Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa (raw, json)
Hash identifier:          ENkchS+i2mOwt2UmFKPR7F8ivwcbK4wIuH03EAPmayk=
Subject key identifier:   7B:F1:C2:B9:F6:1E:09:4B:EC:DB:47:05:7E:87:32:DF:1B:92:27:93
Certificate issuer:       /CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
Certificate serial:       6C2E591B46DD5579A7EE68B265D2750EC5BD4F65
Authority key identifier: C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
Signing time:             Thu 03 Nov 2022 17:12:16 +0000
ROA not before:           Thu 03 Nov 2022 17:07:16 +0000
ROA not after:            Thu 02 Nov 2023 17:12:16 +0000
asID:                     264450
IP address blocks:        131.255.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:59:1b:46:dd:55:79:a7:ee:68:b2:65:d2:75:0e:c5:bd:4f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8
        Validity
            Not Before: Nov  3 17:07:16 2022 GMT
            Not After : Nov  2 17:12:16 2023 GMT
        Subject: CN=7BF1C2B9F61E094BECDB47057E8732DF1B922793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:fc:f8:71:5e:b9:76:9b:bc:56:5e:c3:f0:
                    9e:4c:0e:fd:be:f9:4b:8f:6d:89:f4:27:01:6c:15:
                    3b:50:1d:40:c7:4a:71:1e:c8:a6:79:8d:b0:c9:db:
                    25:35:de:4f:e5:b4:3f:8c:7e:5a:0c:27:65:bd:9a:
                    c4:ec:55:86:82:69:85:85:4c:77:c5:5e:89:ea:1e:
                    83:52:d0:20:4f:d5:60:5a:84:be:e8:d0:c0:5c:f2:
                    fa:d8:de:f8:d5:13:77:ae:f1:38:bd:96:02:15:1c:
                    78:01:58:ff:c1:13:3a:01:26:39:22:49:15:d3:5d:
                    0a:5f:7f:4d:7c:45:3e:e2:0c:33:26:03:60:d5:be:
                    ed:31:7d:78:d5:f6:c1:73:6f:07:3a:4f:a5:3a:be:
                    00:d0:e9:ae:f6:d2:83:6c:c7:30:12:22:d0:95:15:
                    ce:c5:57:b4:11:b3:c5:57:0c:b0:a6:05:72:18:65:
                    12:8f:af:bc:67:4c:c8:c6:4c:b4:2e:20:48:84:cd:
                    78:81:4c:5f:7f:ca:2b:3d:d5:8e:d0:a8:85:f0:21:
                    8d:84:67:0f:ab:5a:59:7e:f5:9e:d7:de:e0:f4:52:
                    e8:5d:da:be:0c:41:fd:f4:74:99:e3:45:b3:a8:40:
                    b9:90:49:96:90:27:22:7a:a2:fb:a1:94:b4:fb:61:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:C2:B9:F6:1E:09:4B:EC:DB:47:05:7E:87:32:DF:1B:92:27:93
            X509v3 Authority Key Identifier:
                keyid:C9:EC:AC:7A:B6:BE:D4:BE:6B:6F:62:B4:98:C8:30:B2:F1:6D:2C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9ECAC7AB6BED4BE6B6F62B498C830B2F16D2CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:fd:74:02:08:ec:c0:78:5b:1f:db:e6:fa:aa:ee:8e:6f:4c:
         24:08:22:e5:07:58:75:cf:f2:8c:50:14:0e:b2:1c:6a:d8:b5:
         52:5c:eb:b9:3e:4a:d0:76:83:39:30:d4:bd:34:c1:b0:1e:a1:
         9c:60:b7:e6:41:4e:4e:be:28:d4:b6:76:5d:a4:09:75:a9:9c:
         01:8c:2a:ac:bc:5b:0f:7d:a3:60:97:59:d1:e8:8f:65:e2:e8:
         91:23:95:18:e1:36:f9:6d:4b:8b:50:5a:b6:58:32:ad:f7:78:
         8a:ce:a9:a7:4c:ff:fb:a9:8a:a1:1f:18:0d:99:63:43:cb:bc:
         73:3e:7a:42:9f:27:3b:65:2b:ee:3d:9a:84:86:ab:62:15:7c:
         36:56:f0:21:ca:ac:da:3e:c1:ad:bf:41:04:ab:ce:3d:a1:a4:
         84:c8:1e:3e:79:35:f4:1c:f0:fa:ef:36:7e:e3:11:35:69:77:
         60:bc:f8:07:46:4c:2e:ce:78:c9:be:92:18:8b:ae:b2:e8:47:
         7b:74:2d:5a:17:67:08:a1:8d:16:b7:89:67:b9:e9:d6:a4:26:
         ad:b8:6c:28:bb:1d:48:d1:a8:cf:4e:1d:1b:e5:07:a4:78:a3:
         ef:24:a9:e9:87:85:49:24:f4:22:db:bc:12:2d:c1:ec:22:52:
         b2:a3:99:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbC5ZG0bdVXmn7miyZdJ1DsW9T2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFQ0FDN0FCNkJFRDRCRTZCNkY2MkI0OThDODMwQjJG
MTZEMkNGODAeFw0yMjExMDMxNzA3MTZaFw0yMzExMDIxNzEyMTZaMDMxMTAvBgNV
BAMTKDdCRjFDMkI5RjYxRTA5NEJFQ0RCNDcwNTdFODczMkRGMUI5MjI3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHvz4cV65dpu8Vl7D8J5MDv2+
+UuPbYn0JwFsFTtQHUDHSnEeyKZ5jbDJ2yU13k/ltD+MfloMJ2W9msTsVYaCaYWF
THfFXonqHoNS0CBP1WBahL7o0MBc8vrY3vjVE3eu8Ti9lgIVHHgBWP/BEzoBJjki
SRXTXQpff018RT7iDDMmA2DVvu0xfXjV9sFzbwc6T6U6vgDQ6a720oNsxzASItCV
Fc7FV7QRs8VXDLCmBXIYZRKPr7xnTMjGTLQuIEiEzXiBTF9/yis91Y7QqIXwIY2E
Zw+rWll+9Z7X3uD0Uuhd2r4MQf30dJnjRbOoQLmQSZaQJyJ6ovuhlLT7YXwFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUe/HCufYeCUvs20cFfocy3xuSJ5MwHwYDVR0j
BBgwFoAUyeysera+1L5rb2K0mMgwsvFtLPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC9DOUVDQUM3QUI2QkVENEJFNkI2RjYyQjQ5OEM4MzBCMkYxNkQyQ0Y4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5RUNBQzdBQjZCRUQ0QkU2
QjZGNjJCNDk4QzgzMEIyRjE2RDJDRjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzEzMzMxMmUzMjM1MzUyZTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGD/yQwDQYJKoZIhvcNAQELBQADggEBANT9dAII
7MB4Wx/b5vqq7o5vTCQIIuUHWHXP8oxQFA6yHGrYtVJc67k+StB2gzkw1L00wbAe
oZxgt+ZBTk6+KNS2dl2kCXWpnAGMKqy8Ww99o2CXWdHoj2Xi6JEjlRjhNvltS4tQ
WrZYMq33eIrOqadM//upiqEfGA2ZY0PLvHM+ekKfJztlK+49moSGq2IVfDZW8CHK
rNo+wa2/QQSrzj2hpITIHj55NfQc8PrvNn7jETVpd2C8+AdGTC7OeMm+khiLrrLo
R3t0LVoXZwihjRa3iWe56dakJq24bCi7HUjRqM9OHRvlB6R4o+8kqemHhUkk9CLb
vBItwewiUrKjmXc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org