Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa (raw, json)
Hash identifier:          UrkIuETt0hQ6QxzAnTAfMW3ZbOhb9+RqnnFZ3tCUGSs=
Subject key identifier:   1A:05:DD:FD:60:CF:FA:74:3F:11:94:E7:88:D3:1C:2B:8F:E6:70:A8
Certificate issuer:       /CN=1315C278EA55EBC9FF08F152612C3E2F7432AF22
Certificate serial:       301BFFD6180B79EB72F92D379B4D62312C71DC68
Authority key identifier: 13:15:C2:78:EA:55:EB:C9:FF:08:F1:52:61:2C:3E:2F:74:32:AF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa
Signing time:             Tue 11 Apr 2023 15:02:57 +0000
ROA not before:           Tue 11 Apr 2023 14:57:57 +0000
ROA not after:            Tue 09 Apr 2024 15:02:57 +0000
asID:                     61785
IP address blocks:        201.131.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1b:ff:d6:18:0b:79:eb:72:f9:2d:37:9b:4d:62:31:2c:71:dc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1315C278EA55EBC9FF08F152612C3E2F7432AF22
        Validity
            Not Before: Apr 11 14:57:57 2023 GMT
            Not After : Apr  9 15:02:57 2024 GMT
        Subject: CN=1A05DDFD60CFFA743F1194E788D31C2B8FE670A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:73:5c:ce:ce:c9:0e:21:67:cd:98:de:2d:
                    0f:d6:35:c1:29:58:50:90:82:55:e6:3b:ad:e0:d3:
                    03:ff:69:25:93:1a:68:70:63:f3:19:8a:fe:fe:54:
                    7c:f6:89:56:a7:54:6f:2c:47:03:91:55:97:54:7c:
                    fd:df:5d:3f:d4:e5:77:e8:22:3b:d6:80:b4:ac:1e:
                    d5:fd:61:cf:fa:e5:7e:18:6a:48:bb:02:b2:f7:0c:
                    0f:6d:94:7d:60:2d:59:ec:d4:9b:0f:54:d7:b2:93:
                    b5:fa:4b:d5:86:0b:88:77:78:5a:3f:2f:0e:72:79:
                    51:be:54:85:f8:13:c0:8b:fb:84:c2:cc:db:83:70:
                    29:cd:7f:b0:8e:c9:be:89:90:1d:04:b4:7d:85:77:
                    db:42:20:b9:36:2f:a4:c4:43:25:29:d4:9f:c2:78:
                    90:48:73:08:4a:f8:03:52:94:0a:c7:96:1f:a9:e7:
                    43:af:72:09:b7:2a:ca:2f:c7:8f:fb:01:92:50:7d:
                    8d:25:b1:fc:0e:13:bf:8e:35:79:32:ed:aa:d4:ac:
                    72:c9:ed:e8:90:f8:bf:c8:47:3a:5e:46:ba:38:01:
                    9f:dd:69:69:70:80:57:c5:e8:02:80:45:e5:36:2f:
                    8f:d3:ee:25:12:62:3a:7e:81:92:9c:dc:62:e9:2f:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:DD:FD:60:CF:FA:74:3F:11:94:E7:88:D3:1C:2B:8F:E6:70:A8
            X509v3 Authority Key Identifier:
                keyid:13:15:C2:78:EA:55:EB:C9:FF:08:F1:52:61:2C:3E:2F:74:32:AF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32332d3233203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:c7:c7:37:be:7a:80:d4:ae:32:5b:55:28:83:6f:c1:2a:4b:
