Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3232203d3e20323637333838.roa
File:                     3133312e3139362e34302e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          0/sXRQ9S9qgdzhsL/IATGZy+23xMkX0aQpHVSXhd348=
Subject key identifier:   24:74:31:2D:6D:BA:CE:A2:D7:85:D1:56:C7:1C:B2:C3:69:FA:75:85
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       7C7DE097FB1F2360721D25BF8710BD581B1F9440
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3232203d3e20323637333838.roa
Signing time:             Mon 13 Nov 2023 19:11:51 +0000
ROA not before:           Mon 13 Nov 2023 19:06:51 +0000
ROA not after:            Mon 11 Nov 2024 19:11:51 +0000
asID:                     267388
IP address blocks:        131.196.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7d:e0:97:fb:1f:23:60:72:1d:25:bf:87:10:bd:58:1b:1f:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:06:51 2023 GMT
            Not After : Nov 11 19:11:51 2024 GMT
        Subject: CN=2474312D6DBACEA2D785D156C71CB2C369FA7585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:12:c1:5e:62:24:1a:d3:de:db:21:16:43:
                    ac:64:3b:bd:b3:2b:20:6e:b7:9e:34:ab:c4:24:4b:
                    55:75:fc:c8:12:f1:de:52:f2:8e:35:7a:30:58:ca:
                    3d:62:1b:0d:76:97:4b:22:f0:ab:c2:41:ed:37:23:
                    ec:c2:d4:b5:b4:d7:de:33:df:d1:aa:5c:7a:7e:10:
                    55:16:bc:08:ad:9f:9a:3c:bb:fe:81:fd:92:9f:5e:
                    8f:5a:7a:27:4e:7f:a8:9b:9d:46:3d:bb:68:a4:aa:
                    4b:89:6d:6d:92:67:5a:5a:65:aa:6e:68:92:66:1e:
                    d2:be:e0:e5:82:9e:17:13:91:e4:36:99:68:74:d3:
                    94:56:db:5d:3b:4b:14:38:a9:33:f9:06:99:48:c0:
                    1e:c6:c8:c7:02:63:ab:22:d7:4f:50:98:a5:7a:7f:
                    d9:37:10:5d:80:e2:03:d7:e1:8a:94:36:35:59:30:
                    9a:74:9f:ee:c0:15:20:34:74:69:99:f4:ec:a3:40:
                    74:d8:14:69:89:1a:df:ab:29:a8:89:46:d2:61:5f:
                    74:e4:d5:ab:2a:83:74:18:05:79:a7:c9:b7:78:f7:
                    04:36:5a:89:8a:45:32:0e:38:84:78:f1:57:49:b1:
                    f9:7f:06:25:9b:ee:80:92:eb:d5:27:90:f5:1c:57:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:31:2D:6D:BA:CE:A2:D7:85:D1:56:C7:1C:B2:C3:69:FA:75:85
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133312e3139362e34302e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:79:36:c1:7b:02:a9:9a:19:72:05:5c:d5:b9:b8:88:f5:6d:
         aa:de:8c:dc:1a:6b:90:5b:4f:7b:d9:49:a1:a2:c6:a0:49:48:
         28:dc:c2:9b:b3:cd:11:75:7b:23:ab:ec:79:3c:e2:60:0c:d3:
         c2:0e:67:b3:71:6d:27:a2:ae:66:e2:a5:a1:ed:b3:44:4e:20:
         8a:47:bf:e9:c0:27:3a:15:02:79:78:d3:ca:ff:71:ee:0c:73:
         b7:b8:0f:f7:3e:8c:5c:a3:4d:af:65:b5:13:e4:aa:70:54:f8:
         2f:c1:69:90:c3:b2:2b:31:ef:ba:6a:52:ae:64:92:98:08:66:
         c1:37:c9:28:bd:39:db:38:18:f7:a4:3a:8d:a4:d7:51:bf:c6:
         82:7b:e5:e9:cd:8f:6d:38:85:69:23:99:23:21:64:87:79:36:
         b2:f6:ff:7a:5b:b4:4a:c7:bb:ad:50:5d:4c:7e:c0:90:1a:80:
         4f:e0:13:eb:83:46:52:3e:5a:f5:ae:a7:da:71:36:ac:0a:80:
         a6:1f:3c:68:bb:be:a9:d5:9a:a0:dc:8c:b6:bf:b0:22:6a:f8:
         0c:72:95:f0:a0:88:cc:75:28:27:cb:0c:63:06:bc:ff:e2:0e:
         71:d9:e1:56:b2:2d:28:33:a9:7c:d8:dd:89:a0:5b:13:cb:a1:
         c4:2d:02:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfH3gl/sfI2ByHSW/hxC9WBsflEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDMDE1MjQ4NTMyQkNFMzk1OUY3MzA5Mjc0OUZERTE2
NDkzNDQwMjAeFw0yMzExMTMxOTA2NTFaFw0yNDExMTExOTExNTFaMDMxMTAvBgNV
BAMTKDI0NzQzMTJENkRCQUNFQTJENzg1RDE1NkM3MUNCMkMzNjlGQTc1ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ERLBXmIkGtPe2yEWQ6xkO72z
KyBut540q8QkS1V1/MgS8d5S8o41ejBYyj1iGw12l0si8KvCQe03I+zC1LW0194z
39GqXHp+EFUWvAitn5o8u/6B/ZKfXo9aeidOf6ibnUY9u2ikqkuJbW2SZ1paZapu
aJJmHtK+4OWCnhcTkeQ2mWh005RW2107SxQ4qTP5BplIwB7GyMcCY6si109QmKV6
f9k3EF2A4gPX4YqUNjVZMJp0n+7AFSA0dGmZ9OyjQHTYFGmJGt+rKaiJRtJhX3Tk
1asqg3QYBXmnybd49wQ2WomKRTIOOIR48VdJsfl/BiWb7oCS69UnkPUcVzs5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJHQxLW26zqLXhdFWxxyyw2n6dYUwHwYDVR0j
BBgwFoAUM8AVJIUyvOOVn3MJJ0n94WSTRAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC8zM0MwMTUyNDg1MzJCQ0UzOTU5RjczMDkyNzQ5RkRFMTY0OTM0NDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzQzAxNTI0ODUzMkJDRTM5
NTlGNzMwOTI3NDlGREUxNjQ5MzQ0MDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzEzMzMxMmUzMTM5MzYyZTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDxCgwDQYJKoZIhvcNAQELBQADggEBADV5NsF7
AqmaGXIFXNW5uIj1barejNwaa5BbT3vZSaGixqBJSCjcwpuzzRF1eyOr7Hk84mAM
08IOZ7NxbSeirmbipaHts0ROIIpHv+nAJzoVAnl408r/ce4Mc7e4D/c+jFyjTa9l
tRPkqnBU+C/BaZDDsisx77pqUq5kkpgIZsE3ySi9Ods4GPekOo2k11G/xoJ75enN
j204hWkjmSMhZId5NrL2/3pbtErHu61QXUx+wJAagE/gE+uDRlI+WvWup9pxNqwK
gKYfPGi7vqnVmqDcjLa/sCJq+AxylfCgiMx1KCfLDGMGvP/iDnHZ4VayLSgzqXzY
3YmgWxPLocQtAkA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org