Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa
File:                     3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          2d+fAskfO85dDAovq0i0hTPgryFqdxR0kgYinH0ifoo=
Subject key identifier:   23:4D:56:08:7A:0F:BC:16:BC:10:62:D4:72:3D:C9:A5:DD:CC:87:4A
Certificate issuer:       /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial:       4E3D4B87B30BC5750D9F36CBD625A6C317A977AF
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:35:40 +0000
ROA not before:           Wed 10 Apr 2024 13:30:40 +0000
ROA not after:            Wed 09 Apr 2025 13:35:40 +0000
asID:                     61689
IP address blocks:        131.108.124.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:4b:87:b3:0b:c5:75:0d:9f:36:cb:d6:25:a6:c3:17:a9:77:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Validity
            Not Before: Apr 10 13:30:40 2024 GMT
            Not After : Apr  9 13:35:40 2025 GMT
        Subject: CN=234D56087A0FBC16BC1062D4723DC9A5DDCC874A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:1b:0d:ee:ae:1e:f8:70:7f:b9:28:e8:da:
                    1b:93:43:2a:f8:bd:37:13:60:7b:49:8b:61:93:22:
                    2d:18:23:36:3f:64:89:7f:2f:29:7e:3c:d2:c2:20:
                    8c:f5:5b:74:b9:f1:09:18:cf:dc:e9:69:81:3b:8e:
                    17:a9:ed:ae:ef:88:1b:45:d5:e5:a6:95:e8:cc:11:
                    8b:af:3d:0f:48:a6:54:a6:7e:d8:dd:b1:56:16:1d:
                    72:93:18:2d:4d:5b:9e:96:74:57:15:14:cb:d5:3a:
                    9e:0f:cd:7e:15:0a:64:ee:2d:65:68:2a:58:f2:8a:
                    57:db:61:e2:b6:a4:00:f1:0a:06:e4:7f:e6:7a:1e:
                    89:5f:bd:18:1e:f2:71:2b:d6:4c:cb:a5:65:a0:7b:
                    0e:bc:aa:b1:e5:fb:6e:94:54:80:01:14:25:5e:45:
                    ff:f4:f3:2a:b3:4d:01:76:5e:ad:93:e3:44:5b:2e:
                    b2:16:6d:70:77:2d:46:2a:4c:6d:df:c5:a6:56:90:
                    c5:f7:9d:70:1a:a2:de:04:7b:13:fc:12:33:b2:cb:
                    59:c6:56:c4:b8:fe:e9:b7:b0:e7:76:17:ce:84:26:
                    a3:5d:91:e5:70:69:df:ca:f9:2f:25:77:42:1e:e6:
                    01:95:70:68:1f:22:87:ba:2c:e0:03:46:1a:a9:a2:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4D:56:08:7A:0F:BC:16:BC:10:62:D4:72:3D:C9:A5:DD:CC:87:4A
            X509v3 Authority Key Identifier:
                keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:8c:ec:23:b2:79:56:8f:70:89:50:bd:58:d7:05:d0:c3:c7:
         7f:3f:77:89:7d:b0:36:e6:e3:0f:97:21:cd:6f:e0:c4:72:ea:
         92:ca:48:43:47:36:d4:91:1d:be:b5:93:a0:8f:bd:ac:50:22:
         8f:25:05:4a:c6:54:a3:6f:c1:7a:d4:26:d6:0f:83:90:b4:74:
         82:5f:0f:80:78:36:d2:92:04:22:03:1b:6c:a4:1b:01:a3:90:
         34:7f:89:ea:af:ad:07:97:f0:68:74:11:42:9a:ee:51:72:2d:
         16:a6:ed:b5:58:f6:d7:92:58:bc:ea:64:16:67:aa:0c:ec:a0:
         84:5f:61:0e:96:10:3c:fa:d1:1f:a4:cd:64:09:78:7e:47:b0:
         40:76:98:52:f1:06:12:5e:b0:16:18:3c:9f:73:89:52:23:5d:
         95:53:86:fb:98:29:07:6b:90:53:68:4b:4a:49:9c:50:c7:bb:
         18:12:af:64:61:1d:f1:a9:d5:68:dd:81:80:82:51:3f:4c:62:
         06:35:d6:b3:68:a5:c4:b6:a3:31:1e:9b:02:cf:e7:17:5a:fd:
         fd:62:15:32:9e:d0:02:6e:de:c3:8a:ae:af:28:7d:1c:f0:ed:
         ba:41:f3:fa:32:ce:76:40:ad:82:e1:a1:76:a3:79:2a:5f:a6:
         9f:3c:84:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTj1Lh7MLxXUNnzbL1iWmwxepd68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1NjI1QTY1NkNDRDJCRTNGM0YwRjg3RDlBNEJGMkUx
OTJCRTQxNDAeFw0yNDA0MTAxMzMwNDBaFw0yNTA0MDkxMzM1NDBaMDMxMTAvBgNV
BAMTKDIzNEQ1NjA4N0EwRkJDMTZCQzEwNjJENDcyM0RDOUE1RERDQzg3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoxsN7q4e+HB/uSjo2huTQyr4
vTcTYHtJi2GTIi0YIzY/ZIl/Lyl+PNLCIIz1W3S58QkYz9zpaYE7jhep7a7viBtF
1eWmlejMEYuvPQ9IplSmftjdsVYWHXKTGC1NW56WdFcVFMvVOp4PzX4VCmTuLWVo
KljyilfbYeK2pADxCgbkf+Z6HolfvRge8nEr1kzLpWWgew68qrHl+26UVIABFCVe
Rf/08yqzTQF2Xq2T40RbLrIWbXB3LUYqTG3fxaZWkMX3nXAaot4EexP8EjOyy1nG
VsS4/um3sOd2F86EJqNdkeVwad/K+S8ld0Ie5gGVcGgfIoe6LOADRhqpoicnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI01WCHoPvBa8EGLUcj3Jpd3Mh0owHwYDVR0j
BBgwFoAUclYlplbM0r4/Pw+H2aS/Lhkr5BQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMC83MjU2MjVBNjU2Q0NEMkJFM0YzRjBGODdEOUE0QkYyRTE5MkJFNDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyNTYyNUE2NTZDQ0QyQkUz
RjNGMEY4N0Q5QTRCRjJFMTkyQkU0MTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzIzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2
MzEzNjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDbHwwDQYJKoZIhvcNAQELBQADggEBAJGM7COy
eVaPcIlQvVjXBdDDx38/d4l9sDbm4w+XIc1v4MRy6pLKSENHNtSRHb61k6CPvaxQ
Io8lBUrGVKNvwXrUJtYPg5C0dIJfD4B4NtKSBCIDG2ykGwGjkDR/ieqvrQeX8Gh0
EUKa7lFyLRam7bVY9teSWLzqZBZnqgzsoIRfYQ6WEDz60R+kzWQJeH5HsEB2mFLx
BhJesBYYPJ9ziVIjXZVThvuYKQdrkFNoS0pJnFDHuxgSr2RhHfGp1WjdgYCCUT9M
YgY11rNopcS2ozEemwLP5xda/f1iFTKe0AJu3sOKrq8ofRzw7bpB8/oyznZArYLh
oXajeSpfpp88hCI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org