         56:d6:14:93:b2:c8:90:81:43:00:7a:26:ca:70:05:5a:71:a3:
         e5:be:c9:e7:f6:1c:b5:cb:ee:7f:cb:42:06:28:38:5f:8f:ca:
         32:ac:91:80:09:39:d1:d8:27:17:d1:bd:04:84:0b:a5:4d:db:
         f6:e4:a1:e9:fd:26:ca:bc:2b:92:57:6f:20:3f:f8:71:2b:c5:
         78:a2:14:13:70:fe:e2:88:7c:13:e6:fa:2f:0e:74:03:d3:7d:
         62:e9:bd:4c:d0:5c:d9:54:c2:6a:05:05:9b:9a:70:2f:da:79:
         57:8f:56:d0:3f:82:7d:9f:82:c5:8d:11:8d:e1:b1:b5:30:77:
         18:54:c0:a5:60:4c:73:50:50:4d:f2:a8:17:6f:ba:d1:4b:7a:
         a3:0e:a3:b8:27:c8:dc:d0:91:7d:6b:7b:c0:46:cb:5c:1e:3a:
         a2:cb:1b:19:c3:41:ed:fb:a4:26:bf:5a:9f:0e:de:a2:f2:06:
         31:f3:2a:9b:82:9e:32:e5:26:25:48:55:af:36:9e:08:6e:bd:
         ca:54:6f:4b:14:80:f7:61:1e:eb:d5:ca:2d:ab:d8:45:41:31:
         e3:2f:09:ce:59:32:ee:fb:3a:db:b5:3a:9b:ae:71:a5:d4:e2:
         9d:d9:10:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMBv/1hgLeety+S03m01iMSxx3GgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMxNUMyNzhFQTU1RUJDOUZGMDhGMTUyNjEyQzNFMkY3
NDMyQUYyMjAeFw0yMzA0MTExNDU3NTdaFw0yNDA0MDkxNTAyNTdaMDMxMTAvBgNV
BAMTKDFBMDVEREZENjBDRkZBNzQzRjExOTRFNzg4RDMxQzJCOEZFNjcwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHXNczs7JDiFnzZjeLQ/WNcEp
WFCQglXmO63g0wP/aSWTGmhwY/MZiv7+VHz2iVanVG8sRwORVZdUfP3fXT/U5Xfo
IjvWgLSsHtX9Yc/65X4Yaki7ArL3DA9tlH1gLVns1JsPVNeyk7X6S9WGC4h3eFo/
Lw5yeVG+VIX4E8CL+4TCzNuDcCnNf7COyb6JkB0EtH2Fd9tCILk2L6TEQyUp1J/C
eJBIcwhK+ANSlArHlh+p50Ovcgm3Ksovx4/7AZJQfY0lsfwOE7+ONXky7arUrHLJ
7eiQ+L/IRzpeRro4AZ/daWlwgFfF6AKAReU2L4/T7iUSYjp+gZKc3GLpL+cJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGgXd/WDP+nQ/EZTniNMcK4/mcKgwHwYDVR0j
BBgwFoAUExXCeOpV68n/CPFSYSw+L3QyryIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRyUE5CWDdzcEt3OVZFRkd0czViR3JnTWhnWWdtcFEzUzZRVWZkTjd2
NDUvMC8xMzE1QzI3OEVBNTVFQkM5RkYwOEYxNTI2MTJDM0UyRjc0MzJBRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzMTVDMjc4RUE1NUVCQzlG
RjA4RjE1MjYxMkMzRTJGNzQzMkFGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0clBOQlg3c3BLdzlWRUZHdHM1YkdyZ01oZ1lnbXBRM1M2UVVmZE43djQ1LzAv
MzIzMDMxMmUzMTMzMzEyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg5gwDQYJKoZIhvcNAQELBQADggEBALnHxze+
eoDUrjJbVSiDb8EqS1bWFJOyyJCBQwB6JspwBVpxo+W+yef2HLXL7n/LQgYoOF+P
yjKskYAJOdHYJxfRvQSEC6VN2/bkoen9Jsq8K5JXbyA/+HErxXiiFBNw/uKIfBPm
+i8OdAPTfWLpvUzQXNlUwmoFBZuacC/aeVePVtA/gn2fgsWNEY3hsbUwdxhUwKVg
THNQUE3yqBdvutFLeqMOo7gnyNzQkX1re8BGy1weOqLLGxnDQe37pCa/Wp8O3qLy
BjHzKpuCnjLlJiVIVa82nghuvcpUb0sUgPdhHuvVyi2r2EVBMeMvCc5ZMu77Otu1
OpuucaXU4p3ZEFY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org