Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32332d3233203d3e20323634343938.roa
File:                     3133312e3235352e3231322e302f32332d3233203d3e20323634343938.roa (raw, json)
Hash identifier:          XUBvD84i0REBCGgND5+s0P1lOZHB12D0H2U31NJ/zRw=
Subject key identifier:   C0:88:FB:3E:9E:55:37:62:97:65:66:33:F4:54:5A:C4:4F:9D:28:73
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       20CDE6587509B1D84CB9525D82E9CD9FDDF34F76
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32332d3233203d3e20323634343938.roa
Signing time:             Thu 20 Apr 2023 19:16:13 +0000
ROA not before:           Thu 20 Apr 2023 19:11:13 +0000
ROA not after:            Thu 18 Apr 2024 19:16:13 +0000
asID:                     264498
IP address blocks:        131.255.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cd:e6:58:75:09:b1:d8:4c:b9:52:5d:82:e9:cd:9f:dd:f3:4f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: Apr 20 19:11:13 2023 GMT
            Not After : Apr 18 19:16:13 2024 GMT
        Subject: CN=C088FB3E9E55376297656633F4545AC44F9D2873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:32:1a:15:62:a6:82:71:df:97:b2:bc:e1:
                    65:4c:d8:45:a1:e1:03:23:dd:66:aa:28:d0:c0:d5:
                    f8:77:cc:68:82:ec:7e:05:16:01:7b:da:0d:e5:e4:
                    2b:c7:ab:07:69:6e:84:e7:ae:c6:9b:2c:ab:8d:09:
                    ef:1d:98:9d:ec:2a:52:2b:10:1b:43:18:bc:a2:6b:
                    ec:55:5d:0f:52:d5:b3:75:03:4b:16:c7:8d:ff:b3:
                    67:02:1a:88:5e:b2:65:cb:86:c5:fa:84:a1:b2:f3:
                    27:0f:1e:00:44:57:e8:83:dc:56:05:f3:f4:07:9e:
                    5e:34:21:56:53:d7:f7:15:aa:2b:39:f6:c1:17:c5:
                    24:73:3d:56:71:9b:64:de:70:e0:16:82:de:b5:ee:
                    e5:9b:74:9a:19:cf:c1:80:67:2f:0a:b4:10:53:ce:
                    7d:e4:41:5c:ef:82:4d:46:ca:b9:41:d3:3e:f1:4d:
                    96:16:db:c1:1d:fa:87:29:0d:8e:fa:e4:f5:69:10:
                    24:1d:1f:f5:96:78:3d:8f:df:09:c1:fc:b2:71:f2:
                    7e:d6:d9:08:34:08:f1:78:92:5c:31:96:ed:9e:ae:
                    d5:a8:91:6a:2b:41:45:48:c6:5e:8e:e4:f8:76:1c:
                    db:20:ad:23:fe:45:38:a3:32:85:72:d6:2f:45:15:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:88:FB:3E:9E:55:37:62:97:65:66:33:F4:54:5A:C4:4F:9D:28:73
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3133312e3235352e3231322e302f32332d3233203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:80:91:62:2a:0d:d8:cb:3f:11:da:99:a3:fc:b3:d3:be:16:
         ae:80:1b:62:4f:fb:4b:f1:84:c4:06:7c:c6:8f:aa:ad:b4:5d:
         23:4c:01:11:73:47:c6:99:7b:a8:a2:2a:d8:b5:f4:79:b4:fd:
         de:33:c7:2f:1e:51:99:60:59:d5:c1:fa:06:6c:d6:c1:f8:88:
         2b:00:19:cd:51:1a:9c:e8:f2:fa:12:3f:ba:c4:79:a2:22:56:
         2f:c8:83:92:b4:cc:c0:9b:20:3b:97:47:b3:4e:59:df:6f:a9:
         66:51:6e:51:47:54:68:8c:b9:db:bc:bb:d2:44:a9:52:3d:38:
         56:4e:a2:24:24:2b:ad:4c:d0:3f:8c:30:28:c9:7f:1e:16:dd:
         5e:94:dc:16:ce:c5:57:2b:c0:7a:f8:dc:43:ba:ec:a2:1f:db:
         fd:da:51:c0:4f:8f:c5:49:09:4c:ee:63:89:40:c9:29:fa:95:
         98:e1:d3:28:91:ad:62:05:05:e5:65:35:3b:f6:71:ad:32:6f:
         ae:49:4a:0f:c8:f7:48:b9:29:4c:80:55:4f:d7:67:42:b5:38:
         25:8b:0b:a1:f1:d1:2a:94:b1:d6:59:68:ef:af:28:51:a0:83:
         b6:54:9f:00:68:49:c4:89:7d:86:0e:35:c7:64:b1:43:38:3f:
         3e:73:4f:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIM3mWHUJsdhMuVJdgunNn93zT3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCODM1RjYzOEI5NDVBMTdDMkIzRENFRDc4QjlBMDRF
OTQzREJBRjAeFw0yMzA0MjAxOTExMTNaFw0yNDA0MTgxOTE2MTNaMDMxMTAvBgNV
BAMTKEMwODhGQjNFOUU1NTM3NjI5NzY1NjYzM0Y0NTQ1QUM0NEY5RDI4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiDIaFWKmgnHfl7K84WVM2EWh
4QMj3WaqKNDA1fh3zGiC7H4FFgF72g3l5CvHqwdpboTnrsabLKuNCe8dmJ3sKlIr
EBtDGLyia+xVXQ9S1bN1A0sWx43/s2cCGohesmXLhsX6hKGy8ycPHgBEV+iD3FYF
8/QHnl40IVZT1/cVqis59sEXxSRzPVZxm2TecOAWgt617uWbdJoZz8GAZy8KtBBT
zn3kQVzvgk1GyrlB0z7xTZYW28Ed+ocpDY765PVpECQdH/WWeD2P3wnB/LJx8n7W
2Qg0CPF4klwxlu2ertWokWorQUVIxl6O5Ph2HNsgrSP+RTijMoVy1i9FFUinAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwIj7Pp5VN2KXZWYz9FRaxE+dKHMwHwYDVR0j
BBgwFoAUHLg19ji5RaF8Kz3O14uaBOlD268wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzliV3JZN1ZKY2RnN3ZpNHNqTkpZRWU1QmRHeVA3ZlhzRlplVzZkdGQz
WVkvMC8xQ0I4MzVGNjM4Qjk0NUExN0MyQjNEQ0VENzhCOUEwNEU5NDNEQkFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDQjgzNUY2MzhCOTQ1QTE3
QzJCM0RDRUQ3OEI5QTA0RTk0M0RCQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5YldyWTdWSmNkZzd2aTRzak5KWUVlNUJkR3lQN2ZYc0ZaZVc2ZHRkM1lZLzAv
MzEzMzMxMmUzMjM1MzUyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM0MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYP/1DANBgkqhkiG9w0BAQsFAAOCAQEAU4CR
YioN2Ms/EdqZo/yz074WroAbYk/7S/GExAZ8xo+qrbRdI0wBEXNHxpl7qKIq2LX0
ebT93jPHLx5RmWBZ1cH6BmzWwfiIKwAZzVEanOjy+hI/usR5oiJWL8iDkrTMwJsg
O5dHs05Z32+pZlFuUUdUaIy527y70kSpUj04Vk6iJCQrrUzQP4wwKMl/HhbdXpTc
Fs7FVyvAevjcQ7rsoh/b/dpRwE+PxUkJTO5jiUDJKfqVmOHTKJGtYgUF5WU1O/Zx
rTJvrklKD8j3SLkpTIBVT9dnQrU4JYsLofHRKpSx1llo768oUaCDtlSfAGhJxIl9
hg41x2SxQzg/PnNP+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org