Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          eOxxMcWZlnQD5Ac8HOEf643osrlPaNQrkXeGZWpEX50=
Subject key identifier:   F3:EE:F4:BE:5C:99:93:CA:4D:7D:E3:B1:55:B2:C8:66:62:CF:B3:33
Certificate issuer:       /CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
Certificate serial:       370D9E146D9825156F4E1409A4CA448862713C99
Authority key identifier: 5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa
Signing time:             Wed 31 Jan 2024 14:50:45 +0000
ROA not before:           Wed 31 Jan 2024 14:45:45 +0000
ROA not after:            Wed 29 Jan 2025 14:50:45 +0000
asID:                     264450
IP address blocks:        131.255.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0d:9e:14:6d:98:25:15:6f:4e:14:09:a4:ca:44:88:62:71:3c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A
        Validity
            Not Before: Jan 31 14:45:45 2024 GMT
            Not After : Jan 29 14:50:45 2025 GMT
        Subject: CN=F3EEF4BE5C9993CA4D7DE3B155B2C86662CFB333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:41:e9:09:f8:f2:8e:1b:80:cb:8a:25:17:
                    37:9f:17:eb:4c:cd:83:08:4e:9c:12:15:2a:0e:a1:
                    f5:7f:13:e0:63:bf:53:ec:86:dc:28:94:76:fc:29:
                    4b:22:f8:50:a7:68:cb:55:dd:f2:4e:d7:92:fc:26:
                    b2:d1:b5:b9:86:f4:6b:3f:4e:e6:f3:74:65:8d:53:
                    3b:5c:48:00:73:f6:3f:f6:b4:f7:c2:d3:13:96:c9:
                    f2:b2:55:c1:b4:86:ac:be:8e:d5:8b:f7:59:e3:a2:
                    64:09:07:91:44:c0:73:71:96:ae:a1:7f:ed:dc:69:
                    81:24:cc:21:35:47:bf:2d:d6:38:c5:b9:0a:ae:a6:
                    61:b2:da:10:a9:f9:59:4e:0f:b2:86:89:6e:20:0d:
                    9d:f0:01:73:c2:52:1c:bb:ab:87:1a:6f:0c:18:03:
                    c4:bb:9f:c9:5f:48:38:1d:54:27:df:c9:f7:bd:83:
                    f2:c0:a3:cd:6c:ed:aa:c2:a8:b4:57:46:4d:0a:bf:
                    50:9f:43:89:76:a4:b6:dc:0a:df:b9:50:e5:1b:de:
                    a4:de:55:d9:43:ea:42:c0:4c:9b:7c:be:06:33:78:
                    60:bd:f4:b7:ff:5e:74:d4:5e:9c:81:f5:f4:58:32:
                    14:b4:f3:b6:92:a1:af:7e:ab:c1:33:df:d1:b0:d8:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:F4:BE:5C:99:93:CA:4D:7D:E3:B1:55:B2:C8:66:62:CF:B3:33
            X509v3 Authority Key Identifier:
                keyid:5C:81:13:C0:9C:85:60:C4:BA:AF:63:46:00:80:DC:CB:C5:FC:9A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C8113C09C8560C4BAAF63460080DCCBC5FC9A0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:4b:fe:43:95:91:db:ba:50:73:74:d3:5b:b6:1c:8c:27:
         87:4a:ac:c1:80:57:ef:d6:98:4c:56:9e:1e:a5:0f:16:38:1b:
         76:46:84:bc:b3:3a:b1:fd:0d:5c:02:b7:fb:12:f3:bc:82:30:
         63:7e:97:70:61:9d:89:2a:46:62:ec:85:20:04:92:39:67:f7:
         6d:13:6e:6a:1c:27:37:0a:b5:2c:ed:eb:77:8c:76:37:4a:70:
         36:d4:57:6b:93:4e:5e:1e:cb:3c:e6:20:9c:c4:9c:e2:e9:9f:
         9f:25:7e:ac:31:8b:f9:52:52:89:b8:f7:12:6b:07:57:3a:5e:
         85:4a:1f:d9:73:94:b4:2f:42:3c:fc:f4:b2:08:66:e8:66:a1:
         3d:63:2c:cc:9b:d7:82:67:26:55:41:49:c3:33:90:16:1e:b5:
         c7:bb:a2:e0:a3:c0:33:f8:49:a1:0d:f7:54:0f:fb:a5:c7:df:
         21:21:7f:52:79:21:27:69:dd:58:6a:9c:80:13:0c:65:f5:0f:
         f4:47:1d:f6:c8:f6:b9:36:b1:40:00:c6:3e:db:7b:fb:c0:d4:
         8c:ee:da:86:23:56:57:dc:f0:1d:4f:32:f1:21:79:1d:78:f8:
         75:6f:2e:72:24:00:0a:8c:8c:77:56:af:01:b2:6e:83:e5:36:
         36:80:e5:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNw2eFG2YJRVvThQJpMpEiGJxPJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM4MTEzQzA5Qzg1NjBDNEJBQUY2MzQ2MDA4MERDQ0JD
NUZDOUEwQTAeFw0yNDAxMzExNDQ1NDVaFw0yNTAxMjkxNDUwNDVaMDMxMTAvBgNV
BAMTKEYzRUVGNEJFNUM5OTkzQ0E0RDdERTNCMTU1QjJDODY2NjJDRkIzMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCUHpCfjyjhuAy4olFzefF+tM
zYMITpwSFSoOofV/E+Bjv1PshtwolHb8KUsi+FCnaMtV3fJO15L8JrLRtbmG9Gs/
TubzdGWNUztcSABz9j/2tPfC0xOWyfKyVcG0hqy+jtWL91njomQJB5FEwHNxlq6h
f+3caYEkzCE1R78t1jjFuQqupmGy2hCp+VlOD7KGiW4gDZ3wAXPCUhy7q4cabwwY
A8S7n8lfSDgdVCffyfe9g/LAo81s7arCqLRXRk0Kv1CfQ4l2pLbcCt+5UOUb3qTe
VdlD6kLATJt8vgYzeGC99Lf/XnTUXpyB9fRYMhS087aSoa9+q8Ez39Gw2OsfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8+70vlyZk8pNfeOxVbLIZmLPszMwHwYDVR0j
BBgwFoAUXIETwJyFYMS6r2NGAIDcy8X8mgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC81QzgxMTNDMDlDODU2MEM0QkFBRjYzNDYwMDgwRENDQkM1RkM5QTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDODExM0MwOUM4NTYwQzRC
QUFGNjM0NjAwODBEQ0NCQzVGQzlBMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzEzMzMxMmUzMjM1MzUyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/yQwDQYJKoZIhvcNAQELBQADggEBAI/1S/5D
lZHbulBzdNNbthyMJ4dKrMGAV+/WmExWnh6lDxY4G3ZGhLyzOrH9DVwCt/sS87yC
MGN+l3BhnYkqRmLshSAEkjln920TbmocJzcKtSzt63eMdjdKcDbUV2uTTl4eyzzm
IJzEnOLpn58lfqwxi/lSUom49xJrB1c6XoVKH9lzlLQvQjz89LIIZuhmoT1jLMyb
14JnJlVBScMzkBYetce7ouCjwDP4SaEN91QP+6XH3yEhf1J5ISdp3VhqnIATDGX1
D/RHHfbI9rk2sUAAxj7be/vA1Izu2oYjVlfc8B1PMvEheR14+HVvLnIkAAqMjHdW
rwGyboPlNjaA5Sc=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org