Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232342e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          18OS9jyA/r73UWgwwprdBce4xq+1+p5IUKxJ4zsxqmg=
Subject key identifier:   7F:89:5A:10:21:56:98:04:43:DC:37:ED:52:E9:32:32:00:A8:74:2F
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       6456F924F05AD185ABB1B2E07221E729359947EF
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:12:05 +0000
ROA not before:           Thu 28 Dec 2023 17:07:05 +0000
ROA not after:            Thu 26 Dec 2024 17:12:05 +0000
asID:                     263522
IP address blocks:        131.108.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:56:f9:24:f0:5a:d1:85:ab:b1:b2:e0:72:21:e7:29:35:99:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:07:05 2023 GMT
            Not After : Dec 26 17:12:05 2024 GMT
        Subject: CN=7F895A102156980443DC37ED52E9323200A8742F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:99:b9:21:e4:32:de:49:63:96:37:3a:58:99:
                    b9:3b:95:42:e8:fe:37:e8:78:fc:35:ca:55:a4:00:
                    94:7a:8f:5f:d7:8b:73:e1:04:65:3b:3f:b6:5b:ba:
                    d1:97:49:a7:7e:2b:6d:c7:b5:c7:e8:4c:80:db:0a:
                    5c:1b:95:11:39:5d:0b:d0:9d:78:13:e4:7b:c3:31:
                    97:e2:38:75:2d:16:88:4d:28:25:a4:06:e7:72:ea:
                    d6:f8:ad:d2:41:73:5a:bc:08:08:fb:68:77:d5:27:
                    2f:7c:d6:14:01:a6:1a:cc:19:c8:7e:e4:f8:eb:23:
                    bf:1f:ed:d7:6c:08:42:6e:f4:84:ea:87:e9:89:e4:
                    4b:7a:0b:ee:94:2d:b2:9a:48:6f:bb:ca:1e:78:1f:
                    c8:aa:66:f0:45:47:d4:bd:75:31:42:52:04:26:a7:
                    e8:13:48:b9:ea:a8:b9:2c:4b:7c:2d:de:3a:44:bf:
                    12:ac:74:b3:40:a0:90:49:48:36:3f:45:4b:5b:ae:
                    60:ea:24:38:45:21:e7:5c:ad:73:59:a8:89:b2:7c:
                    7b:71:ef:8f:36:8e:de:73:3c:df:8f:89:b1:f1:55:
                    14:ca:1f:02:ab:c3:a2:5a:46:6b:d6:e5:f0:48:e4:
                    d3:b3:11:2f:9f:4b:09:10:6e:80:cc:dc:52:4a:80:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:5A:10:21:56:98:04:43:DC:37:ED:52:E9:32:32:00:A8:74:2F
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3133312e3130382e3232342e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:7c:88:1a:74:12:da:bf:39:4e:f8:54:e0:f7:68:cd:19:
         72:71:44:a1:c3:8e:9f:3b:13:c5:80:68:18:c5:bd:3d:72:76:
         26:bf:97:d8:67:a9:fc:f8:ff:a5:87:9a:36:0a:d0:bf:2e:c8:
         13:7f:37:3d:05:6c:72:ce:b0:8e:47:bd:97:6d:1f:d9:da:8c:
         4f:c5:68:5c:d9:68:64:1f:47:75:24:ed:6e:e6:90:13:61:c2:
         5f:32:8d:57:20:5d:59:0f:aa:64:fb:8d:ce:a6:29:d1:0c:07:
         8a:66:95:18:b7:54:59:1e:04:d2:74:69:03:be:3c:c7:aa:39:
         8f:c9:cd:49:42:9b:74:8f:c7:5d:05:9c:27:bf:29:c7:86:08:
         7d:a0:26:60:65:0d:97:06:a8:02:4d:7d:80:1c:59:1f:56:26:
         20:ae:7b:14:30:4c:de:b8:51:a7:c3:5a:2e:5e:d7:bb:d3:aa:
         63:00:52:44:8d:b1:62:3e:b1:cd:35:35:3a:49:e5:15:91:0a:
         aa:fa:fa:25:8f:ec:b0:82:49:dc:a8:83:de:97:cd:53:bd:0c:
         78:cc:df:88:48:e0:0f:cb:ef:19:b4:56:1d:e9:cf:9d:ba:f3:
         b3:c0:26:14:a4:b2:73:05:e1:4e:a6:c7:c4:5a:bd:66:dd:4b:
         95:e5:c2:c8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZFb5JPBa0YWrsbLgciHnKTWZR+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkUwMzZEQjNCRUYxQjUwN0NCREI2QTFBQjhBMzZC
OENGNzZFQzAeFw0yMzEyMjgxNzA3MDVaFw0yNDEyMjYxNzEyMDVaMDMxMTAvBgNV
BAMTKDdGODk1QTEwMjE1Njk4MDQ0M0RDMzdFRDUyRTkzMjMyMDBBODc0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDombkh5DLeSWOWNzpYmbk7lULo
/jfoePw1ylWkAJR6j1/Xi3PhBGU7P7ZbutGXSad+K23HtcfoTIDbClwblRE5XQvQ
nXgT5HvDMZfiOHUtFohNKCWkBudy6tb4rdJBc1q8CAj7aHfVJy981hQBphrMGch+
5PjrI78f7ddsCEJu9ITqh+mJ5Et6C+6ULbKaSG+7yh54H8iqZvBFR9S9dTFCUgQm
p+gTSLnqqLksS3wt3jpEvxKsdLNAoJBJSDY/RUtbrmDqJDhFIedcrXNZqImyfHtx
7482jt5zPN+PibHxVRTKHwKrw6JaRmvW5fBI5NOzES+fSwkQboDM3FJKgHDNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUf4laECFWmARD3DftUukyMgCodC8wHwYDVR0j
BBgwFoAUbULgNts77xtQfL22oauKNrjPduwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMC82RDQyRTAzNkRCM0JFRjFCNTA3Q0JEQjZBMUFCOEEzNkI4Q0Y3NkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENDJFMDM2REIzQkVGMUI1
MDdDQkRCNkExQUI4QTM2QjhDRjc2RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzAv
MzEzMzMxMmUzMTMwMzgyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINs4DANBgkqhkiG9w0BAQsFAAOCAQEAvN98
iBp0Etq/OU74VOD3aM0ZcnFEocOOnzsTxYBoGMW9PXJ2Jr+X2Gep/Pj/pYeaNgrQ
vy7IE383PQVscs6wjke9l20f2dqMT8VoXNloZB9HdSTtbuaQE2HCXzKNVyBdWQ+q
ZPuNzqYp0QwHimaVGLdUWR4E0nRpA748x6o5j8nNSUKbdI/HXQWcJ78px4YIfaAm
YGUNlwaoAk19gBxZH1YmIK57FDBM3rhRp8NaLl7Xu9OqYwBSRI2xYj6xzTU1Oknl
FZEKqvr6JY/ssIJJ3KiD3pfNU70MeMzfiEjgD8vvGbRWHenPnbrzs8AmFKSycwXh
TqbHxFq9Zt1LleXCyA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org