Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          Inn9hBJM9SiFKFwWlnPDmq1vXz/QNawIqrG+F8+E0F8=
Subject key identifier:   22:BD:88:F2:83:52:32:C2:0C:11:1D:A4:94:BF:18:B2:53:06:E7:9F
Certificate issuer:       /CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
Certificate serial:       57063300D53B8B113F207036804C340283B371E6
Authority key identifier: 8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     264368
IP address blocks:        131.161.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:33:00:d5:3b:8b:11:3f:20:70:36:80:4c:34:02:83:b3:71:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F47FA7C5067FB6330CCB52B4B88EA178922AAE5
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=22BD88F2835232C20C111DA494BF18B25306E79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:30:67:96:7b:a7:12:a0:9e:16:6e:6e:89:41:
                    93:ea:e5:e6:55:27:27:d1:99:c3:1f:29:fd:74:c1:
                    22:1f:be:0e:be:08:90:8f:b8:6c:74:29:17:70:08:
                    4b:89:38:89:66:27:e3:fa:32:8b:15:2f:d1:e6:c0:
                    30:ff:66:09:bd:85:ee:41:0f:23:77:7e:da:65:f5:
                    09:86:0a:c7:16:83:36:07:ac:95:0a:e7:2f:bf:80:
                    a9:94:f9:73:5f:f9:73:e7:ae:77:02:c0:aa:13:7d:
                    e2:48:6c:b2:29:8d:1b:be:bc:eb:e7:e1:be:4c:54:
                    27:89:91:0e:77:18:35:67:74:2c:70:d4:b8:6c:7a:
                    10:1e:cb:17:63:ed:00:70:a0:b3:d0:c4:53:a0:13:
                    0f:44:21:c3:d3:a4:04:54:b3:59:70:73:1a:d2:76:
                    f6:5f:9d:95:be:86:30:d3:bc:d5:37:c1:5b:35:6d:
                    90:a2:1e:f1:62:74:7a:18:51:c8:82:32:78:71:eb:
                    40:a3:9a:1e:15:f1:7c:c3:f2:df:d1:5a:66:39:dd:
                    79:1c:92:c5:0a:59:6e:56:6c:35:51:8c:e8:a3:0b:
                    cb:cb:18:b0:a2:3b:b2:44:a6:b0:ea:d8:47:d3:0a:
                    72:66:74:ec:9a:43:a9:d9:10:f2:94:64:1e:aa:e4:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:88:F2:83:52:32:C2:0C:11:1D:A4:94:BF:18:B2:53:06:E7:9F
            X509v3 Authority Key Identifier:
                keyid:8F:47:FA:7C:50:67:FB:63:30:CC:B5:2B:4B:88:EA:17:89:22:AA:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F47FA7C5067FB6330CCB52B4B88EA178922AAE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/0/3133312e3136312e35312e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:0a:fa:7b:a0:ab:3f:dc:64:28:88:a9:f1:49:7c:f2:ec:
         cb:28:db:35:2a:20:09:ae:0f:f5:9c:16:cc:2e:20:e8:53:eb:
         94:39:df:67:2a:10:29:d1:dd:4f:08:2f:44:fd:a1:48:00:58:
         00:76:38:fb:09:c5:99:f3:73:6e:e5:df:e8:5c:34:1d:c0:68:
         59:ea:f7:43:9a:dd:43:00:55:23:b0:cd:a5:4e:29:77:4f:f0:
         c2:9c:a3:ee:e5:4c:1a:f0:91:67:b9:4d:65:ac:62:c3:72:dd:
         65:9a:16:6b:8a:ba:a5:d6:1a:bd:1a:45:3b:58:cf:16:8a:4c:
         be:84:19:88:49:55:6b:de:08:dc:b3:20:6c:22:8d:00:70:89:
         ff:75:5e:d0:ab:41:13:66:b5:5c:35:a0:30:ea:d5:0e:fc:b7:
         20:bf:78:71:98:ef:f5:15:f9:ac:25:a2:94:32:ed:d2:a8:b6:
         38:ce:66:b4:9f:36:60:e1:9d:45:eb:03:16:46:4c:3e:72:c3:
         1b:91:bd:49:06:4b:2a:75:d4:57:11:3c:5e:82:83:3f:bb:a7:
         d3:ba:71:77:0d:3e:18:f5:c0:44:41:9e:b9:43:56:4e:67:bf:
         9c:b5:85:bd:66:de:4a:94:3d:1d:29:d4:de:b3:da:3e:12:30:
         0c:69:e1:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVwYzANU7ixE/IHA2gEw0AoOzceYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0N0ZBN0M1MDY3RkI2MzMwQ0NCNTJCNEI4OEVBMTc4
OTIyQUFFNTAeFw0yNDAzMDUxNzU0NTFaFw0yNTAzMDQxNzU5NTFaMDMxMTAvBgNV
BAMTKDIyQkQ4OEYyODM1MjMyQzIwQzExMURBNDk0QkYxOEIyNTMwNkU3OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4MGeWe6cSoJ4Wbm6JQZPq5eZV
JyfRmcMfKf10wSIfvg6+CJCPuGx0KRdwCEuJOIlmJ+P6MosVL9HmwDD/Zgm9he5B
DyN3ftpl9QmGCscWgzYHrJUK5y+/gKmU+XNf+XPnrncCwKoTfeJIbLIpjRu+vOvn
4b5MVCeJkQ53GDVndCxw1LhsehAeyxdj7QBwoLPQxFOgEw9EIcPTpARUs1lwcxrS
dvZfnZW+hjDTvNU3wVs1bZCiHvFidHoYUciCMnhx60Cjmh4V8XzD8t/RWmY53Xkc
ksUKWW5WbDVRjOijC8vLGLCiO7JEprDq2EfTCnJmdOyaQ6nZEPKUZB6q5FLlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIr2I8oNSMsIMER2klL8YslMG558wHwYDVR0j
BBgwFoAUj0f6fFBn+2MwzLUrS4jqF4kiquUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRvQ2M1VmdwendrSlAzZjhzd0I1VGNjZVhMQk1IUGp1WFp3SDRUc1pM
UG8vMC84RjQ3RkE3QzUwNjdGQjYzMzBDQ0I1MkI0Qjg4RUExNzg5MjJBQUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGNDdGQTdDNTA2N0ZCNjMz
MENDQjUyQjRCODhFQTE3ODkyMkFBRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0b0NjNVZncHp3a0pQM2Y4c3dCNVRjY2VYTEJNSFBqdVhad0g0VHNaTFBvLzAv
MzEzMzMxMmUzMTM2MzEyZTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDoTMwDQYJKoZIhvcNAQELBQADggEBAKTeCvp7
oKs/3GQoiKnxSXzy7Mso2zUqIAmuD/WcFswuIOhT65Q532cqECnR3U8IL0T9oUgA
WAB2OPsJxZnzc27l3+hcNB3AaFnq90Oa3UMAVSOwzaVOKXdP8MKco+7lTBrwkWe5
TWWsYsNy3WWaFmuKuqXWGr0aRTtYzxaKTL6EGYhJVWveCNyzIGwijQBwif91XtCr
QRNmtVw1oDDq1Q78tyC/eHGY7/UV+awlopQy7dKotjjOZrSfNmDhnUXrAxZGTD5y
wxuRvUkGSyp11FcRPF6Cgz+7p9O6cXcNPhj1wERBnrlDVk5nv5y1hb1m3kqUPR0p
1N6z2j4SMAxp4Yo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org