Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa
File:                     3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          ls1Oi6v/LcPrukhZItkpaR9qer6hwGMIw4SumSE4CT4=
Subject key identifier:   D7:F7:A9:BB:AA:D0:BB:B7:64:4A:DC:A2:36:A7:EC:B2:D1:3F:28:3B
Certificate issuer:       /CN=070B1B3AB7E59C42A791E094D81229555D5D0146
Certificate serial:       7DD3641BD444D3A3F9EDF9DF6EC2E86E6867A4FD
Authority key identifier: 07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa
Signing time:             Wed 31 Jan 2024 18:03:43 +0000
ROA not before:           Wed 31 Jan 2024 17:58:43 +0000
ROA not after:            Wed 29 Jan 2025 18:03:43 +0000
asID:                     264297
IP address blocks:        131.255.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:64:1b:d4:44:d3:a3:f9:ed:f9:df:6e:c2:e8:6e:68:67:a4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070B1B3AB7E59C42A791E094D81229555D5D0146
        Validity
            Not Before: Jan 31 17:58:43 2024 GMT
            Not After : Jan 29 18:03:43 2025 GMT
        Subject: CN=D7F7A9BBAAD0BBB7644ADCA236A7ECB2D13F283B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:c9:b1:0e:08:5b:1e:73:6e:25:4f:60:8c:
                    c0:c0:50:eb:20:e0:33:b0:ff:9a:16:e3:e5:e2:ea:
                    09:be:ee:f7:22:27:eb:8d:a2:dc:16:21:d0:bb:d6:
                    11:eb:b4:04:05:2f:fe:e9:40:b1:d5:2a:f1:c4:5f:
                    2e:61:93:04:ba:85:ee:5d:20:19:ea:26:07:5e:fe:
                    77:7c:2b:18:86:4a:77:cf:e8:6c:80:f5:fb:88:e9:
                    af:c1:30:fb:a7:86:b7:4e:31:c6:c3:79:b8:28:2a:
                    94:45:c9:b9:8c:92:60:9b:a0:52:5d:a2:7c:de:4d:
                    bd:63:a8:96:f3:c1:68:23:54:13:ff:87:ee:04:82:
                    f8:e1:21:e6:cd:7a:2b:97:6a:b8:36:64:13:cb:5d:
                    35:25:cf:49:67:c9:d8:f7:24:75:3a:18:b0:d7:35:
                    f9:b1:90:79:92:61:c4:48:ac:e4:c8:9e:c4:b9:94:
                    2a:c1:65:56:6c:c9:1d:0a:db:14:cd:f3:3a:06:ab:
                    b3:5f:f7:77:0e:29:18:fb:37:74:f5:cf:fb:4b:75:
                    d3:7c:d5:a9:15:cc:3e:5c:a3:ca:80:13:5d:3a:ce:
                    f9:e4:84:0a:5f:64:dc:f3:e3:e0:fa:0e:8d:90:62:
                    73:4a:3d:14:d9:d9:fb:5f:49:50:0d:f1:99:a9:52:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:A9:BB:AA:D0:BB:B7:64:4A:DC:A2:36:A7:EC:B2:D1:3F:28:3B
            X509v3 Authority Key Identifier:
                keyid:07:0B:1B:3A:B7:E5:9C:42:A7:91:E0:94:D8:12:29:55:5D:5D:01:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/070B1B3AB7E59C42A791E094D81229555D5D0146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/070B1B3AB7E59C42A791E094D81229555D5D0146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:35:7d:66:e2:ad:49:85:ec:7c:7b:2c:0d:f5:fb:a2:b7:
         4d:52:2f:af:55:86:09:e9:cb:4d:8d:6c:48:51:f6:10:15:0d:
         4b:7d:20:6b:8c:51:e8:e7:d5:a4:53:da:8a:c1:95:78:af:89:
         1a:bb:54:56:54:da:e6:85:77:c8:49:ef:89:f8:69:c3:6d:e8:
         c2:61:6b:0c:15:72:b1:1b:ce:f5:42:2f:ac:c6:da:0b:da:9e:
         b1:df:df:5e:3f:58:25:8b:07:39:e8:bc:38:de:0e:e9:f0:ee:
         65:6a:72:a3:df:1d:57:f0:49:da:8b:24:00:f2:28:f4:88:38:
         b5:81:55:b7:ff:be:8f:05:b9:19:a9:24:de:41:8f:68:f3:e5:
         6c:00:11:15:dc:3f:42:66:e0:e7:ae:5e:49:98:50:8e:b4:d6:
         a3:77:8b:27:e1:1e:c9:c4:0e:19:41:03:a8:b2:51:b7:51:10:
         bc:7d:38:b6:7e:60:aa:7c:f6:ec:4b:a8:b1:39:c5:ec:cd:76:
         f3:2f:54:c2:98:14:0f:26:fd:e8:d7:7b:c5:f1:dd:be:60:b4:
         7e:a3:60:9b:b7:ae:29:9e:65:44:a9:f0:f8:d2:70:2a:5d:64:
         57:dc:b7:45:56:19:11:fe:a8:e0:d8:d0:9d:f8:06:20:8e:63:
         bb:eb:60:70
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfdNkG9RE06P57fnfbsLobmhnpP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcwQjFCM0FCN0U1OUM0MkE3OTFFMDk0RDgxMjI5NTU1
RDVEMDE0NjAeFw0yNDAxMzExNzU4NDNaFw0yNTAxMjkxODAzNDNaMDMxMTAvBgNV
BAMTKEQ3RjdBOUJCQUFEMEJCQjc2NDRBRENBMjM2QTdFQ0IyRDEzRjI4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkcmxDghbHnNuJU9gjMDAUOsg
4DOw/5oW4+Xi6gm+7vciJ+uNotwWIdC71hHrtAQFL/7pQLHVKvHEXy5hkwS6he5d
IBnqJgde/nd8KxiGSnfP6GyA9fuI6a/BMPunhrdOMcbDebgoKpRFybmMkmCboFJd
onzeTb1jqJbzwWgjVBP/h+4EgvjhIebNeiuXarg2ZBPLXTUlz0lnydj3JHU6GLDX
NfmxkHmSYcRIrOTInsS5lCrBZVZsyR0K2xTN8zoGq7Nf93cOKRj7N3T1z/tLddN8
1akVzD5co8qAE106zvnkhApfZNzz4+D6Do2QYnNKPRTZ2ftfSVAN8ZmpUoddAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1/epu6rQu7dkStyiNqfsstE/KDswHwYDVR0j
BBgwFoAUBwsbOrflnEKnkeCU2BIpVV1dAUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVJ5TnhKOTNKS2U3c3NiN3hLaTZOTjFjTXNGcDgxRndNb0d3UllaQjdn
eHUvMC8wNzBCMUIzQUI3RTU5QzQyQTc5MUUwOTREODEyMjk1NTVENUQwMTQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3MEIxQjNBQjdFNTlDNDJB
NzkxRTA5NEQ4MTIyOTU1NUQ1RDAxNDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FSeU54SjkzSktlN3NzYjd4S2k2Tk4xY01zRnA4MUZ3TW9Hd1JZWkI3Z3h1LzAv
MzEzMzMxMmUzMjM1MzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP//DANBgkqhkiG9w0BAQsFAAOCAQEAjwQ1
fWbirUmF7Hx7LA31+6K3TVIvr1WGCenLTY1sSFH2EBUNS30ga4xR6OfVpFPaisGV
eK+JGrtUVlTa5oV3yEnvifhpw23owmFrDBVysRvO9UIvrMbaC9qesd/fXj9YJYsH
Oei8ON4O6fDuZWpyo98dV/BJ2oskAPIo9Ig4tYFVt/++jwW5Gakk3kGPaPPlbAAR
Fdw/Qmbg565eSZhQjrTWo3eLJ+EeycQOGUEDqLJRt1EQvH04tn5gqnz27EuosTnF
7M128y9UwpgUDyb96Nd7xfHdvmC0fqNgm7euKZ5lRKnw+NJwKl1kV9y3RVYZEf6o
4NjQnfgGII5ju+tgcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org