Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa (raw, json)
Hash identifier:          hYVfc7xRfQepYZeHCDWIvQ8Ye1OOpJC2KvDfCqbikYE=
Subject key identifier:   0E:57:D4:82:DF:31:10:39:DC:1B:86:9C:43:FF:B1:B0:CE:C0:3C:38
Certificate issuer:       /CN=895CE9CC028EB09A717FF63AB3D6805F54210796
Certificate serial:       2AD35393B52A40CABFE8A97C197591C867E26A75
Authority key identifier: 89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa
Signing time:             Wed 14 Feb 2024 15:25:15 +0000
ROA not before:           Wed 14 Feb 2024 15:20:15 +0000
ROA not after:            Wed 12 Feb 2025 15:25:15 +0000
asID:                     61785
IP address blocks:        201.131.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d3:53:93:b5:2a:40:ca:bf:e8:a9:7c:19:75:91:c8:67:e2:6a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895CE9CC028EB09A717FF63AB3D6805F54210796
        Validity
            Not Before: Feb 14 15:20:15 2024 GMT
            Not After : Feb 12 15:25:15 2025 GMT
        Subject: CN=0E57D482DF311039DC1B869C43FFB1B0CEC03C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:8b:16:22:6d:ce:74:d5:19:f2:55:3b:09:
                    a2:d6:2c:94:05:66:7c:51:47:69:3f:c9:0a:ff:6b:
                    f6:ce:99:cb:a4:5a:bd:fa:4e:1d:eb:69:02:2b:ae:
                    70:23:81:00:a2:fe:06:ce:ec:a2:f4:c3:e8:d3:cd:
                    75:77:66:ee:b0:58:c8:33:63:f1:7b:83:67:ac:38:
                    dd:67:bd:75:87:3c:93:a7:ac:84:0e:4c:9d:fb:44:
                    02:b0:06:08:f6:9c:8a:5e:92:9a:a1:47:f6:5c:a4:
                    a2:2c:64:c4:f0:2f:6e:0f:3a:e6:09:04:7b:2c:9e:
                    e3:8d:27:b9:2b:38:f8:d9:7e:48:bb:d2:37:3f:2c:
                    d4:37:fc:f0:66:2d:4c:86:eb:11:f1:6d:7b:ce:30:
                    10:43:fb:df:f3:2d:10:b7:c5:d7:5b:29:73:d9:c5:
                    92:19:10:9d:26:27:0b:e1:be:94:76:32:f3:dc:e5:
                    f7:7d:20:d5:b9:a1:89:60:a0:f8:a6:42:7a:24:4e:
                    28:c1:fc:a3:45:24:bd:86:7e:59:a5:b9:b6:16:ce:
                    52:16:2b:83:73:8a:6e:5e:c4:ed:17:54:6f:b7:98:
                    0c:e1:c9:c0:7f:bb:71:89:a1:64:d0:c2:8d:dc:5a:
                    aa:cb:13:14:8f:70:6c:7e:1e:36:9c:7a:17:c3:84:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:D4:82:DF:31:10:39:DC:1B:86:9C:43:FF:B1:B0:CE:C0:3C:38
            X509v3 Authority Key Identifier:
                keyid:89:5C:E9:CC:02:8E:B0:9A:71:7F:F6:3A:B3:D6:80:5F:54:21:07:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/895CE9CC028EB09A717FF63AB3D6805F54210796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895CE9CC028EB09A717FF63AB3D6805F54210796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:11:9f:da:32:b1:db:41:a5:05:d9:f9:ca:2e:2a:4b:b9:
