Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          rYlk6+tAT1ydkMGfHcLkQHd8ZBT0o6SA85//SYwvXdc=
Subject key identifier:   14:F1:0C:E7:39:C2:5A:5E:72:3E:97:25:95:4A:F0:E5:B2:99:65:88
Certificate issuer:       /CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
Certificate serial:       6FC2B46BA10B7F74475C0CE792CAD4079C4CBF14
Authority key identifier: 87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa
Signing time:             Sat 17 Feb 2024 05:23:53 +0000
ROA not before:           Sat 17 Feb 2024 05:18:53 +0000
ROA not after:            Sat 15 Feb 2025 05:23:53 +0000
asID:                     270946
IP address blocks:        131.108.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c2:b4:6b:a1:0b:7f:74:47:5c:0c:e7:92:ca:d4:07:9c:4c:bf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87C98FAEA3D481ABF326707163A8DC73294B8D71
        Validity
            Not Before: Feb 17 05:18:53 2024 GMT
            Not After : Feb 15 05:23:53 2025 GMT
        Subject: CN=14F10CE739C25A5E723E9725954AF0E5B2996588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:04:23:1b:ef:34:f5:a1:32:e9:66:48:66:
                    20:c0:ee:ba:c3:f6:58:10:40:09:ce:72:58:5a:f1:
                    0a:fb:5c:52:8d:83:e1:43:dd:fc:9e:ee:c5:42:e8:
                    c5:84:dc:e3:97:f7:73:dc:0d:75:4c:ce:10:4f:bb:
                    df:c1:a0:d4:65:ba:c4:2c:b2:b1:00:06:1d:07:c6:
                    2e:14:20:e7:c4:2c:d7:04:0c:9b:d3:ef:cc:09:51:
                    f6:4b:91:89:fa:92:a3:7f:a2:c8:1d:6f:a9:06:78:
                    32:c3:9d:c2:58:f0:f6:06:f1:19:30:d9:30:a4:eb:
                    c2:54:a8:13:0e:62:2b:7b:1a:02:86:96:f0:86:7c:
                    7c:cb:70:39:81:c2:17:2d:c3:0a:72:41:12:a6:b2:
                    fd:47:6a:a4:ae:7b:47:cd:6f:e1:e0:db:04:b9:e2:
                    b1:8e:4f:24:ac:2c:af:66:19:16:d1:34:ec:97:2a:
                    70:21:c7:f4:da:cb:10:67:51:56:47:6e:92:da:2d:
                    0d:18:56:5f:49:b8:3a:87:7d:ad:eb:4a:a1:89:40:
                    ae:f2:02:74:96:33:5b:c8:31:5c:fb:ae:57:a3:7f:
                    8c:0c:65:6b:d4:94:1b:f2:aa:b7:b4:c0:5d:81:8a:
                    c4:a6:6e:60:f1:b6:57:c5:7d:ef:ac:5f:71:85:13:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:0C:E7:39:C2:5A:5E:72:3E:97:25:95:4A:F0:E5:B2:99:65:88
            X509v3 Authority Key Identifier:
                keyid:87:C9:8F:AE:A3:D4:81:AB:F3:26:70:71:63:A8:DC:73:29:4B:8D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87C98FAEA3D481ABF326707163A8DC73294B8D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:0a:19:d0:8d:6b:c4:d2:9c:e0:72:8c:47:f5:18:79:b1:
         18:8e:cb:ce:43:41:d4:dc:25:45:22:3e:c8:cc:13:07:b7:a6:
         84:87:9a:cd:a2:99:07:5d:3c:d2:c4:41:f3:6f:f3:64:78:43:
         e3:d0:d2:e1:b5:bc:5b:de:74:25:88:42:fa:90:a9:c6:7a:e8:
         64:e6:ed:13:56:be:54:11:ea:e0:48:e9:8d:75:f7:9d:9c:47:
         04:2c:32:2d:68:47:98:c4:0b:e1:4a:54:08:cb:2f:02:17:f7:
         2a:82:e0:a7:88:99:e5:ac:6b:b1:09:a3:02:86:e7:7d:4e:cc:
         c2:04:32:5d:70:cf:ba:c3:57:4f:43:12:34:d7:c8:74:a9:09:
         c9:48:ab:a1:f1:77:7a:9a:86:e9:7b:53:5a:31:ca:3d:80:21:
         97:1b:95:90:49:b4:a1:52:d1:16:7f:3e:ca:27:30:67:70:0a:
         0e:20:ef:d1:f4:de:20:d7:a9:fd:c4:0d:16:2c:80:4c:a8:d1:
         4b:7e:7c:ab:cc:1d:40:d0:b6:9b:4a:aa:91:c9:47:9b:2f:f0:
         41:d0:a2:a6:68:3c:36:98:57:d9:d9:c8:a3:c8:bb:8d:f7:24:
         a5:8a:b3:a7:c9:1a:00:96:d4:6f:a7:18:c0:8a:db:0c:99:fa:
         ab:3b:9b:47
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb8K0a6ELf3RHXAznksrUB5xMvxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdDOThGQUVBM0Q0ODFBQkYzMjY3MDcxNjNBOERDNzMy
OTRCOEQ3MTAeFw0yNDAyMTcwNTE4NTNaFw0yNTAyMTUwNTIzNTNaMDMxMTAvBgNV
BAMTKDE0RjEwQ0U3MzlDMjVBNUU3MjNFOTcyNTk1NEFGMEU1QjI5OTY1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZQQjG+809aEy6WZIZiDA7rrD
9lgQQAnOclha8Qr7XFKNg+FD3fye7sVC6MWE3OOX93PcDXVMzhBPu9/BoNRlusQs
srEABh0Hxi4UIOfELNcEDJvT78wJUfZLkYn6kqN/osgdb6kGeDLDncJY8PYG8Rkw
2TCk68JUqBMOYit7GgKGlvCGfHzLcDmBwhctwwpyQRKmsv1HaqSue0fNb+Hg2wS5
4rGOTySsLK9mGRbRNOyXKnAhx/TayxBnUVZHbpLaLQ0YVl9JuDqHfa3rSqGJQK7y
AnSWM1vIMVz7rlejf4wMZWvUlBvyqre0wF2BisSmbmDxtlfFfe+sX3GFEwR1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFPEM5znCWl5yPpcllUrw5bKZZYgwHwYDVR0j
BBgwFoAUh8mPrqPUgavzJnBxY6jccylLjXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMC84N0M5OEZBRUEzRDQ4MUFCRjMyNjcwNzE2M0E4REM3MzI5NEI4RDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3Qzk4RkFFQTNENDgxQUJG
MzI2NzA3MTYzQThEQzczMjk0QjhENzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINsmTANBgkqhkiG9w0BAQsFAAOCAQEAP6cK
GdCNa8TSnOByjEf1GHmxGI7LzkNB1NwlRSI+yMwTB7emhIeazaKZB1080sRB82/z
ZHhD49DS4bW8W950JYhC+pCpxnroZObtE1a+VBHq4EjpjXX3nZxHBCwyLWhHmMQL
4UpUCMsvAhf3KoLgp4iZ5axrsQmjAobnfU7MwgQyXXDPusNXT0MSNNfIdKkJyUir
ofF3epqG6XtTWjHKPYAhlxuVkEm0oVLRFn8+yicwZ3AKDiDv0fTeINep/cQNFiyA
TKjRS358q8wdQNC2m0qqkclHmy/wQdCipmg8NphX2dnIo8i7jfckpYqzp8kaAJbU
b6cYwIrbDJn6qzubRw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:42 2025 by rpki-client