Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230312e302f32342d3234203d3e20323632333136.roa
File:                     3133312e3232312e3230312e302f32342d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          cHmh+EBs/11pGJO/b8I9ruNtuW7FLB7GyegYPBy9+u4=
Subject key identifier:   0D:DC:FD:F9:44:9B:C6:0D:5B:54:8E:83:E6:61:F0:FE:63:BF:62:3F
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2A3B915DAE9BABE8EBF4F7649131FF49C543A956
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230312e302f32342d3234203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:38 +0000
ROA not before:           Mon 21 Aug 2023 13:21:38 +0000
ROA not after:            Mon 19 Aug 2024 13:26:38 +0000
asID:                     262316
IP address blocks:        131.221.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3b:91:5d:ae:9b:ab:e8:eb:f4:f7:64:91:31:ff:49:c5:43:a9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:38 2023 GMT
            Not After : Aug 19 13:26:38 2024 GMT
        Subject: CN=0DDCFDF9449BC60D5B548E83E661F0FE63BF623F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:b5:9b:9c:a5:a6:4f:57:57:a7:d8:2f:41:
                    9f:c8:e7:ea:89:f8:8c:88:e5:9f:8d:f4:ad:9f:0f:
                    49:69:0e:8e:bf:27:cf:68:bf:3e:9b:a3:0d:44:0a:
                    5b:c4:56:f6:d1:46:0c:86:c6:f4:b4:ab:96:10:40:
                    19:49:b0:cc:f7:a4:2c:f2:1d:aa:35:db:04:3b:e7:
                    91:2b:45:8a:0f:a8:4f:67:62:24:76:d0:73:6e:ad:
                    b1:a8:2c:8c:6f:94:51:66:33:63:08:29:bf:e8:42:
                    7c:e8:4c:e8:17:2b:ba:14:15:b5:b6:1b:4f:97:bf:
                    e7:91:1f:46:f1:67:49:cd:47:9d:37:97:71:9f:5c:
                    6b:8c:9b:a8:72:1f:65:0a:85:d4:fc:3b:47:44:a4:
                    e5:a2:6d:40:9b:a3:cc:37:74:9d:9f:8b:2c:63:68:
                    91:49:4b:2d:4e:85:8c:a5:a9:8b:c6:a3:75:75:c6:
                    c0:a0:ee:cb:61:fd:52:6e:28:21:60:8d:17:82:49:
                    cc:c1:6a:38:6f:04:47:d1:bd:37:95:45:9c:87:e1:
                    fa:db:3d:54:80:b1:a0:4a:cd:70:d5:d7:20:44:b8:
                    86:c2:c0:96:fb:d0:42:9d:ee:c9:cb:7c:60:0d:37:
                    ae:39:1b:44:b0:38:6b:b1:f1:df:ca:f6:80:74:21:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DC:FD:F9:44:9B:C6:0D:5B:54:8E:83:E6:61:F0:FE:63:BF:62:3F
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230312e302f32342d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:22:40:d5:8b:1a:11:02:a8:41:b1:7b:6d:30:6d:e6:fc:
         68:a7:dd:86:ed:de:99:c3:7b:5c:ee:12:c4:4b:cc:41:59:1a:
         73:f8:99:75:ff:ba:2d:d2:3a:fc:b9:c4:55:ec:2d:eb:39:f0:
         4d:c0:96:46:32:56:fa:70:56:4d:e5:cd:0e:1a:cd:4b:2f:44:
         f4:1b:09:98:66:72:00:e1:1e:62:df:1c:74:fe:88:6e:3f:43:
         a2:4c:c6:82:5f:80:3a:e3:ba:a0:cd:6b:97:c4:f9:4c:a6:da:
         09:06:b4:55:7d:14:bd:6f:9a:2c:10:fa:ef:a4:37:4a:c7:2a:
         22:43:ea:c1:d8:c3:5c:2d:ea:c7:62:28:cd:64:94:d5:e5:c5:
         69:70:e6:43:a6:af:7e:56:0e:6f:2e:bb:2b:39:2f:70:47:4e:
         5e:a9:a9:c7:47:08:be:34:d8:28:65:e7:9b:5e:dd:4a:08:67:
         be:5c:64:3b:4a:d0:4b:34:af:61:21:fb:07:77:75:65:12:8c:
         c4:90:ba:28:63:91:f9:eb:3c:e5:17:06:1e:4c:46:48:48:63:
         90:75:f3:5e:43:a7:d4:69:c6:e5:33:2e:b3:c3:f0:f4:26:42:
         9a:99:f8:89:6b:62:ae:c4:49:94:53:14:70:0a:aa:ee:fd:77:
         62:db:3f:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKjuRXa6bq+jr9PdkkTH/ScVDqVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzhaFw0yNDA4MTkxMzI2MzhaMDMxMTAvBgNV
BAMTKDBERENGREY5NDQ5QkM2MEQ1QjU0OEU4M0U2NjFGMEZFNjNCRjYyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCbWbnKWmT1dXp9gvQZ/I5+qJ
+IyI5Z+N9K2fD0lpDo6/J89ovz6bow1EClvEVvbRRgyGxvS0q5YQQBlJsMz3pCzy
Hao12wQ755ErRYoPqE9nYiR20HNurbGoLIxvlFFmM2MIKb/oQnzoTOgXK7oUFbW2
G0+Xv+eRH0bxZ0nNR503l3GfXGuMm6hyH2UKhdT8O0dEpOWibUCbo8w3dJ2fiyxj
aJFJSy1OhYylqYvGo3V1xsCg7sth/VJuKCFgjReCSczBajhvBEfRvTeVRZyH4frb
PVSAsaBKzXDV1yBEuIbCwJb70EKd7snLfGANN645G0SwOGux8d/K9oB0ITbZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDdz9+USbxg1bVI6D5mHw/mO/Yj8wHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzMzMxMmUzMjMyMzEyZTMyMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdyTANBgkqhkiG9w0BAQsFAAOCAQEAKHoi
QNWLGhECqEGxe20wbeb8aKfdhu3emcN7XO4SxEvMQVkac/iZdf+6LdI6/LnEVewt
6znwTcCWRjJW+nBWTeXNDhrNSy9E9BsJmGZyAOEeYt8cdP6Ibj9DokzGgl+AOuO6
oM1rl8T5TKbaCQa0VX0UvW+aLBD676Q3SscqIkPqwdjDXC3qx2IozWSU1eXFaXDm
Q6avflYOby67KzkvcEdOXqmpx0cIvjTYKGXnm17dSghnvlxkO0rQSzSvYSH7B3d1
ZRKMxJC6KGOR+es85RcGHkxGSEhjkHXzXkOn1GnG5TMus8Pw9CZCmpn4iWtirsRJ
lFMUcAqq7v13Yts/Vw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:12 2025 by rpki-client