Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
File:                     3133312e3130302e38302e302f32342d3234203d3e203631373539.roa (raw, json)
Hash identifier:          5qXV/dRic5eSe/akXz7Ep1u2EnlTGER3qVScG/Ya02A=
Subject key identifier:   61:5E:29:48:D2:AC:20:E2:DD:23:DC:05:8F:15:52:39:F8:DA:7D:1D
Certificate issuer:       /CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
Certificate serial:       5CE9572F763C898F66F3D5E6555D9C375C5F1A76
Authority key identifier: FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa
Signing time:             Wed 23 Aug 2023 21:00:00 +0000
ROA not before:           Wed 23 Aug 2023 20:55:00 +0000
ROA not after:            Wed 21 Aug 2024 21:00:00 +0000
asID:                     61759
IP address blocks:        131.100.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e9:57:2f:76:3c:89:8f:66:f3:d5:e6:55:5d:9c:37:5c:5f:1a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2
        Validity
            Not Before: Aug 23 20:55:00 2023 GMT
            Not After : Aug 21 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:4e:a9:29:80:82:ad:94:45:e7:2c:67:03:
                    3c:7c:19:ab:37:65:e7:e7:50:f3:ae:c1:0b:91:91:
                    5d:7b:83:cd:42:15:2d:b9:33:d5:e5:c8:7a:d4:ab:
                    f3:90:57:28:63:0c:66:06:8d:86:39:6d:2c:8f:17:
                    8d:64:5e:e7:11:de:a1:a7:fa:83:b1:ea:bd:64:a2:
                    29:cb:69:b1:5e:05:f4:0c:6e:03:8e:ce:63:7f:13:
                    4d:52:ae:7e:a1:81:b1:7e:fe:c4:e6:35:51:ef:93:
                    81:46:06:af:f1:ec:f3:f6:e1:6e:9e:06:43:92:18:
                    5a:59:ff:ce:21:2b:ee:80:91:a2:87:b8:52:6e:b9:
                    13:11:24:14:51:32:aa:bc:b8:36:e6:13:cf:69:f4:
                    2d:f5:3f:12:52:c6:e1:88:7f:89:18:a1:36:bd:6c:
                    34:de:d1:91:14:35:62:e1:54:52:94:18:ea:08:df:
                    c4:22:e3:b1:76:66:fb:e7:b0:93:37:0f:15:c9:93:
                    f8:98:bb:7f:43:44:cb:a5:c7:56:e7:0a:48:02:ea:
                    7a:a4:b8:5f:d1:5a:bb:b4:34:80:81:93:fe:a6:3f:
                    18:b7:d0:37:92:c0:25:c0:0a:f9:55:bf:c0:74:37:
                    02:8b:c8:47:7c:e0:6f:e3:46:4c:b8:54:50:9f:8e:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5E:29:48:D2:AC:20:E2:DD:23:DC:05:8F:15:52:39:F8:DA:7D:1D
            X509v3 Authority Key Identifier:
                keyid:FB:EF:42:AA:1E:49:17:D4:80:EA:3F:C9:1E:C5:DD:7B:99:60:32:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBEF42AA1E4917D480EA3FC91EC5DD7B996032E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRZSv7wFJt1EkY5fGkDLDDydXUjcezBJw8PGx2GDPFyX/0/3133312e3130302e38302e302f32342d3234203d3e203631373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:31:fb:97:17:99:47:eb:ce:45:43:96:be:6f:45:60:61:
         75:f6:86:b0:cb:7e:bd:59:f3:5e:50:89:3d:df:cc:66:79:f2:
         fa:43:59:3e:4b:17:58:a7:b2:8b:fa:86:a4:3b:61:19:05:73:
         0f:90:ad:60:fa:ea:4d:84:61:c4:3c:01:ee:f2:6b:70:ea:94:
         72:7d:9e:70:1c:59:b0:13:6c:1e:6c:30:42:01:c2:fd:f4:e2:
         33:4e:5d:e0:e1:06:82:5d:17:3c:bf:7e:03:36:24:be:3f:94:
         e6:b7:80:ed:72:ae:b0:15:3e:45:73:84:e7:47:a3:64:0b:2e:
         46:7c:ff:d7:e5:60:5b:4f:e8:19:10:74:c6:ef:77:c2:0b:41:
         22:88:c9:f5:0b:09:44:b7:7b:8e:69:51:0d:ec:d2:10:b4:8b:
         40:72:53:f7:a4:bc:1c:83:17:16:01:09:e6:71:1e:da:77:bc:
         6a:18:83:95:4e:f3:4e:38:38:70:43:f3:ac:7e:f9:ea:97:f4:
         4e:b0:f0:6e:09:00:4b:d0:75:fd:ca:10:3c:2a:3e:71:1c:82:
         dd:ed:86:65:11:1a:ba:6c:34:13:7c:f3:69:fa:49:1b:a4:4b:
         de:2d:a3:7a:c9:48:1a:64:26:7b:4b:4b:98:15:e6:b8:44:8c:
         20:ab:2b:5f
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUXOlXL3Y8iY9m89XmVV2cN1xfGnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJFRjQyQUExRTQ5MTdENDgwRUEzRkM5MUVDNUREN0I5
OTYwMzJFMjAeFw0yMzA4MjMyMDU1MDBaFw0yNDA4MjEyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdENzRFQTkyOTgwODJBRDk0
NDVFNzJDNjcwMzNDN0MxOUFCMzc2NUU3RTc1MEYzQUVDMTBCOTE5MTVEN0I4M0NE
NDIxNTJEQjkzM0Q1RTVDODdBRDRBQkYzOTA1NzI4NjMwQzY2MDY4RDg2Mzk2RDJD
OEYxNzhENjQ1RUU3MTFERUExQTdGQTgzQjFFQUJENjRBMjI5Q0I2OUIxNUUwNUY0
MEM2RTAzOEVDRTYzN0YxMzRENTJBRTdFQTE4MUIxN0VGRUM0RTYzNTUxRUY5Mzgx
NDYwNkFGRjFFQ0YzRjZFMTZFOUUwNjQzOTIxODVBNTlGRkNFMjEyQkVFODA5MUEy
ODdCODUyNkVCOTEzMTEyNDE0NTEzMkFBQkNCODM2RTYxM0NGNjlGNDJERjUzRjEy
NTJDNkUxODg3Rjg5MThBMTM2QkQ2QzM0REVEMTkxMTQzNTYyRTE1NDUyOTQxOEVB
MDhERkM0MjJFM0IxNzY2NkZCRTdCMDkzMzcwRjE1Qzk5M0Y4OThCQjdGNDM0NENC
QTVDNzU2RTcwQTQ4MDJFQTdBQTRCODVGRDE1QUJCQjQzNDgwODE5M0ZFQTYzRjE4
QjdEMDM3OTJDMDI1QzAwQUY5NTVCRkMwNzQzNzAyOEJDODQ3N0NFMDZGRTM0NjRD
Qjg1NDUwOUY4RTQ1M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt9dOqSmAgq2URecsZwM8fBmrN2Xn51DzrsELkZFde4PNQhUtuTPV
5ch61KvzkFcoYwxmBo2GOW0sjxeNZF7nEd6hp/qDseq9ZKIpy2mxXgX0DG4Djs5j
fxNNUq5+oYGxfv7E5jVR75OBRgav8ezz9uFungZDkhhaWf/OISvugJGih7hSbrkT
ESQUUTKqvLg25hPPafQt9T8SUsbhiH+JGKE2vWw03tGRFDVi4VRSlBjqCN/EIuOx
dmb757CTNw8VyZP4mLt/Q0TLpcdW5wpIAup6pLhf0Vq7tDSAgZP+pj8Yt9A3ksAl
wAr5Vb/AdDcCi8hHfOBv40ZMuFRQn45FPwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FGFeKUjSrCDi3SPcBY8VUjn42n0dMB8GA1UdIwQYMBaAFPvvQqoeSRfUgOo/yR7F
3XuZYDLiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RSWlN2N3dGSnQxRWtZ
NWZHa0RMRER5ZFhVamNlekJKdzhQR3gyR0RQRnlYLzAvRkJFRjQyQUExRTQ5MTdE
NDgwRUEzRkM5MUVDNUREN0I5OTYwMzJFMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GQkVGNDJBQTFFNDkxN0Q0ODBFQTNGQzkxRUM1REQ3Qjk5NjAz
MkUyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EUlpTdjd3Rkp0MUVrWTVmR2tE
TEREeWRYVWpjZXpCSnc4UEd4MkdEUEZ5WC8wLzMxMzMzMTJlMzEzMDMwMmUzODMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAINk
UDANBgkqhkiG9w0BAQsFAAOCAQEAnEsx+5cXmUfrzkVDlr5vRWBhdfaGsMt+vVnz
XlCJPd/MZnny+kNZPksXWKeyi/qGpDthGQVzD5CtYPrqTYRhxDwB7vJrcOqUcn2e
cBxZsBNsHmwwQgHC/fTiM05d4OEGgl0XPL9+AzYkvj+U5reA7XKusBU+RXOE50ej
ZAsuRnz/1+VgW0/oGRB0xu93wgtBIojJ9QsJRLd7jmlRDezSELSLQHJT96S8HIMX
FgEJ5nEe2ne8ahiDlU7zTjg4cEPzrH756pf0TrDwbgkAS9B1/coQPCo+cRyC3e2G
ZREaumw0E3zzafpJG6RL3i2jeslIGmQme0tLmBXmuESMIKsrXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org