Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa
File:                     3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          5ZxC11laDPxGM1exoPrjg4D6QzMOOkEiNnvvwzuPMv0=
Subject key identifier:   2E:D0:92:4C:40:CC:8D:59:A1:17:56:C5:50:1E:0F:B3:AF:F6:AB:86
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       33A54C7083BD3E0CDCDDF636ED2077FE68EA6D14
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 12 Dec 2024 15:11:48 +0000
ROA not before:           Thu 12 Dec 2024 15:06:48 +0000
ROA not after:            Thu 11 Dec 2025 15:11:48 +0000
asID:                     262777
IP address blocks:        131.255.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:4c:70:83:bd:3e:0c:dc:dd:f6:36:ed:20:77:fe:68:ea:6d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Dec 12 15:06:48 2024 GMT
            Not After : Dec 11 15:11:48 2025 GMT
        Subject: CN=2ED0924C40CC8D59A11756C5501E0FB3AFF6AB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:e8:86:a2:92:f5:13:7a:28:f0:5e:72:2a:
                    20:2e:e6:40:85:ba:4d:47:e5:bd:28:77:88:cd:e8:
                    20:d7:6a:14:96:cd:fc:f6:68:a1:81:7b:7b:cd:da:
                    75:1d:b4:98:93:69:51:5b:f7:e2:9b:ee:cb:f0:c3:
                    66:84:a5:7e:90:b6:4a:cf:32:3a:94:c5:5b:3d:3a:
                    34:66:a6:d7:0a:21:eb:95:3a:45:5d:05:9f:ac:95:
                    0c:be:8f:78:3a:ff:82:b8:16:55:84:93:21:79:bd:
                    dc:9d:cd:ae:30:8d:17:3a:0a:9f:9c:83:e8:c8:9b:
                    3a:87:e7:96:7b:b1:d3:08:92:3a:00:83:6f:10:40:
                    04:11:37:22:ba:cb:68:20:d3:28:73:f1:7b:e4:5a:
                    78:3d:25:4a:2d:48:91:6b:8f:20:03:11:6f:af:d8:
                    73:c7:d1:84:0b:04:a8:18:c4:60:e7:28:79:97:a5:
                    1d:73:20:d2:8c:28:e8:1b:b1:c5:06:e4:57:46:c5:
                    23:b6:1d:bc:7b:36:c0:1e:a4:47:ce:e7:29:19:b4:
                    8c:69:05:1d:7f:fd:42:6b:98:d1:0b:f0:e1:34:2e:
                    e1:40:6d:25:5b:02:b0:eb:09:0e:5c:31:e2:85:46:
                    fb:b8:b5:25:e4:16:25:ec:b2:4a:42:81:9c:75:b6:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D0:92:4C:40:CC:8D:59:A1:17:56:C5:50:1E:0F:B3:AF:F6:AB:86
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:66:cc:5e:e9:36:d6:63:cf:6e:b0:95:4a:ce:51:f8:32:
         b9:6f:31:1d:04:36:36:09:fe:f0:03:ec:7a:00:d5:9e:0e:ae:
         fe:a8:85:7b:78:fa:22:04:a9:56:e4:7e:f6:41:02:f4:1a:9c:
         6d:b4:68:11:03:48:44:e3:13:de:1e:73:26:87:4b:f4:0b:bd:
         3d:1d:07:2e:cc:80:0e:3c:fd:d2:6c:dc:40:cb:72:cb:6c:b6:
         9d:ea:42:55:e1:ed:8d:86:39:05:eb:6d:11:92:45:60:db:d5:
         ce:01:17:90:ba:48:7a:78:f9:5d:a4:58:d0:32:3b:c1:e5:26:
         27:38:6d:e0:5d:4b:d0:da:6b:e1:24:30:2b:8e:07:ab:7d:62:
         3e:f8:1e:1e:5d:bc:53:f2:7f:da:05:e7:31:16:18:69:8f:71:
         50:0f:98:b0:d3:fb:57:17:fd:3a:3a:e2:3b:cb:35:e6:30:86:
         3e:74:28:d8:76:f3:d1:fc:08:5e:6b:e7:f4:30:a5:7e:df:96:
         05:06:bf:de:56:61:b1:7e:f5:69:3d:01:f6:a1:95:14:e7:67:
         18:b1:78:e2:aa:95:8e:47:7c:1b:e4:9d:e5:c5:be:a4:c4:55:
         f8:58:41:d2:f7:28:21:52:15:18:5b:e7:d2:17:c6:70:13:bc:
         ec:df:0d:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM6VMcIO9Pgzc3fY27SB3/mjqbRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYzNDdBNEMyQUU0MDNDOTk2QTkzNzFFRjYyRjFDRTE5
RTMzRjYwNjAeFw0yNDEyMTIxNTA2NDhaFw0yNTEyMTExNTExNDhaMDMxMTAvBgNV
BAMTKDJFRDA5MjRDNDBDQzhENTlBMTE3NTZDNTUwMUUwRkIzQUZGNkFCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsm+iGopL1E3oo8F5yKiAu5kCF
uk1H5b0od4jN6CDXahSWzfz2aKGBe3vN2nUdtJiTaVFb9+Kb7svww2aEpX6QtkrP
MjqUxVs9OjRmptcKIeuVOkVdBZ+slQy+j3g6/4K4FlWEkyF5vdydza4wjRc6Cp+c
g+jImzqH55Z7sdMIkjoAg28QQAQRNyK6y2gg0yhz8XvkWng9JUotSJFrjyADEW+v
2HPH0YQLBKgYxGDnKHmXpR1zINKMKOgbscUG5FdGxSO2Hbx7NsAepEfO5ykZtIxp
BR1//UJrmNEL8OE0LuFAbSVbArDrCQ5cMeKFRvu4tSXkFiXsskpCgZx1tgtVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULtCSTEDMjVmhF1bFUB4Ps6/2q4YwHwYDVR0j
BBgwFoAURjR6TCrkA8mWqTce9i8c4Z4z9gYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FVUzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpN
S2IvMC80NjM0N0E0QzJBRTQwM0M5OTZBOTM3MUVGNjJGMUNFMTlFMzNGNjA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MzQ3QTRDMkFFNDAzQzk5
NkE5MzcxRUY2MkYxQ0UxOUUzM0Y2MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhVVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzAv
MzEzMzMxMmUzMjM1MzUyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/zAwDQYJKoZIhvcNAQELBQADggEBAEeoZsxe
6TbWY89usJVKzlH4MrlvMR0ENjYJ/vAD7HoA1Z4Orv6ohXt4+iIEqVbkfvZBAvQa
nG20aBEDSETjE94ecyaHS/QLvT0dBy7MgA48/dJs3EDLcststp3qQlXh7Y2GOQXr
bRGSRWDb1c4BF5C6SHp4+V2kWNAyO8HlJic4beBdS9Daa+EkMCuOB6t9Yj74Hh5d
vFPyf9oF5zEWGGmPcVAPmLDT+1cX/To64jvLNeYwhj50KNh289H8CF5r5/QwpX7f
lgUGv95WYbF+9Wk9AfahlRTnZxixeOKqlY5HfBvkneXFvqTEVfhYQdL3KCFSFRhb
59IXxnATvOzfDVM=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:27 2025 by rpki-client