Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa
File:                     3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          dB7oDBT6ZpLwPx4WunMpSmcOTSrQGzjA7RvzIkse0qI=
Subject key identifier:   71:23:BD:3D:32:40:58:34:C4:F0:E1:29:4E:EA:01:35:E3:26:8A:6D
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       60614EA9454E03D7B77D8B193A47BBB45C72E007
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:22 +0000
ROA not before:           Fri 15 Mar 2024 16:25:22 +0000
ROA not after:            Fri 14 Mar 2025 16:30:22 +0000
asID:                     22177
IP address blocks:        131.100.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:4e:a9:45:4e:03:d7:b7:7d:8b:19:3a:47:bb:b4:5c:72:e0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:22 2024 GMT
            Not After : Mar 14 16:30:22 2025 GMT
        Subject: CN=7123BD3D32405834C4F0E1294EEA0135E3268A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:bb:b8:65:bf:c9:5e:88:fd:43:12:11:6d:
                    8f:8b:d6:76:e9:c6:b3:78:7f:ae:4e:3c:ea:c2:22:
                    9c:2a:ce:a7:af:df:8b:6e:22:8c:96:70:8e:14:98:
                    d9:cb:1d:b7:03:92:30:2d:fd:81:7d:8b:b4:83:aa:
                    5b:9d:32:62:63:5c:f2:0a:c5:00:c8:dd:d7:3d:12:
                    3e:e8:68:16:50:7f:d0:2e:af:58:06:2a:57:14:79:
                    82:ab:57:55:f1:c7:63:7b:60:5c:d4:54:fb:40:66:
                    d6:ca:03:40:68:c6:ed:a5:f3:39:c7:f3:d2:ab:b9:
                    7f:65:2d:7a:db:c9:03:0c:f2:59:5f:a8:4d:50:4a:
                    ad:79:0a:85:c8:b4:8e:55:27:ea:80:e8:41:c7:91:
                    3e:4a:cf:4f:5b:6a:aa:62:af:4d:e7:06:75:e5:71:
                    aa:29:3f:68:d4:84:c7:e9:3c:10:86:0b:88:fa:7f:
                    ee:d4:97:33:96:5e:c5:d1:fe:aa:81:b4:e8:49:96:
                    34:64:3a:a7:a2:7d:d0:94:12:84:ae:6e:63:21:41:
                    db:3a:28:74:2a:38:7e:15:8d:c2:c5:83:50:af:27:
                    94:9b:5f:89:6e:a8:f1:68:3d:45:8b:e8:93:40:58:
                    b1:a8:f5:9c:70:a8:d8:5a:98:cf:ea:7f:b0:a9:1b:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:BD:3D:32:40:58:34:C4:F0:E1:29:4E:EA:01:35:E3:26:8A:6D
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:18:ea:ed:64:df:71:31:ae:e4:8b:dd:9b:63:9b:68:81:
         d5:53:af:84:e1:38:7d:10:42:84:48:3a:07:fa:3a:ef:e3:f0:
         fc:37:c0:3d:3e:95:51:1f:71:ef:fd:3c:05:a7:e2:92:e8:56:
         66:be:66:ae:a8:d3:f6:45:62:47:fd:9b:63:2e:a3:3b:d4:25:
         7d:54:cd:9b:78:a4:97:e3:b9:f1:33:47:a8:31:dd:6d:9d:07:
         94:b4:cf:52:52:c5:bf:ed:49:2a:6a:96:51:fd:ba:1c:72:31:
         60:18:e4:c4:11:19:eb:bb:0d:83:1f:68:26:a3:3b:c4:ab:48:
         5f:14:61:98:37:4a:17:cb:16:b8:6d:0d:c5:6f:5b:f7:7f:22:
         a1:d9:a6:08:73:6f:ff:db:3e:9c:41:0f:ba:f9:a2:da:a1:94:
         23:46:c1:fb:d2:61:89:15:e5:c9:17:87:de:02:fc:01:00:e2:
         63:2a:c9:05:3d:36:a7:56:cc:51:67:12:27:b4:d8:e9:60:8e:
         c0:ae:02:f4:5e:58:8a:b3:4c:92:1b:1d:9d:db:0f:24:f6:9a:
         17:2f:22:a1:ca:58:67:c3:fa:f3:ec:3b:c9:11:fa:9a:ab:b0:
         4d:42:65:3d:0b:06:3a:3f:2e:0c:6f:db:f6:d3:be:76:25:ea:
         b8:f1:8a:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYGFOqUVOA9e3fYsZOke7tFxy4AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yNDAzMTUxNjI1MjJaFw0yNTAzMTQxNjMwMjJaMDMxMTAvBgNV
BAMTKDcxMjNCRDNEMzI0MDU4MzRDNEYwRTEyOTRFRUEwMTM1RTMyNjhBNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMLu4Zb/JXoj9QxIRbY+L1nbp
xrN4f65OPOrCIpwqzqev34tuIoyWcI4UmNnLHbcDkjAt/YF9i7SDqludMmJjXPIK
xQDI3dc9Ej7oaBZQf9Aur1gGKlcUeYKrV1Xxx2N7YFzUVPtAZtbKA0Boxu2l8znH
89KruX9lLXrbyQMM8llfqE1QSq15CoXItI5VJ+qA6EHHkT5Kz09baqpir03nBnXl
caopP2jUhMfpPBCGC4j6f+7UlzOWXsXR/qqBtOhJljRkOqeifdCUEoSubmMhQds6
KHQqOH4VjcLFg1CvJ5SbX4luqPFoPUWL6JNAWLGo9ZxwqNhamM/qf7CpG5y3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcSO9PTJAWDTE8OEpTuoBNeMmim0wHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDZK0wDQYJKoZIhvcNAQELBQADggEBACniGOrt
ZN9xMa7ki92bY5togdVTr4ThOH0QQoRIOgf6Ou/j8Pw3wD0+lVEfce/9PAWn4pLo
Vma+Zq6o0/ZFYkf9m2MuozvUJX1UzZt4pJfjufEzR6gx3W2dB5S0z1JSxb/tSSpq
llH9uhxyMWAY5MQRGeu7DYMfaCajO8SrSF8UYZg3ShfLFrhtDcVvW/d/IqHZpghz
b//bPpxBD7r5otqhlCNGwfvSYYkV5ckXh94C/AEA4mMqyQU9NqdWzFFnEie02Olg
jsCuAvReWIqzTJIbHZ3bDyT2mhcvIqHKWGfD+vPsO8kR+pqrsE1CZT0LBjo/Lgxv
2/bTvnYl6rjxioA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org