Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa
File:                     3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa (raw, json)
Hash identifier:          3QV0WX7hkwYZtwM6bQD6Ja3IOaQyHZfLeC8Ri8oLAB0=
Subject key identifier:   11:CB:D3:A3:90:C7:C3:BD:EE:EB:AE:C0:00:BA:54:A4:6A:F4:51:DA
Certificate issuer:       /CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
Certificate serial:       4424EB337028E939D8F222168D3B0A7E46A5E9E1
Authority key identifier: F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa
Signing time:             Thu 11 May 2023 11:46:44 +0000
ROA not before:           Thu 11 May 2023 11:41:44 +0000
ROA not after:            Thu 09 May 2024 11:46:44 +0000
asID:                     271420
IP address blocks:        181.233.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:24:eb:33:70:28:e9:39:d8:f2:22:16:8d:3b:0a:7e:46:a5:e9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6397E133797ED687FF9A8E595030DA0DFE5B7CE
        Validity
            Not Before: May 11 11:41:44 2023 GMT
            Not After : May  9 11:46:44 2024 GMT
        Subject: CN=11CBD3A390C7C3BDEEEBAEC000BA54A46AF451DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:3f:19:6f:46:9e:8b:c3:5a:85:04:99:fe:
                    51:9b:fd:c3:29:38:87:4b:fe:63:13:11:e5:2a:0d:
                    fa:cc:48:66:aa:d4:f2:fb:c9:4e:43:18:74:13:00:
                    17:1d:69:04:ad:ca:65:9b:c3:a9:37:bb:4c:55:74:
                    fc:fa:02:f5:83:2f:95:99:71:d5:1e:12:f7:2e:02:
                    4a:15:68:b2:14:01:45:f8:65:80:51:35:04:fe:cb:
                    e2:02:25:3f:fa:47:b6:be:59:14:b4:93:ca:8a:c7:
                    e9:2c:93:a9:cd:5e:73:e7:88:2e:2c:07:74:6c:44:
                    f8:97:81:3e:42:ae:5a:27:16:1a:2d:c9:da:e5:3e:
                    a7:74:2e:df:2e:fd:af:11:85:e0:00:18:29:98:c2:
                    5f:bb:7e:e4:82:ed:25:93:58:d2:4f:f2:ce:12:05:
                    ca:df:7e:7e:bc:9d:f9:98:d6:90:39:36:a6:c2:c8:
                    07:5b:41:6f:c2:39:5f:3b:db:7f:d0:e7:44:e1:07:
                    00:2e:91:14:38:f6:09:6e:28:d4:74:5e:b1:36:5f:
                    d2:e6:ec:88:29:34:f9:b5:5f:df:c7:4f:e2:01:4d:
                    30:85:63:bf:9f:c9:66:88:ed:5a:0e:b2:b4:16:62:
                    b7:f3:f4:3e:b6:10:86:cb:1e:88:48:f4:ac:10:af:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:D3:A3:90:C7:C3:BD:EE:EB:AE:C0:00:BA:54:A4:6A:F4:51:DA
            X509v3 Authority Key Identifier:
                keyid:F6:39:7E:13:37:97:ED:68:7F:F9:A8:E5:95:03:0D:A0:DF:E5:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F6397E133797ED687FF9A8E595030DA0DFE5B7CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVLKoSw76WP7FhwxiBvMHFxMRYYK4Z7VwjoRrpyfkq4i/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:a8:0b:9d:eb:82:82:06:6c:85:0a:74:03:62:45:57:10:
         87:db:cd:b2:9c:33:1f:91:d2:34:ff:7b:11:cd:bd:52:84:bf:
         e7:11:04:c5:ac:cc:e6:7a:6c:c7:04:44:b1:0f:a9:37:8d:77:
         fd:7f:94:a8:0f:f8:e9:72:40:cb:23:26:d8:e1:6c:ac:3c:80:
         99:ca:8d:2a:6d:e9:e0:74:77:0c:00:1a:c7:7b:ae:21:63:f2:
         31:39:56:f3:53:b9:e0:d4:00:f4:b9:f7:fc:43:83:a3:56:50:
         80:4c:ba:5b:f3:52:84:cc:a7:14:7e:66:7b:34:93:46:61:e7:
         21:f8:c0:f2:38:64:12:1d:a7:4d:52:88:04:90:c1:51:06:c5:
         1d:0c:41:15:11:fd:40:69:1d:82:b6:1f:bd:8f:4a:b0:66:2f:
         2c:b1:64:50:b6:1f:76:5f:90:a6:44:c2:24:1b:ea:a1:b7:62:
         49:a1:36:d9:ae:73:d5:12:d4:0a:5f:9e:a2:a8:4b:83:b5:71:
         c9:f0:f1:65:74:3f:0f:4b:35:06:a9:ff:dd:39:fe:52:81:49:
         60:56:43:7f:ea:f6:44:72:b6:bd:36:3e:4b:4b:96:4a:76:e7:
         a2:39:cd:4b:fc:5e:a6:ad:a9:80:94:8d:06:63:4a:6d:bc:17:
         da:00:0e:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURCTrM3Ao6TnY8iIWjTsKfkal6eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzOTdFMTMzNzk3RUQ2ODdGRjlBOEU1OTUwMzBEQTBE
RkU1QjdDRTAeFw0yMzA1MTExMTQxNDRaFw0yNDA1MDkxMTQ2NDRaMDMxMTAvBgNV
BAMTKDExQ0JEM0EzOTBDN0MzQkRFRUVCQUVDMDAwQkE1NEE0NkFGNDUxREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1T8Zb0aei8NahQSZ/lGb/cMp
OIdL/mMTEeUqDfrMSGaq1PL7yU5DGHQTABcdaQStymWbw6k3u0xVdPz6AvWDL5WZ
cdUeEvcuAkoVaLIUAUX4ZYBRNQT+y+ICJT/6R7a+WRS0k8qKx+ksk6nNXnPniC4s
B3RsRPiXgT5CrlonFhotydrlPqd0Lt8u/a8RheAAGCmYwl+7fuSC7SWTWNJP8s4S
Bcrffn68nfmY1pA5NqbCyAdbQW/COV8723/Q50ThBwAukRQ49gluKNR0XrE2X9Lm
7IgpNPm1X9/HT+IBTTCFY7+fyWaI7VoOsrQWYrfz9D62EIbLHohI9KwQr8qHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEcvTo5DHw73u667AALpUpGr0UdowHwYDVR0j
BBgwFoAU9jl+EzeX7Wh/+ajllQMNoN/lt84wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZMS29Tdzc2V1A3Rmh3eGlCdk1IRnhNUllZSzRaN1Z3am9ScnB5Zmtx
NGkvMC9GNjM5N0UxMzM3OTdFRDY4N0ZGOUE4RTU5NTAzMERBMERGRTVCN0NFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y2Mzk3RTEzMzc5N0VENjg3
RkY5QThFNTk1MDMwREEwREZFNUI3Q0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FWTEtvU3c3NldQN0Zod3hpQnZNSEZ4TVJZWUs0WjdWd2pvUnJweWZrcTRpLzAv
MzEzODMxMmUzMjMzMzMyZTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG16S4wDQYJKoZIhvcNAQELBQADggEBACP1qAud
64KCBmyFCnQDYkVXEIfbzbKcMx+R0jT/exHNvVKEv+cRBMWszOZ6bMcERLEPqTeN
d/1/lKgP+OlyQMsjJtjhbKw8gJnKjSpt6eB0dwwAGsd7riFj8jE5VvNTueDUAPS5
9/xDg6NWUIBMulvzUoTMpxR+Zns0k0Zh5yH4wPI4ZBIdp01SiASQwVEGxR0MQRUR
/UBpHYK2H72PSrBmLyyxZFC2H3ZfkKZEwiQb6qG3YkmhNtmuc9US1ApfnqKoS4O1
ccnw8WV0Pw9LNQap/905/lKBSWBWQ3/q9kRytr02PktLlkp256I5zUv8XqatqYCU
jQZjSm28F9oADlk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org