Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa
File:                     3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (raw, json)
Hash identifier:          GVO2j3whv3QxzgaaF+MsA7DbirwTemexfta9EcZSPI0=
Subject key identifier:   74:B3:08:1F:D3:20:11:A7:49:CD:2F:AF:ED:D3:3D:CD:87:4D:5C:3B
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       368CB9908CBA39947284947E72D3D210F19DAF32
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa
Signing time:             Mon 23 Dec 2024 12:58:03 +0000
ROA not before:           Mon 23 Dec 2024 12:53:03 +0000
ROA not after:            Mon 22 Dec 2025 12:58:03 +0000
asID:                     61680
IP address blocks:        131.108.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8c:b9:90:8c:ba:39:94:72:84:94:7e:72:d3:d2:10:f1:9d:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Dec 23 12:53:03 2024 GMT
            Not After : Dec 22 12:58:03 2025 GMT
        Subject: CN=74B3081FD32011A749CD2FAFEDD33DCD874D5C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:32:c8:a6:d5:b3:82:c4:1f:61:96:bd:97:
                    af:26:c3:05:4e:4f:ef:d3:50:af:f0:5e:49:84:ce:
                    7a:59:a1:e8:6b:b0:2f:75:75:b3:92:ee:60:17:e5:
                    f2:fb:ad:0d:92:6c:c6:66:4d:5c:d2:45:9f:bf:1a:
                    33:34:87:78:13:70:52:7d:36:fe:1a:01:5d:1e:7e:
                    06:7b:e3:52:ff:d6:30:3e:3c:41:36:db:ff:b3:f3:
                    9f:7c:ea:09:df:38:44:60:df:91:6a:da:d3:62:2e:
                    90:47:35:8f:6a:f7:03:d2:0f:53:0e:e1:49:e9:04:
                    b4:45:f2:3a:1c:bf:cd:88:9b:b3:08:7b:f1:e2:42:
                    f8:c1:ea:75:86:fb:17:49:58:02:5f:ec:90:56:a8:
                    80:37:7d:d1:71:f7:69:b4:6b:9f:86:3f:a7:39:31:
                    06:da:36:13:69:d6:8c:6b:64:77:3d:9f:35:61:50:
                    08:70:fb:72:a9:ef:1f:d7:b8:f0:1a:ff:0e:18:da:
                    85:5b:81:23:64:96:18:91:a7:8b:bb:6f:7c:5d:37:
                    33:54:df:4c:5c:40:c1:5b:63:be:6f:75:c8:59:9c:
                    0a:aa:af:07:58:a7:44:62:24:2e:51:b4:d4:92:40:
                    14:91:6d:f2:c4:48:fd:76:a0:e5:7a:8f:12:d9:c2:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B3:08:1F:D3:20:11:A7:49:CD:2F:AF:ED:D3:3D:CD:87:4D:5C:3B
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36372e302f32342d3234203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:eb:43:b9:a3:b2:ee:07:a2:e0:96:57:4b:72:d4:74:40:f1:
         6c:b3:b5:e4:c3:58:d9:42:a3:32:2c:2b:1e:00:d0:30:01:a9:
         27:57:e7:7a:f8:35:07:3a:4c:c5:de:e6:0c:5e:cc:89:31:1f:
         14:0e:5c:7f:1a:c7:0b:bc:1c:d0:0b:f0:8d:4e:f0:49:cc:0f:
         ba:45:3d:6a:94:4f:bb:c9:10:45:dd:60:ba:6b:d4:62:61:bb:
         d3:df:62:d0:ae:d1:33:12:c6:54:6d:c2:d2:13:0c:87:f1:ff:
         6b:89:91:93:ae:73:80:96:dc:3d:52:ec:82:53:ee:e7:e6:38:
         f8:5b:de:87:89:16:58:70:f7:4d:fd:ef:8d:ef:98:f8:e5:49:
         5a:1c:c6:ba:53:fb:a3:5b:fe:2e:14:f2:2d:ea:f0:ef:95:5e:
         eb:73:e1:5a:8b:a5:d0:7b:08:6b:4a:70:c0:8a:46:fd:04:3d:
         0f:7e:b5:f5:63:a6:9a:9f:a4:47:3e:4c:45:f5:e2:19:3d:09:
         28:72:77:1e:50:e9:61:a6:5b:c4:8e:17:dc:9a:14:ac:1f:7c:
         46:c6:c2:23:4c:1d:1c:8a:fc:90:de:a4:db:69:5b:ef:d1:33:
         f5:d7:e5:4f:57:d9:24:09:4b:aa:88:25:3e:6e:d1:b6:61:8f:
         c3:b3:c5:68
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNoy5kIy6OZRyhJR+ctPSEPGdrzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxOTc2NjI5MDIyMjExNTE0RDgyQTQ2RjFBRjMzNDRE
MkU2NjdGMzAeFw0yNDEyMjMxMjUzMDNaFw0yNTEyMjIxMjU4MDNaMDMxMTAvBgNV
BAMTKDc0QjMwODFGRDMyMDExQTc0OUNEMkZBRkVERDMzRENEODc0RDVDM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHzLIptWzgsQfYZa9l68mwwVO
T+/TUK/wXkmEznpZoehrsC91dbOS7mAX5fL7rQ2SbMZmTVzSRZ+/GjM0h3gTcFJ9
Nv4aAV0efgZ741L/1jA+PEE22/+z85986gnfOERg35Fq2tNiLpBHNY9q9wPSD1MO
4UnpBLRF8jocv82Im7MIe/HiQvjB6nWG+xdJWAJf7JBWqIA3fdFx92m0a5+GP6c5
MQbaNhNp1oxrZHc9nzVhUAhw+3Kp7x/XuPAa/w4Y2oVbgSNklhiRp4u7b3xdNzNU
30xcQMFbY75vdchZnAqqrwdYp0RiJC5RtNSSQBSRbfLESP12oOV6jxLZwvVlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdLMIH9MgEadJzS+v7dM9zYdNXDswHwYDVR0j
BBgwFoAUnRl2YpAiIRUU2CpG8a8zRNLmZ/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9Xc3RDWXZLYlB4UTdtQ3BEaFh4U0RjWTVXWk1wQnVRaVdhUTNvZFZq
eHIvMC85RDE5NzY2MjkwMjIyMTE1MTREODJBNDZGMUFGMzM0NEQyRTY2N0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMTk3NjYyOTAyMjIxMTUx
NEQ4MkE0NkYxQUYzMzQ0RDJFNjY3RjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvV3N0Q1l2S2JQeFE3bUNwRGhYeFNEY1k1V1pNcEJ1UWlXYVEzb2RWanhyLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2xDMA0GCSqGSIb3DQEBCwUAA4IBAQCN60O5o7Lu
B6LglldLctR0QPFss7Xkw1jZQqMyLCseANAwAaknV+d6+DUHOkzF3uYMXsyJMR8U
Dlx/GscLvBzQC/CNTvBJzA+6RT1qlE+7yRBF3WC6a9RiYbvT32LQrtEzEsZUbcLS
EwyH8f9riZGTrnOAltw9UuyCU+7n5jj4W96HiRZYcPdN/e+N75j45UlaHMa6U/uj
W/4uFPIt6vDvlV7rc+Fai6XQewhrSnDAikb9BD0PfrX1Y6aan6RHPkxF9eIZPQko
cnceUOlhplvEjhfcmhSsH3xGxsIjTB0civyQ3qTbaVvv0TP11+VPV9kkCUuqiCU+
btG2YY/Ds8Vo
-----END CERTIFICATE-----
Generated at Thu Feb 20 17:52:10 2025 by rpki-client