         70:35:f4:0d:56:78:63:ef:0a:1c:6b:10:e2:a1:83:ed:49:f9:
         d7:a0:db:37:60:d2:94:fc:bb:d0:6b:3b:08:96:40:f4:ae:d9:
         25:67:2d:12:76:6a:03:4c:7d:84:fd:3f:51:67:fa:2e:39:42:
         1c:73:ef:03:cd:3f:41:aa:9c:f4:53:97:fd:9f:13:c7:9b:3a:
         f3:b5:7e:57:09:5d:1c:fe:9d:2d:97:a3:31:77:8d:b3:89:60:
         49:e6:15:00:30:91:78:bc:73:d7:81:b6:25:dd:d6:95:33:fd:
         de:d8:d8:88:d0:67:83:5e:ee:dd:dc:3e:a0:82:15:a1:dd:b8:
         de:dc:4d:69:99:07:6f:97:3a:5d:fc:d9:57:bb:87:19:62:b7:
         3e:1b:78:09:13:9d:03:d0:14:66:38:df:3b:b4:0f:41:1c:54:
         b1:11:94:79:0b:df:da:7e:b9:1a:ff:54:c1:c4:0a:3d:77:c8:
         f6:aa:e8:a9:8e:7b:60:ed:7c:2b:89:81:4e:d0:e5:b7:9d:aa:
         f9:9e:50:21:64:40:4d:cc:5f:b5:c0:8b:ee:cb:cf:3c:a6:00:
         a7:c6:39:1f:b3:12:f2:f7:1d:13:9a:a4:4c:68:cf:08:e2:f8:
         a8:cb:7f:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKtNTk7UqQMq/6Kl8GXWRyGfianUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk1Q0U5Q0MwMjhFQjA5QTcxN0ZGNjNBQjNENjgwNUY1
NDIxMDc5NjAeFw0yNDAyMTQxNTIwMTVaFw0yNTAyMTIxNTI1MTVaMDMxMTAvBgNV
BAMTKDBFNTdENDgyREYzMTEwMzlEQzFCODY5QzQzRkZCMUIwQ0VDMDNDMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+4sWIm3OdNUZ8lU7CaLWLJQF
ZnxRR2k/yQr/a/bOmcukWr36Th3raQIrrnAjgQCi/gbO7KL0w+jTzXV3Zu6wWMgz
Y/F7g2esON1nvXWHPJOnrIQOTJ37RAKwBgj2nIpekpqhR/ZcpKIsZMTwL24POuYJ
BHssnuONJ7krOPjZfki70jc/LNQ3/PBmLUyG6xHxbXvOMBBD+9/zLRC3xddbKXPZ
xZIZEJ0mJwvhvpR2MvPc5fd9INW5oYlgoPimQnokTijB/KNFJL2GflmlubYWzlIW
K4Nzim5exO0XVG+3mAzhycB/u3GJoWTQwo3cWqrLExSPcGx+HjacehfDhEZvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDlfUgt8xEDncG4acQ/+xsM7APDgwHwYDVR0j
BBgwFoAUiVzpzAKOsJpxf/Y6s9aAX1QhB5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2
NDUvMC84OTVDRTlDQzAyOEVCMDlBNzE3RkY2M0FCM0Q2ODA1RjU0MjEwNzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5NUNFOUNDMDI4RUIwOUE3
MTdGRjYzQUIzRDY4MDVGNTQyMTA3OTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0clBOQlg3c3BLdzlWRUZHdHM1YkdyZ01oZ1lnbXBRM1M2UVVmZE43djQ1LzAv
MzIzMDMxMmUzMTMzMzEyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJg5gwDQYJKoZIhvcNAQELBQADggEBAIG1EZ/a
MrHbQaUF2fnKLipLuXA19A1WeGPvChxrEOKhg+1J+deg2zdg0pT8u9BrOwiWQPSu
2SVnLRJ2agNMfYT9P1Fn+i45Qhxz7wPNP0GqnPRTl/2fE8ebOvO1flcJXRz+nS2X
ozF3jbOJYEnmFQAwkXi8c9eBtiXd1pUz/d7Y2IjQZ4Ne7t3cPqCCFaHduN7cTWmZ
B2+XOl382Ve7hxlitz4beAkTnQPQFGY43zu0D0EcVLERlHkL39p+uRr/VMHECj13
yPaq6KmOe2DtfCuJgU7Q5bedqvmeUCFkQE3MX7XAi+7LzzymAKfGOR+zEvL3HROa
pExozwji+KjLfxc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org