Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
File:                     3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier:          piJD3B+evchVxJEKjtGxpW5EeWcqCO8weF40QiyY8I4=
Subject key identifier:   06:E7:24:E0:7E:FC:7A:5B:C2:7D:3D:00:DD:53:06:DF:86:DA:67:CC
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       09260E7ACEE276AFA3BF7EC84D1CB52C12D40D0D
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:11 +0000
ROA not before:           Wed 02 Aug 2023 13:50:11 +0000
ROA not after:            Wed 31 Jul 2024 13:55:11 +0000
asID:                     61639
IP address blocks:        131.100.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:26:0e:7a:ce:e2:76:af:a3:bf:7e:c8:4d:1c:b5:2c:12:d4:0d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:11 2023 GMT
            Not After : Jul 31 13:55:11 2024 GMT
        Subject: CN=06E724E07EFC7A5BC27D3D00DD5306DF86DA67CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:8f:33:1f:b6:18:47:fb:5c:4a:3b:8a:61:
                    09:2d:ff:f0:7f:b7:3e:18:90:7a:55:88:7d:f0:ce:
                    9d:68:73:bc:ec:11:7f:83:6a:09:36:5e:a0:44:31:
                    3f:f5:ee:9d:9b:a1:6a:c8:2c:6c:94:6d:8a:17:bf:
                    ec:02:f1:8b:21:ac:6f:70:ea:fc:61:c8:87:08:e7:
                    df:f8:db:b9:85:80:5b:2a:57:5c:25:ce:58:de:da:
                    87:8d:2a:58:f3:7a:3b:3c:24:22:cf:12:95:d1:29:
                    ba:8a:3e:26:ed:c1:4a:30:d3:01:78:a0:2c:7b:51:
                    3f:99:65:51:64:76:bb:0e:e7:44:ce:df:70:4f:ac:
                    a0:fc:ea:c3:9b:02:5e:e8:4f:53:56:1b:58:ce:74:
                    c7:9c:cb:c8:1b:88:e5:6f:98:2e:b4:ab:59:b3:2d:
                    31:e4:51:d5:79:5b:79:b1:0a:19:f5:c7:cb:73:4e:
                    ee:09:c4:54:f2:7a:30:38:35:e1:32:72:d0:87:ec:
                    bd:7b:1e:68:bd:10:51:fa:82:ef:b4:1f:4b:c9:76:
                    bc:a3:ef:04:9b:8a:d3:b3:1f:2f:00:c2:1c:7c:02:
                    e6:a8:aa:63:11:35:31:08:8d:ab:bf:ca:8e:e0:cb:
                    62:39:4f:93:7d:92:a4:c7:81:88:cb:f7:4d:a7:ea:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:24:E0:7E:FC:7A:5B:C2:7D:3D:00:DD:53:06:DF:86:DA:67:CC
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133312e3130302e3135322e302f32332d3233203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:f2:8b:74:96:f6:b3:d6:54:0d:89:00:aa:f3:ea:4f:4f:
         86:cd:dd:98:7d:8f:f6:5e:2a:42:41:39:1e:8d:ff:b2:aa:59:
         cd:f1:f7:0c:7f:16:c6:b2:56:27:8c:d6:32:17:25:41:9a:42:
         c8:1c:22:20:b5:f9:ae:ff:fc:78:3d:f6:c5:4e:2d:3c:09:b3:
         eb:32:12:15:37:a9:36:5b:2e:9a:2e:ba:e9:1c:0a:5b:ad:46:
         3a:15:2d:fe:d4:17:6c:04:f5:40:42:b5:b7:2f:75:54:8a:7a:
         59:66:d5:31:4a:a3:05:c6:05:8d:ab:6e:87:88:8d:e1:63:ae:
         ae:08:46:53:d3:5e:48:95:f7:1b:1b:21:eb:95:35:26:da:d5:
         b2:d7:df:cd:5d:5a:2d:eb:51:a7:22:56:b7:1d:63:5d:d0:41:
         20:17:95:0d:8b:86:b9:9c:d6:92:91:06:c2:0c:02:79:0e:08:
         25:04:eb:5c:78:9a:4a:a2:ab:6a:d7:98:8a:d1:93:24:d0:29:
         01:7e:8f:e5:18:cb:fa:ae:07:e5:4b:c9:a1:5f:06:2a:c3:3f:
         87:1d:65:37:1c:07:f2:a7:7a:f2:5c:ac:e9:48:b0:cd:8d:e2:
         22:46:f3:03:60:9a:3d:b7:6e:4b:89:b0:84:05:6d:5b:72:f1:
         99:ea:03:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCSYOes7idq+jv37ITRy1LBLUDQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU5MzhENUU2N0Y3QTYyMzlDMDA4MEIzQjRCNEI0NkU5
NkRCOTUxOTAeFw0yMzA4MDIxMzUwMTFaFw0yNDA3MzExMzU1MTFaMDMxMTAvBgNV
BAMTKDA2RTcyNEUwN0VGQzdBNUJDMjdEM0QwMERENTMwNkRGODZEQTY3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy948zH7YYR/tcSjuKYQkt//B/
tz4YkHpViH3wzp1oc7zsEX+Dagk2XqBEMT/17p2boWrILGyUbYoXv+wC8YshrG9w
6vxhyIcI59/427mFgFsqV1wlzlje2oeNKljzejs8JCLPEpXRKbqKPibtwUow0wF4
oCx7UT+ZZVFkdrsO50TO33BPrKD86sObAl7oT1NWG1jOdMecy8gbiOVvmC60q1mz
LTHkUdV5W3mxChn1x8tzTu4JxFTyejA4NeEyctCH7L17Hmi9EFH6gu+0H0vJdryj
7wSbitOzHy8Awhx8AuaoqmMRNTEIjau/yo7gy2I5T5N9kqTHgYjL902n6kRzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBuck4H78elvCfT0A3VMG34baZ8wwHwYDVR0j
BBgwFoAUFZONXmf3piOcAICztLS0bpbblRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTFNQ1B5QXljQk5mZnY5Mzl4enFWQUJ5VHVvN1JCakZ4dEgybjF2eHEy
dkUvMC8xNTkzOEQ1RTY3RjdBNjIzOUMwMDgwQjNCNEI0QjQ2RTk2REI5NTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1OTM4RDVFNjdGN0E2MjM5
QzAwODBCM0I0QjRCNDZFOTZEQjk1MTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExTUNQeUF5Y0JOZmZ2OTM5eHpxVkFCeVR1bzdSQmpGeHRIMm4xdnhxMnZFLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZJgwDQYJKoZIhvcNAQELBQADggEBAGaM8ot0
lvaz1lQNiQCq8+pPT4bN3Zh9j/ZeKkJBOR6N/7KqWc3x9wx/FsayVieM1jIXJUGa
QsgcIiC1+a7//Hg99sVOLTwJs+syEhU3qTZbLpouuukcClutRjoVLf7UF2wE9UBC
tbcvdVSKellm1TFKowXGBY2rboeIjeFjrq4IRlPTXkiV9xsbIeuVNSba1bLX381d
Wi3rUaciVrcdY13QQSAXlQ2Lhrmc1pKRBsIMAnkOCCUE61x4mkqiq2rXmIrRkyTQ
KQF+j+UYy/quB+VLyaFfBirDP4cdZTccB/KnevJcrOlIsM2N4iJG8wNgmj23bkuJ
sIQFbVty8ZnqA0A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org