Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa
File:                     3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          SBbE3FsIpkBfx/v9OAF0DvCl7bxj7OqMLWnQ7mOHbqA=
Subject key identifier:   B1:FB:4C:6E:62:D5:C8:FB:6E:4C:89:0D:53:A8:BC:5E:98:47:1E:5C
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       7D6A23F2063C0072D0E88FC89E0820DBC18B3EE0
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa
Signing time:             Tue 12 Mar 2024 16:35:43 +0000
ROA not before:           Tue 12 Mar 2024 16:30:43 +0000
ROA not after:            Tue 11 Mar 2025 16:35:43 +0000
asID:                     264368
IP address blocks:        131.161.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:23:f2:06:3c:00:72:d0:e8:8f:c8:9e:08:20:db:c1:8b:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar 12 16:30:43 2024 GMT
            Not After : Mar 11 16:35:43 2025 GMT
        Subject: CN=B1FB4C6E62D5C8FB6E4C890D53A8BC5E98471E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:03:7c:fd:ca:b1:86:8f:07:ce:b9:02:b5:
                    8d:62:3d:2a:23:ed:64:7f:c5:61:d1:28:d0:0a:65:
                    47:9d:4e:5a:68:b8:62:2e:9c:b9:8a:c7:3f:7f:66:
                    a5:83:23:70:6f:30:08:05:a1:37:cc:a6:e6:73:27:
                    37:0d:73:bd:d9:ab:89:aa:90:77:37:c7:11:11:1d:
                    29:9d:37:f6:9e:5d:ed:ab:5e:85:01:4e:fe:bc:c2:
                    5b:73:68:1b:0c:de:bd:ab:da:1c:80:22:3a:68:89:
                    4f:1a:c1:3e:ba:57:c9:61:33:27:88:8e:20:67:22:
                    a4:af:0b:c5:34:27:b5:1d:b4:54:e5:2c:ed:fe:cf:
                    ba:6c:74:aa:a9:f3:3c:92:a3:92:68:64:70:3d:66:
                    2a:ac:b7:82:d4:11:42:9e:2f:97:57:4f:a6:db:6e:
                    7b:85:20:6c:74:b4:fb:dc:01:ca:be:42:34:54:5b:
                    fe:3a:13:57:67:3c:27:1c:08:3f:61:5d:90:7f:c7:
                    06:6c:1d:a7:13:80:db:e7:56:c0:37:05:34:17:f7:
                    55:9c:c1:3e:17:9b:fc:62:97:ea:21:2b:3f:77:b5:
                    a1:db:c7:1f:8b:1c:07:52:f0:61:4f:92:ad:17:c9:
                    1c:cf:c2:26:43:50:a8:b7:6b:fa:ab:aa:95:9b:5d:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:4C:6E:62:D5:C8:FB:6E:4C:89:0D:53:A8:BC:5E:98:47:1E:5C
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:b7:08:bc:ba:8f:be:d4:da:81:f3:99:d4:ad:bb:ee:ea:
         48:8d:18:d0:7a:11:b1:7c:f3:44:36:a6:1d:4c:dc:c0:08:00:
         60:ef:c8:7f:dc:05:c5:07:47:53:13:81:db:a0:f1:49:b6:5e:
         e1:bf:36:b6:36:92:eb:9f:e0:e3:3e:6d:78:18:b4:c9:e9:06:
         73:5e:ec:21:70:85:fc:c3:4a:64:40:5b:db:f2:07:0e:51:31:
         20:c1:55:f4:bb:1c:89:ff:cf:96:ff:e0:e4:eb:4b:44:3b:dc:
         95:08:10:03:0e:e2:57:e8:ba:fb:bd:29:cb:f3:8a:5c:5b:73:
         5c:ab:71:de:7b:b4:04:38:de:ed:54:ec:dc:e4:f3:d7:0b:03:
         b2:52:5c:b2:02:04:f8:ba:93:31:a9:d3:61:72:96:2b:dc:e4:
         af:13:80:e7:e7:fe:b4:34:e4:d0:e5:92:31:87:de:69:a7:cd:
         c9:8f:cd:f7:1a:f0:0d:cd:8e:d5:7f:71:ab:00:7e:2b:07:85:
         c0:26:7c:77:0e:e0:47:13:67:c5:69:e0:0a:af:ff:63:4e:b0:
         51:b2:a1:bd:f4:66:a9:bf:35:8c:50:0f:33:1e:48:9d:0f:64:
         32:9a:ab:a2:26:4d:2e:bb:b0:c6:96:c9:12:62:20:92:ad:23:
         e2:1e:48:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfWoj8gY8AHLQ6I/Inggg28GLPuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0N0ZBN0M1MDY3RkI2MzMwQ0NCNTJCNEI4OEVBMTc4
OTIyQUFFNTAeFw0yNDAzMTIxNjMwNDNaFw0yNTAzMTExNjM1NDNaMDMxMTAvBgNV
BAMTKEIxRkI0QzZFNjJENUM4RkI2RTRDODkwRDUzQThCQzVFOTg0NzFFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbwN8/cqxho8HzrkCtY1iPSoj
7WR/xWHRKNAKZUedTlpouGIunLmKxz9/ZqWDI3BvMAgFoTfMpuZzJzcNc73Zq4mq
kHc3xxERHSmdN/aeXe2rXoUBTv68wltzaBsM3r2r2hyAIjpoiU8awT66V8lhMyeI
jiBnIqSvC8U0J7UdtFTlLO3+z7psdKqp8zySo5JoZHA9Ziqst4LUEUKeL5dXT6bb
bnuFIGx0tPvcAcq+QjRUW/46E1dnPCccCD9hXZB/xwZsHacTgNvnVsA3BTQX91Wc
wT4Xm/xil+ohKz93taHbxx+LHAdS8GFPkq0XyRzPwiZDUKi3a/qrqpWbXabdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsftMbmLVyPtuTIkNU6i8XphHHlwwHwYDVR0j
BBgwFoAUj0f6fFBn+2MwzLUrS4jqF4kiquUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRvQ2M1VmdwendrSlAzZjhzd0I1VGNjZVhMQk1IUGp1WFp3SDRUc1pM
UG8vMC84RjQ3RkE3QzUwNjdGQjYzMzBDQ0I1MkI0Qjg4RUExNzg5MjJBQUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGNDdGQTdDNTA2N0ZCNjMz
MENDQjUyQjRCODhFQTE3ODkyMkFBRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0b0NjNVZncHp3a0pQM2Y4c3dCNVRjY2VYTEJNSFBqdVhad0g0VHNaTFBvLzAv
MzEzMzMxMmUzMTM2MzEyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDoTAwDQYJKoZIhvcNAQELBQADggEBAGdrtwi8
uo++1NqB85nUrbvu6kiNGNB6EbF880Q2ph1M3MAIAGDvyH/cBcUHR1MTgdug8Um2
XuG/NrY2kuuf4OM+bXgYtMnpBnNe7CFwhfzDSmRAW9vyBw5RMSDBVfS7HIn/z5b/
4OTrS0Q73JUIEAMO4lfouvu9Kcvzilxbc1yrcd57tAQ43u1U7Nzk89cLA7JSXLIC
BPi6kzGp02Fylivc5K8TgOfn/rQ05NDlkjGH3mmnzcmPzfca8A3NjtV/casAfisH
hcAmfHcO4EcTZ8Vp4Aqv/2NOsFGyob30Zqm/NYxQDzMeSJ0PZDKaq6ImTS67sMaW
yRJiIJKtI+IeSA8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org