Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa (raw, json)
Hash identifier:          R4UwCpG9iKKkOWMAwKFHB1W6n984W74WZvWJo1+Tf8k=
Subject key identifier:   12:2E:44:91:61:1E:93:8A:13:63:48:2C:C3:44:30:F8:9C:3E:A9:E3
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       714FFA276771D863A641FF1362DCAB0EBCE1712B
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa
Signing time:             Fri 08 Mar 2024 13:44:48 +0000
ROA not before:           Fri 08 Mar 2024 13:39:48 +0000
ROA not after:            Fri 07 Mar 2025 13:44:48 +0000
asID:                     52758
IP address blocks:        201.131.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:fa:27:67:71:d8:63:a6:41:ff:13:62:dc:ab:0e:bc:e1:71:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar  8 13:39:48 2024 GMT
            Not After : Mar  7 13:44:48 2025 GMT
        Subject: CN=122E4491611E938A1363482CC34430F89C3EA9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:f3:bc:08:59:93:7f:29:0f:89:c5:1b:05:
                    1f:7b:f6:69:58:26:f3:96:a9:2d:62:af:be:7a:9f:
                    2b:c9:08:e7:b1:c7:47:a6:59:a7:a6:f3:c5:66:26:
                    af:65:a1:ab:05:ef:ed:20:d9:b3:64:75:1a:65:44:
                    36:68:c9:cd:5b:7e:44:19:b6:84:5e:32:3b:d5:ad:
                    54:8a:bd:d0:7f:c9:47:98:b5:98:a2:ed:58:bb:70:
                    53:c4:57:fa:3e:bf:2a:18:c6:e1:a4:28:71:2c:af:
                    97:7c:48:83:c0:9e:4a:24:7b:45:3f:f4:6d:b8:30:
                    f7:a1:6a:bc:74:d3:fd:12:a2:e2:25:3b:42:13:b1:
                    2a:dd:a7:86:53:28:f2:35:f2:69:f5:d5:12:99:ed:
                    1f:ba:fd:f7:76:dc:dd:52:2c:b6:25:ea:68:90:d5:
                    a8:7d:d1:c8:d8:05:ea:b6:4e:df:e1:e7:76:eb:58:
                    5a:7d:2d:9b:11:f3:a3:2f:a1:ca:65:3b:03:83:00:
                    0d:cb:9c:63:42:aa:40:b6:85:ab:8e:da:bd:6d:c3:
                    28:72:1b:71:00:a7:bb:4c:85:93:68:e1:db:9f:eb:
                    ea:27:99:49:17:ff:5c:44:48:3e:cf:b3:46:b4:70:
                    37:3a:b7:96:ae:a1:04:d0:ab:2f:ed:f1:4d:78:42:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:44:91:61:1E:93:8A:13:63:48:2C:C3:44:30:F8:9C:3E:A9:E3
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:fd:13:63:6d:ab:e0:74:ee:e8:65:46:24:39:06:73:ba:
         ae:41:d1:ae:f7:cf:3f:dc:0c:8b:7b:9c:00:97:d6:b0:5b:9f:
         b5:d9:56:c3:4a:52:f8:77:32:cc:60:b5:bc:ac:9c:9d:4b:32:
         cd:75:c6:22:c0:34:f3:3b:17:e2:37:b0:3a:aa:03:48:e5:21:
         28:f4:eb:b2:27:8a:a1:a5:77:01:b5:2a:29:cb:39:0a:8a:eb:
         d2:c4:e4:20:94:15:3e:45:e8:96:0d:d8:bc:39:56:8d:76:f4:
         ce:4f:da:1a:6a:9e:58:16:22:75:f0:18:ab:01:99:cf:bc:5a:
         e3:16:61:88:dc:7e:d0:d1:67:3a:e8:49:33:1f:62:98:a9:5c:
         4d:36:a7:41:57:b3:d1:8f:0d:99:0f:e4:5b:cb:94:71:98:1e:
         e2:c6:c9:04:f5:75:ab:b0:bc:67:f0:02:f4:ae:78:a4:bb:74:
         f4:4e:41:15:f1:2f:74:38:fc:4c:90:58:4d:90:e1:fa:5d:8b:
         e2:c3:21:1b:16:d6:af:f5:72:b8:15:e8:f3:16:54:8c:f8:3c:
         7c:07:69:e0:a1:05:22:93:b8:8d:65:a3:a9:24:f7:70:12:05:
         23:95:c4:58:95:48:cd:40:01:fa:db:f5:d6:a5:a1:fe:67:f2:
         bf:c8:6a:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcU/6J2dx2GOmQf8TYtyrDrzhcSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMDgxMzM5NDhaFw0yNTAzMDcxMzQ0NDhaMDMxMTAvBgNV
BAMTKDEyMkU0NDkxNjExRTkzOEExMzYzNDgyQ0MzNDQzMEY4OUMzRUE5RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSsvO8CFmTfykPicUbBR979mlY
JvOWqS1ir756nyvJCOexx0emWaem88VmJq9loasF7+0g2bNkdRplRDZoyc1bfkQZ
toReMjvVrVSKvdB/yUeYtZii7Vi7cFPEV/o+vyoYxuGkKHEsr5d8SIPAnkoke0U/
9G24MPeharx00/0SouIlO0ITsSrdp4ZTKPI18mn11RKZ7R+6/fd23N1SLLYl6miQ
1ah90cjYBeq2Tt/h53brWFp9LZsR86MvocplOwODAA3LnGNCqkC2hauO2r1twyhy
G3EAp7tMhZNo4duf6+onmUkX/1xESD7Ps0a0cDc6t5auoQTQqy/t8U14QoH3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEi5EkWEek4oTY0gsw0Qw+Jw+qeMwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJg/AwDQYJKoZIhvcNAQELBQADggEBAJwE/RNj
bavgdO7oZUYkOQZzuq5B0a73zz/cDIt7nACX1rBbn7XZVsNKUvh3MsxgtbysnJ1L
Ms11xiLANPM7F+I3sDqqA0jlISj067IniqGldwG1KinLOQqK69LE5CCUFT5F6JYN
2Lw5Vo129M5P2hpqnlgWInXwGKsBmc+8WuMWYYjcftDRZzroSTMfYpipXE02p0FX
s9GPDZkP5FvLlHGYHuLGyQT1dauwvGfwAvSueKS7dPROQRXxL3Q4/EyQWE2Q4fpd
i+LDIRsW1q/1crgV6PMWVIz4PHwHaeChBSKTuI1lo6kk93ASBSOVxFiVSM1AAfrb
9dalof5n8r/IauI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org