Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa (raw, json)
Hash identifier:          JVUxON8rVD0B7nGXrEDdXeuvS3xLpbUdYWBKKrd79Uw=
Subject key identifier:   D1:08:D4:34:8D:9F:04:0D:22:D3:C5:1F:21:66:EB:92:93:EA:55:E8
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       738C29B4ABAAEEB4ECAB7D53012501EBC640BE4F
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
Signing time:             Sat 18 Mar 2023 04:59:55 +0000
ROA not before:           Sat 18 Mar 2023 04:54:55 +0000
ROA not after:            Sat 16 Mar 2024 04:59:55 +0000
asID:                     270946
IP address blocks:        131.108.152.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:29:b4:ab:aa:ee:b4:ec:ab:7d:53:01:25:01:eb:c6:40:be:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Mar 18 04:54:55 2023 GMT
            Not After : Mar 16 04:59:55 2024 GMT
        Subject: CN=D108D4348D9F040D22D3C51F2166EB9293EA55E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:f8:9b:a9:06:8d:e9:a9:a8:9a:37:6c:25:
                    85:a1:58:2a:70:33:b5:08:c8:b5:fc:c4:e1:ca:cd:
                    d8:3e:e5:5b:6e:f2:5d:6a:cb:ad:f8:94:3d:8f:53:
                    1e:8d:6e:b5:cb:7d:18:4a:56:3f:da:b6:ad:7c:fc:
                    d9:1f:6e:3e:e1:12:7a:b3:8f:70:6c:7b:a2:a0:de:
                    b8:96:3c:1b:dc:f9:38:0e:5b:6e:48:e8:3a:61:9d:
                    49:00:d3:c1:04:c5:22:04:2a:20:00:f3:b6:a1:46:
                    c2:fa:b5:5b:8f:42:9f:41:53:ba:0b:83:82:97:4d:
                    75:81:e7:a8:9d:d2:db:f0:eb:14:c1:1e:2b:f5:02:
                    f7:d9:2c:2e:56:dc:a4:04:1e:97:ec:1b:b4:69:6c:
                    e5:b4:7b:28:b3:aa:e9:d1:d1:2c:3a:89:38:94:49:
                    f7:cb:f6:79:3a:53:ab:e6:f2:d7:ba:06:9f:b6:3a:
                    5a:1a:7e:cc:f7:bb:1d:b1:78:b5:e6:be:9e:c5:2e:
                    93:ed:c2:06:7e:1a:58:76:09:4c:7c:1a:04:47:a1:
                    d8:af:8b:f0:b9:42:e6:c5:39:b0:e2:7b:94:a3:63:
                    3b:5f:51:ea:f0:f7:8c:b8:bb:4d:d5:3c:17:87:28:
                    3a:21:bb:f9:a7:09:db:3d:16:1e:76:e7:93:c9:49:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:D4:34:8D:9F:04:0D:22:D3:C5:1F:21:66:EB:92:93:EA:55:E8
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:58:be:1d:73:96:04:23:cf:c1:0f:c3:e2:b9:29:9b:19:9c:
         90:1d:50:4c:55:20:f4:1c:8e:c5:7b:94:df:9f:dc:d6:dd:d1:
         87:b7:52:05:a3:30:73:aa:36:6d:a5:31:ca:a9:4f:1e:4e:7a:
         ff:3d:a0:9c:d9:5d:9d:43:4c:e6:c2:7d:f8:69:1f:cf:58:4d:
         1c:9b:85:bc:ce:70:e7:0c:41:e9:38:5c:b6:51:fe:2a:75:4f:
         85:7e:b8:2e:6e:2c:33:95:c4:8c:c6:08:70:19:d8:7a:ed:39:
         13:da:c7:68:df:54:4d:1f:5d:34:e5:fa:5a:43:e1:9c:67:6a:
         15:3f:ca:31:9a:d8:f0:c0:07:2b:95:2e:6a:7c:3b:e0:89:2b:
         fe:4a:df:83:da:03:d1:13:37:a0:16:0a:94:f5:14:52:16:56:
         6a:66:44:69:74:c2:c5:b1:65:9e:d9:0f:9c:09:17:17:d3:22:
         8f:dd:b3:e3:b5:12:15:2a:99:95:7f:2b:84:1c:03:50:41:0b:
         7d:dc:4f:14:24:ff:c1:29:46:12:74:20:cb:92:8c:bd:ad:f6:
         25:ab:e0:10:96:fb:46:7f:63:bb:5c:89:60:04:1d:ce:a3:05:
         6a:eb:16:5a:00:fb:27:a2:a1:b2:80:f3:43:ed:15:05:18:f5:
         c8:24:fd:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc4wptKuq7rTsq31TASUB68ZAvk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdDOThGQUVBM0Q0ODFBQkYzMjY3MDcxNjNBOERDNzMy
OTRCOEQ3MTAeFw0yMzAzMTgwNDU0NTVaFw0yNDAzMTYwNDU5NTVaMDMxMTAvBgNV
BAMTKEQxMDhENDM0OEQ5RjA0MEQyMkQzQzUxRjIxNjZFQjkyOTNFQTU1RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdvibqQaN6amomjdsJYWhWCpw
M7UIyLX8xOHKzdg+5Vtu8l1qy634lD2PUx6NbrXLfRhKVj/atq18/Nkfbj7hEnqz
j3Bse6Kg3riWPBvc+TgOW25I6DphnUkA08EExSIEKiAA87ahRsL6tVuPQp9BU7oL
g4KXTXWB56id0tvw6xTBHiv1AvfZLC5W3KQEHpfsG7RpbOW0eyizqunR0Sw6iTiU
SffL9nk6U6vm8te6Bp+2Oloafsz3ux2xeLXmvp7FLpPtwgZ+Glh2CUx8GgRHodiv
i/C5QubFObDie5SjYztfUerw94y4u03VPBeHKDohu/mnCds9Fh5255PJSWHzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0QjUNI2fBA0i08UfIWbrkpPqVegwHwYDVR0j
BBgwFoAUh8mPrqPUgavzJnBxY6jccylLjXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMC84N0M5OEZBRUEzRDQ4MUFCRjMyNjcwNzE2M0E4REM3MzI5NEI4RDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3Qzk4RkFFQTNENDgxQUJG
MzI2NzA3MTYzQThEQzczMjk0QjhENzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsmDANBgkqhkiG9w0BAQsFAAOCAQEAF1i+
HXOWBCPPwQ/D4rkpmxmckB1QTFUg9ByOxXuU35/c1t3Rh7dSBaMwc6o2baUxyqlP
Hk56/z2gnNldnUNM5sJ9+Gkfz1hNHJuFvM5w5wxB6ThctlH+KnVPhX64Lm4sM5XE
jMYIcBnYeu05E9rHaN9UTR9dNOX6WkPhnGdqFT/KMZrY8MAHK5Uuanw74Ikr/krf
g9oD0RM3oBYKlPUUUhZWamZEaXTCxbFlntkPnAkXF9Mij92z47USFSqZlX8rhBwD
UEELfdxPFCT/wSlGEnQgy5KMva32JavgEJb7Rn9ju1yJYAQdzqMFausWWgD7J6Kh
soDzQ+0VBRj1yCT9jQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:59 2025 by rpki-client