Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa
File:                     3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          UBdoEahDasBU7mccIPoYTmMJJPGW2OIvZullvC21SOw=
Subject key identifier:   43:56:E3:7F:E3:1B:F9:95:7D:27:B3:28:0C:5A:0F:1B:AF:75:85:5E
Certificate issuer:       /CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
Certificate serial:       2EA63288D68093ABE0A0C521CAC5DF01073D3CCA
Authority key identifier: 8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa
Signing time:             Mon 11 Mar 2024 20:42:01 +0000
ROA not before:           Mon 11 Mar 2024 20:37:01 +0000
ROA not after:            Mon 10 Mar 2025 20:42:01 +0000
asID:                     264491
IP address blocks:        131.255.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a6:32:88:d6:80:93:ab:e0:a0:c5:21:ca:c5:df:01:07:3d:3c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2C77205EE6970E9E8839D552B00BD6F1128E95
        Validity
            Not Before: Mar 11 20:37:01 2024 GMT
            Not After : Mar 10 20:42:01 2025 GMT
        Subject: CN=4356E37FE31BF9957D27B3280C5A0F1BAF75855E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6b:cd:47:d7:60:25:fb:e8:06:0d:d7:e8:51:
                    1c:c4:11:bb:31:8d:06:57:e1:8f:21:b9:07:c7:20:
                    a6:8e:07:2a:76:c8:8b:89:de:39:eb:98:6a:94:b1:
                    72:be:bb:19:83:66:e7:62:91:e5:21:48:97:86:13:
                    85:bf:dd:ba:28:01:26:d8:05:af:b9:3e:2e:09:16:
                    6f:db:ad:6d:11:9c:ba:87:32:b1:fa:8d:fa:ca:a1:
                    dc:8d:a5:e9:51:f3:ff:7f:4a:de:5d:22:12:d5:b8:
                    ec:0f:97:27:04:7d:9c:f3:8d:bc:13:a6:c3:bd:85:
                    21:66:5f:d3:24:0d:25:3b:26:b9:e9:35:b8:44:e9:
                    67:c3:23:f6:9b:2a:a6:fa:63:64:f4:77:04:1c:4f:
                    5d:d1:52:91:a1:0f:92:04:1c:75:8e:b8:31:82:62:
                    20:a4:98:56:09:5b:d5:82:40:25:0b:58:8c:5c:09:
                    74:f9:2a:b4:8f:79:6c:9c:68:49:be:62:9f:e6:0c:
                    d6:b0:1f:17:20:07:de:97:ee:5a:68:36:7a:c4:fa:
                    10:59:33:21:e2:69:0d:e7:3a:af:0b:fa:96:7f:02:
                    7c:49:e0:d4:60:38:9a:17:da:02:5a:b6:12:2d:02:
                    3a:e4:9d:f1:c5:48:db:8d:b7:25:f7:9c:ba:dd:86:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:E3:7F:E3:1B:F9:95:7D:27:B3:28:0C:5A:0F:1B:AF:75:85:5E
            X509v3 Authority Key Identifier:
                keyid:8C:2C:77:20:5E:E6:97:0E:9E:88:39:D5:52:B0:0B:D6:F1:12:8E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C2C77205EE6970E9E8839D552B00BD6F1128E95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:79:5c:d6:6d:7e:7b:71:01:e4:e1:8b:9f:6c:f6:28:cd:f3:
         9a:ca:90:1a:74:e1:f4:f6:e9:48:2c:fe:e9:85:f8:43:8e:eb:
         02:5e:e2:a3:20:67:96:b5:1e:5b:6d:48:03:46:31:72:00:6b:
         87:b7:6c:73:b1:f1:dc:cb:b6:3f:89:4e:43:63:72:1a:e7:32:
         d1:da:39:59:51:43:81:79:d9:7f:69:51:65:cc:d9:16:62:ae:
         89:18:28:ab:1d:78:a9:c7:ae:73:3d:62:7c:d3:5c:f2:24:e8:
         c6:9d:0e:77:90:62:df:3e:9b:b7:3d:81:4e:84:2e:f7:f0:08:
         22:a8:d9:3d:44:e5:0b:b5:34:0e:66:f8:22:a6:a0:e4:c3:ee:
         2b:71:8c:c6:63:67:c8:50:86:ad:8d:c5:3b:79:40:88:a0:74:
         6b:f0:67:26:5e:d2:ca:14:85:0c:00:24:37:b0:99:40:69:32:
         db:8c:b4:6d:2c:60:10:53:f7:1a:13:f9:dc:d4:fe:74:be:ac:
         16:8d:bc:81:53:00:42:ea:97:6f:e6:14:8a:a3:75:dd:de:da:
         1f:04:a2:12:3b:ad:4c:da:26:5b:42:87:98:49:db:f9:7f:f3:
         84:d3:fd:14:49:f9:a7:b4:91:98:cf:f9:0e:86:19:0e:e3:1a:
         15:36:45:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULqYyiNaAk6vgoMUhysXfAQc9PMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMyQzc3MjA1RUU2OTcwRTlFODgzOUQ1NTJCMDBCRDZG
MTEyOEU5NTAeFw0yNDAzMTEyMDM3MDFaFw0yNTAzMTAyMDQyMDFaMDMxMTAvBgNV
BAMTKDQzNTZFMzdGRTMxQkY5OTU3RDI3QjMyODBDNUEwRjFCQUY3NTg1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwa81H12Al++gGDdfoURzEEbsx
jQZX4Y8huQfHIKaOByp2yIuJ3jnrmGqUsXK+uxmDZudikeUhSJeGE4W/3booASbY
Ba+5Pi4JFm/brW0RnLqHMrH6jfrKodyNpelR8/9/St5dIhLVuOwPlycEfZzzjbwT
psO9hSFmX9MkDSU7JrnpNbhE6WfDI/abKqb6Y2T0dwQcT13RUpGhD5IEHHWOuDGC
YiCkmFYJW9WCQCULWIxcCXT5KrSPeWycaEm+Yp/mDNawHxcgB96X7lpoNnrE+hBZ
MyHiaQ3nOq8L+pZ/AnxJ4NRgOJoX2gJathItAjrknfHFSNuNtyX3nLrdhhS7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQ1bjf+Mb+ZV9J7MoDFoPG691hV4wHwYDVR0j
BBgwFoAUjCx3IF7mlw6eiDnVUrAL1vESjpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC84QzJDNzcyMDVFRTY5NzBFOUU4ODM5RDU1MkIwMEJENkYxMTI4RTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDMkM3NzIwNUVFNjk3MEU5
RTg4MzlENTUyQjAwQkQ2RjExMjhFOTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/sDANBgkqhkiG9w0BAQsFAAOCAQEAynlc
1m1+e3EB5OGLn2z2KM3zmsqQGnTh9PbpSCz+6YX4Q47rAl7ioyBnlrUeW21IA0Yx
cgBrh7dsc7Hx3Mu2P4lOQ2NyGucy0do5WVFDgXnZf2lRZczZFmKuiRgoqx14qceu
cz1ifNNc8iToxp0Od5Bi3z6btz2BToQu9/AIIqjZPUTlC7U0Dmb4Iqag5MPuK3GM
xmNnyFCGrY3FO3lAiKB0a/BnJl7SyhSFDAAkN7CZQGky24y0bSxgEFP3GhP53NT+
dL6sFo28gVMAQuqXb+YUiqN13d7aHwSiEjutTNomW0KHmEnb+X/zhNP9FEn5p7SR
mM/5DoYZDuMaFTZFWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org