Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa (raw, json)
Hash identifier:          DUv471tFZFwYTfRCWMO8hHkqvbSLMfBwwrBtnSgrEBI=
Subject key identifier:   E7:7E:7F:C8:20:06:25:96:39:01:00:7F:EA:F3:8A:B3:47:35:17:97
Certificate issuer:       /CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
Certificate serial:       7D220460200C6E7E54FD3592A5F6618458BE70E0
Authority key identifier: BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa
Signing time:             Thu 11 May 2023 01:47:20 +0000
ROA not before:           Thu 11 May 2023 01:42:20 +0000
ROA not after:            Thu 09 May 2024 01:47:20 +0000
asID:                     270956
IP address blocks:        131.221.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:22:04:60:20:0c:6e:7e:54:fd:35:92:a5:f6:61:84:58:be:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C
        Validity
            Not Before: May 11 01:42:20 2023 GMT
            Not After : May  9 01:47:20 2024 GMT
        Subject: CN=E77E7FC8200625963901007FEAF38AB347351797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:4d:12:31:37:3d:4c:03:89:6f:33:4f:99:
                    51:3d:2e:5f:23:d3:0b:b7:13:97:7a:29:bf:af:59:
                    4c:81:31:01:e5:d8:c3:2d:d6:a1:1e:98:26:1e:e6:
                    15:f5:11:67:8d:94:1f:25:ac:9d:b6:cd:6c:28:c6:
                    0a:17:11:05:13:29:a0:1c:3a:bd:6d:06:91:cd:8f:
                    02:24:31:d0:19:44:ca:8a:ab:5c:42:85:e7:17:46:
                    c0:d4:6c:ae:6e:79:a8:ce:84:2b:e5:47:5e:8b:26:
                    d9:aa:09:6a:99:72:53:ae:4a:00:a8:81:31:8f:f9:
                    92:b6:aa:9d:f2:61:c4:9f:97:47:76:0e:e9:ba:fa:
                    83:7e:3b:65:e8:d9:43:23:22:89:01:fb:34:15:cc:
                    a0:d5:20:a5:83:67:47:6d:fd:da:83:d9:f6:bc:06:
                    f2:1a:52:02:6d:0d:a0:44:35:1c:4d:83:9a:e8:8c:
                    c1:f1:19:df:43:07:36:b9:a8:ff:f0:12:9d:76:90:
                    22:7f:7f:c7:bf:56:23:f8:04:40:cc:59:72:87:5a:
                    2d:24:f8:14:7b:8f:87:73:fe:2b:6f:68:6b:e3:d0:
                    06:46:bf:dc:bd:6a:ca:4e:c6:10:85:22:50:b6:75:
                    30:f6:1d:b5:04:2d:1c:e2:cd:00:44:a1:43:12:8f:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:7F:C8:20:06:25:96:39:01:00:7F:EA:F3:8A:B3:47:35:17:97
            X509v3 Authority Key Identifier:
                keyid:BF:3F:B7:C2:EC:9E:06:D2:BC:E1:5F:DB:71:D3:97:D8:3E:B9:92:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3FB7C2EC9E06D2BCE15FDB71D397D83EB9924C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32332d3233203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:80:85:10:cc:59:88:69:ea:e7:ee:62:97:67:6d:c0:8e:
         d1:28:a0:9a:5c:fd:47:32:0f:28:9f:d9:91:b6:21:62:ec:21:
         66:d9:ab:53:37:5e:40:66:28:6a:e5:da:9f:49:f0:29:e1:c6:
         b7:92:be:59:00:da:9e:c7:3c:b7:9b:50:bf:1b:ed:a8:1d:6c:
         75:d0:b1:d2:9e:6a:37:9e:3b:d3:3d:83:42:cc:69:bb:af:4a:
         9f:eb:e9:03:c7:10:22:b1:7a:85:56:67:02:f4:93:9e:7a:18:
         71:09:45:bc:5d:9b:d9:59:9d:f3:1c:eb:7c:8a:ce:97:23:ab:
         b5:01:6f:70:f6:91:51:cc:b9:07:95:0a:0a:f3:b5:c8:91:f7:
         95:75:f6:70:6a:46:3b:1c:7e:1a:fe:7b:fb:b0:85:5c:f6:f6:
         14:8d:f1:4c:fb:68:28:fa:c9:4d:6a:78:37:b3:c5:ec:97:29:
         5a:0e:b6:33:fa:0f:45:40:ae:e8:48:6b:0f:d4:e4:0f:82:76:
         ee:e5:33:3e:70:e6:c6:ae:0c:11:a3:db:61:5b:19:a5:16:24:
         6c:a6:9d:28:08:1e:42:7d:9c:e9:74:15:2f:f0:ab:77:a7:1a:
         ba:9c:ac:ca:89:4b:7b:ea:0d:5b:bd:76:3e:1f:e6:f7:7d:74:
         7d:9d:bb:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfSIEYCAMbn5U/TWSpfZhhFi+cOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzRkI3QzJFQzlFMDZEMkJDRTE1RkRCNzFEMzk3RDgz
RUI5OTI0QzAeFw0yMzA1MTEwMTQyMjBaFw0yNDA1MDkwMTQ3MjBaMDMxMTAvBgNV
BAMTKEU3N0U3RkM4MjAwNjI1OTYzOTAxMDA3RkVBRjM4QUIzNDczNTE3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A00SMTc9TAOJbzNPmVE9Ll8j
0wu3E5d6Kb+vWUyBMQHl2MMt1qEemCYe5hX1EWeNlB8lrJ22zWwoxgoXEQUTKaAc
Or1tBpHNjwIkMdAZRMqKq1xChecXRsDUbK5ueajOhCvlR16LJtmqCWqZclOuSgCo
gTGP+ZK2qp3yYcSfl0d2Dum6+oN+O2Xo2UMjIokB+zQVzKDVIKWDZ0dt/dqD2fa8
BvIaUgJtDaBENRxNg5rojMHxGd9DBza5qP/wEp12kCJ/f8e/ViP4BEDMWXKHWi0k
+BR7j4dz/itvaGvj0AZGv9y9aspOxhCFIlC2dTD2HbUELRzizQBEoUMSj34jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU535/yCAGJZY5AQB/6vOKs0c1F5cwHwYDVR0j
BBgwFoAUvz+3wuyeBtK84V/bcdOX2D65kkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFBUm9ZRTZuZzVlR1p6ZjMxRVI2SGV2YmVNNWVpcnF2UEQ1NENrcExZ
Y3ovMC9CRjNGQjdDMkVDOUUwNkQyQkNFMTVGREI3MUQzOTdEODNFQjk5MjRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGM0ZCN0MyRUM5RTA2RDJC
Q0UxNUZEQjcxRDM5N0Q4M0VCOTkyNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBQVJvWUU2bmc1ZUdaemYzMUVSNkhldmJlTTVlaXJxdlBENTRDa3BMWWN6LzAv
MzEzMzMxMmUzMjMyMzEyZTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzOTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGD3UwwDQYJKoZIhvcNAQELBQADggEBAE/vgIUQ
zFmIaern7mKXZ23AjtEooJpc/UcyDyif2ZG2IWLsIWbZq1M3XkBmKGrl2p9J8Cnh
xreSvlkA2p7HPLebUL8b7agdbHXQsdKeajeeO9M9g0LMabuvSp/r6QPHECKxeoVW
ZwL0k556GHEJRbxdm9lZnfMc63yKzpcjq7UBb3D2kVHMuQeVCgrztciR95V19nBq
Rjscfhr+e/uwhVz29hSN8Uz7aCj6yU1qeDezxeyXKVoOtjP6D0VAruhIaw/U5A+C
du7lMz5w5sauDBGj22FbGaUWJGymnSgIHkJ9nOl0FS/wq3enGrqcrMqJS3vqDVu9
dj4f5vd9dH2du3M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org