Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3232203d3e20323633353232.roa
File:                     3133312e3130382e3232342e302f32322d3232203d3e20323633353232.roa (raw, json)
Hash identifier:          mEJ76xU9+6wl+pz0RoBuAdpV0gf59c11qGF9g8juSjc=
Subject key identifier:   2D:F6:13:16:95:57:29:0B:51:6D:32:19:A9:DC:7A:E2:78:98:34:96
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       24FA4ADD26C406543A84203634F77A84DE0D6952
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3232203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:00:32 +0000
ROA not before:           Wed 25 Oct 2023 00:55:32 +0000
ROA not after:            Wed 23 Oct 2024 01:00:32 +0000
asID:                     263522
IP address blocks:        131.108.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:4a:dd:26:c4:06:54:3a:84:20:36:34:f7:7a:84:de:0d:69:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:55:32 2023 GMT
            Not After : Oct 23 01:00:32 2024 GMT
        Subject: CN=2DF613169557290B516D3219A9DC7AE278983496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:ff:2e:34:c1:79:4e:3b:49:92:80:ea:ec:
                    02:84:0a:1d:1a:f9:e7:02:e4:40:63:42:a5:6e:97:
                    f4:c9:c5:60:4f:88:d6:f8:cf:31:9f:53:bb:81:b5:
                    0a:ac:76:44:c5:d2:68:99:78:2c:8d:5e:01:fc:46:
                    8c:77:71:e3:b2:fc:d5:39:f1:db:f9:0e:28:38:a8:
                    58:3e:d6:fa:05:46:60:83:07:c7:80:82:a2:18:77:
                    61:67:3e:9c:40:dd:49:f1:ff:74:bd:db:e3:94:ea:
                    67:e3:10:d9:6c:1f:94:6a:f0:cf:2e:0c:bb:a5:4d:
                    a2:28:c3:4b:54:1b:c3:d9:ea:97:d9:2d:cf:f6:88:
                    46:6a:20:28:c9:61:13:ee:f9:61:5b:dd:0e:93:18:
                    1a:e5:29:90:ce:2f:e2:ed:1d:3b:46:c2:48:ef:87:
                    cc:27:8b:4c:df:eb:7d:a4:7f:b5:34:d3:bb:2f:ec:
                    d9:49:19:07:92:66:cd:55:78:7c:e5:fe:dd:a4:5e:
                    16:3a:e4:f5:10:07:50:5e:57:68:c5:1b:bb:bd:e6:
                    ea:e8:4d:02:44:0e:71:72:fa:25:e3:8d:16:c8:2a:
                    28:bc:23:a2:54:5a:40:9c:09:6a:86:65:4c:6e:f4:
                    3d:61:7a:0e:f5:29:04:a0:bc:9f:60:b0:42:19:d4:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:13:16:95:57:29:0B:51:6D:32:19:A9:DC:7A:E2:78:98:34:96
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32322d3232203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:bc:de:18:ac:51:f9:1d:87:07:fb:73:da:f5:44:a8:7f:44:
         92:22:45:80:21:00:d0:92:3a:6f:d8:15:c1:bc:20:fb:53:95:
         e8:2e:5e:d7:2e:37:dc:ab:dd:dc:29:96:0f:ff:80:af:83:dd:
         a3:cd:3e:b3:6b:b1:66:0a:c1:dd:b2:8f:6f:20:92:34:03:3f:
         87:26:76:af:8f:cb:68:a5:b4:50:04:f7:db:dc:37:c1:2c:70:
         dd:f0:c7:40:d7:c0:25:ee:54:eb:7c:ee:a3:73:f3:ab:c5:bf:
         5a:36:37:36:5a:d4:5b:8f:a9:38:c0:12:47:fc:16:d2:08:87:
         16:a1:4f:0b:81:00:36:e6:2e:cd:98:5c:68:3a:53:74:c8:44:
         85:58:b7:56:44:13:23:a3:46:f8:b7:5d:f9:c6:00:6b:93:92:
         90:cb:e1:bb:5d:7f:27:61:18:a1:0f:4e:cd:02:58:71:4a:2f:
         01:b2:60:40:aa:07:9c:b9:a8:e7:e7:55:c6:92:62:11:c1:6a:
         cf:b1:84:6b:be:5b:5f:70:57:c4:66:bc:9c:0a:f1:f9:7a:45:
         db:49:41:91:e9:61:61:84:87:d1:ae:33:09:bb:69:30:3f:3b:
         4c:18:67:6a:3e:0c:55:9d:2d:27:8e:2e:16:70:82:62:34:74:
         17:d5:e1:77
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJPpK3SbEBlQ6hCA2NPd6hN4NaVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkUwMzZEQjNCRUYxQjUwN0NCREI2QTFBQjhBMzZC
OENGNzZFQzAeFw0yMzEwMjUwMDU1MzJaFw0yNDEwMjMwMTAwMzJaMDMxMTAvBgNV
BAMTKDJERjYxMzE2OTU1NzI5MEI1MTZEMzIxOUE5REM3QUUyNzg5ODM0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQk/8uNMF5TjtJkoDq7AKECh0a
+ecC5EBjQqVul/TJxWBPiNb4zzGfU7uBtQqsdkTF0miZeCyNXgH8Rox3ceOy/NU5
8dv5Dig4qFg+1voFRmCDB8eAgqIYd2FnPpxA3Unx/3S92+OU6mfjENlsH5Rq8M8u
DLulTaIow0tUG8PZ6pfZLc/2iEZqICjJYRPu+WFb3Q6TGBrlKZDOL+LtHTtGwkjv
h8wni0zf632kf7U007sv7NlJGQeSZs1VeHzl/t2kXhY65PUQB1BeV2jFG7u95uro
TQJEDnFy+iXjjRbIKii8I6JUWkCcCWqGZUxu9D1heg71KQSgvJ9gsEIZ1COJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULfYTFpVXKQtRbTIZqdx64niYNJYwHwYDVR0j
BBgwFoAUbULgNts77xtQfL22oauKNrjPduwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMC82RDQyRTAzNkRCM0JFRjFCNTA3Q0JEQjZBMUFCOEEzNkI4Q0Y3NkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENDJFMDM2REIzQkVGMUI1
MDdDQkRCNkExQUI4QTM2QjhDRjc2RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzAv
MzEzMzMxMmUzMTMwMzgyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNs4DANBgkqhkiG9w0BAQsFAAOCAQEArrze
GKxR+R2HB/tz2vVEqH9EkiJFgCEA0JI6b9gVwbwg+1OV6C5e1y433Kvd3CmWD/+A
r4Pdo80+s2uxZgrB3bKPbyCSNAM/hyZ2r4/LaKW0UAT329w3wSxw3fDHQNfAJe5U
63zuo3Pzq8W/WjY3NlrUW4+pOMASR/wW0giHFqFPC4EANuYuzZhcaDpTdMhEhVi3
VkQTI6NG+Ldd+cYAa5OSkMvhu11/J2EYoQ9OzQJYcUovAbJgQKoHnLmo5+dVxpJi
EcFqz7GEa75bX3BXxGa8nArx+XpF20lBkelhYYSH0a4zCbtpMD87TBhnaj4MVZ0t
J44uFnCCYjR0F9Xhdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org