:e0:66:ae:67:fb:c7:54:38:12:4c:21:ac:e5:a0:e2:84:
         17:77:48:35:ba:31:6f:68:7d:c2:c5:e5:6f:db:4b:e5:35:2b:
         41:49:9d:70:8a:88:02:50:7e:4e:08:81:ff:06:39:14:ec:e1:
         6b:c1:29:fc:da:61:4b:0b:31:86:51:b1:eb:0e:74:41:1b:86:
         8e:76:12:92:74:72:f2:57:b1:55:44:8b:e9:a1:2a:01:fc:e7:
         22:df:7d:b9:f2:bf:08:3c:27:63:31:b9:d1:14:86:41:11:62:
         cf:8b:6a:e6:b3:74:25:d2:15:15:b4:c3:77:1c:f0:dc:e8:af:
         c5:6e:c4:56:bd:4c:f2:ab:c3:9a:14:0a:06:eb:4a:a6:f6:9c:
         c4:ed:3a:c8:6e:1b:3d:ba:aa:1d:dd:dc:11:fd:89:ae:94:82:
         64:7d:9f:da:c1:a5:23:c8:04:0e:2b:5f:ed:83:b9:0d:65:d5:
         73:4e:5c:72:0a:cf:65:b0:84:cb:23:af:f5:50:0f:f3:5c:75:
         e5:98:e9:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDJLepq9F0asMswHBPx/9i450Q0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNEN0U4MTM0QTU0QkM2OTAzOTg3OEZERDIzNjVDNDY2
Rjg2Qjk1RjAeFw0yNDAzMDUxNjQ2NTFaFw0yNTAzMDQxNjUxNTFaMDMxMTAvBgNV
BAMTKDFFRUY3OEEyOTEyMjhCOEY2MTQwNjYxNkIzRkNBNzBGNTE5RjcxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/elCDGMBrRcdVNuZrixrFZO8
Ca6v00gg/tAokfo/I++rA1ntxpQjwSemJ7LT9MZH1vhO/i4l2gkWq/Nl7N8D4S/n
cKLR3r/DJ/b23QrO4bZ34c6O0pjaq3SnIMNVx2YzvpAihxc4ytOXBQszO+/JG+Lt
LbiYneHTli0SjMBBnbEgwlYLSOxZr6qv4L2O0zJE2UckHytV+RohkYvmhJEv71ae
Jk/964wQPmm55wJYfxerUCIPb9nTWjC2wa97jw+HjzNJBppK9ESR6MYxMFtNIBff
ohnbm4TDUFYQXTgrTdfzOGcl6bARWgUXItjvcqPuOMK5YPBiFG2AYceo5rp3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHu94opEii49hQGYWs/ynD1GfcZQwHwYDVR0j
BBgwFoAU/NfoE0pUvGkDmHj90jZcRm+GuV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3VuVFZCem5tMkh1SE1wV2c4aFNFUmdxaWRmTGplODNOWEd2WndkNjZ6
REYvMC9GQ0Q3RTgxMzRBNTRCQzY5MDM5ODc4RkREMjM2NUM0NjZGODZCOTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZDRDdFODEzNEE1NEJDNjkw
Mzk4NzhGREQyMzY1QzQ2NkY4NkI5NUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd1blRWQnpubTJIdUhNcFdnOGhTRVJncWlkZkxqZTgzTlhHdlp3ZDY2ekRGLzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMzMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhvDANBgkqhkiG9w0BAQsFAAOCAQEAANJ+
+xKXfsa6kA72+NktqlVFy2D7uEoD0mN109UVpDijmeAEmZnS4a8r6JS8fSYTNcCN
ewwde9fgZq5n+8dUOBJMIazloOKEF3dINboxb2h9wsXlb9tL5TUrQUmdcIqIAlB+
TgiB/wY5FOzha8Ep/NphSwsxhlGx6w50QRuGjnYSknRy8lexVUSL6aEqAfznIt99
ufK/CDwnYzG50RSGQRFiz4tq5rN0JdIVFbTDdxzw3OivxW7EVr1M8qvDmhQKButK
pvacxO06yG4bPbqqHd3cEf2JrpSCZH2f2sGlI8gEDitf7YO5DWXVc05ccgrPZbCE
yyOv9VAP81x15Zjp0Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:42 2025 by rpki-client