Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3232203d3e203631373435.roa
File:                     3133312e37322e3135322e302f32322d3232203d3e203631373435.roa (raw, json)
Hash identifier:          Qq1c0n5BTMM5Q5+7LG9DDqxNGbyXWtCXhnYjmbKtqa4=
Subject key identifier:   A9:64:86:D4:BB:DC:B9:38:FF:DD:3F:C9:E7:EC:B5:AF:B4:5C:20:34
Certificate issuer:       /CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
Certificate serial:       09C80DD4A1196526F14FA6F2CADC0612FF6AFC84
Authority key identifier: 57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3232203d3e203631373435.roa
Signing time:             Wed 06 Jul 2022 16:43:45 +0000
ROA not before:           Wed 06 Jul 2022 16:38:45 +0000
ROA not after:            Wed 05 Jul 2023 16:43:45 +0000
asID:                     61745
IP address blocks:        131.72.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c8:0d:d4:a1:19:65:26:f1:4f:a6:f2:ca:dc:06:12:ff:6a:fc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465
        Validity
            Not Before: Jul  6 16:38:45 2022 GMT
            Not After : Jul  5 16:43:45 2023 GMT
        Subject: CN=A96486D4BBDCB938FFDD3FC9E7ECB5AFB45C2034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:88:dd:c7:d5:e0:b5:3d:c7:87:7d:c8:b3:
                    00:bd:88:23:4a:54:bc:c8:15:91:92:6d:60:61:62:
                    39:79:ce:82:03:f0:9a:2b:f6:9d:8e:d4:f0:f5:91:
                    ba:13:7b:96:5b:87:76:85:0c:27:b0:b6:7c:cc:90:
                    5f:e9:ed:94:b2:7a:f1:fe:7d:0d:78:3d:17:97:dc:
                    49:27:3e:ac:9d:a7:6b:f9:eb:e5:a6:c7:e5:4a:aa:
                    35:97:50:51:2f:5d:8e:60:68:3b:8e:63:db:af:40:
                    b6:29:61:f8:dd:11:03:59:a5:b1:74:59:d8:1b:d8:
                    04:79:7f:71:a5:97:7e:f6:f9:53:3e:00:e9:c0:c7:
                    ae:3e:e2:cf:81:3b:fd:3d:3a:1b:7c:52:91:25:b5:
                    17:40:c0:94:15:84:19:a8:36:a4:9a:9b:f4:26:99:
                    fc:d7:94:9a:37:b0:dc:fc:da:5c:b8:c3:9a:97:4a:
                    6c:cf:e9:59:92:73:8f:24:ab:07:7b:9f:08:87:79:
                    6a:20:94:d5:f7:de:ca:4c:6a:54:39:27:2f:a8:83:
                    3c:ad:45:2f:32:9d:31:61:0f:51:55:f8:eb:27:fe:
                    9b:98:e9:80:bb:d6:a4:66:45:36:59:e2:3c:67:80:
                    e9:67:0c:e5:7b:99:f0:4a:7f:78:90:d0:59:ab:d9:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:86:D4:BB:DC:B9:38:FF:DD:3F:C9:E7:EC:B5:AF:B4:5C:20:34
            X509v3 Authority Key Identifier:
                keyid:57:BB:F0:FE:6F:45:C3:21:E4:A2:C2:1C:0B:36:82:A7:E8:FD:14:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BBF0FE6F45C321E4A2C21C0B3682A7E8FD1465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3232203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:08:e3:01:5e:2a:7e:c4:a3:4c:1d:29:0f:39:48:2c:28:1c:
         c7:d3:d2:a5:ac:91:a3:9e:71:fe:64:2c:ee:3b:38:11:63:f2:
         94:dc:4f:6a:4d:07:43:72:52:98:a6:a6:45:7d:12:7a:5d:bc:
         39:45:a6:41:51:2c:91:b8:42:3b:02:2b:04:ac:b9:2e:de:39:
         56:8b:a3:f2:de:86:b0:c7:b3:35:82:f7:af:8c:9c:65:72:1c:
         8f:96:d3:67:fe:7d:a9:f9:04:12:7b:67:97:27:49:fa:0a:2b:
         8d:bb:e9:0a:57:d5:28:8f:79:cb:28:99:71:be:01:10:92:c8:
         a0:9a:a9:e5:8f:1c:95:86:0b:61:0b:f9:cf:a3:7a:f2:7b:a9:
         57:81:71:7d:87:63:02:c1:31:35:c0:c9:2b:c6:a6:79:5a:dc:
         8b:13:0d:89:07:a0:20:06:b7:7a:7d:d9:dc:9c:cf:bb:36:12:
         e9:6d:28:5b:6f:89:bc:33:3c:2d:1c:95:b6:82:1b:bf:a0:65:
         a6:bd:49:cc:58:52:b1:3d:26:78:32:f0:98:3f:cb:6b:19:0c:
         89:f2:84:cd:61:e8:ce:65:4b:60:cb:97:9f:5e:93:69:61:ec:
         95:c6:e0:4e:2e:c1:ef:fd:a8:35:7a:70:31:7b:1f:66:77:3f:
         1c:2d:93:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCcgN1KEZZSbxT6byytwGEv9q/IQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCQkYwRkU2RjQ1QzMyMUU0QTJDMjFDMEIzNjgyQTdF
OEZEMTQ2NTAeFw0yMjA3MDYxNjM4NDVaFw0yMzA3MDUxNjQzNDVaMDMxMTAvBgNV
BAMTKEE5NjQ4NkQ0QkJEQ0I5MzhGRkREM0ZDOUU3RUNCNUFGQjQ1QzIwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtV4jdx9XgtT3Hh33IswC9iCNK
VLzIFZGSbWBhYjl5zoID8Jor9p2O1PD1kboTe5Zbh3aFDCewtnzMkF/p7ZSyevH+
fQ14PReX3EknPqydp2v56+Wmx+VKqjWXUFEvXY5gaDuOY9uvQLYpYfjdEQNZpbF0
Wdgb2AR5f3Gll372+VM+AOnAx64+4s+BO/09Oht8UpEltRdAwJQVhBmoNqSam/Qm
mfzXlJo3sNz82ly4w5qXSmzP6VmSc48kqwd7nwiHeWoglNX33spMalQ5Jy+ogzyt
RS8ynTFhD1FV+Osn/puY6YC71qRmRTZZ4jxngOlnDOV7mfBKf3iQ0Fmr2d0RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqWSG1LvcuTj/3T/J5+y1r7RcIDQwHwYDVR0j
BBgwFoAUV7vw/m9FwyHkosIcCzaCp+j9FGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMC81N0JCRjBGRTZGNDVDMzIxRTRBMkMyMUMwQjM2ODJBN0U4RkQxNDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3QkJGMEZFNkY0NUMzMjFF
NEEyQzIxQzBCMzY4MkE3RThGRDE0NjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzAv
MzEzMzMxMmUzNzMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzczNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0iYMA0GCSqGSIb3DQEBCwUAA4IBAQC7COMBXip+
xKNMHSkPOUgsKBzH09KlrJGjnnH+ZCzuOzgRY/KU3E9qTQdDclKYpqZFfRJ6Xbw5
RaZBUSyRuEI7AisErLku3jlWi6Py3oawx7M1gvevjJxlchyPltNn/n2p+QQSe2eX
J0n6CiuNu+kKV9Uoj3nLKJlxvgEQksigmqnljxyVhgthC/nPo3rye6lXgXF9h2MC
wTE1wMkrxqZ5WtyLEw2JB6AgBrd6fdncnM+7NhLpbShbb4m8MzwtHJW2ghu/oGWm
vUnMWFKxPSZ4MvCYP8trGQyJ8oTNYejOZUtgy5efXpNpYeyVxuBOLsHv/ag1enAx
ex9mdz8cLZOG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org