Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa (raw, json)
Hash identifier:          8v5T3+0wA6nCFo9tTs71ovLwr/C4hohMxOEh3XbVZKU=
Subject key identifier:   58:35:CA:E2:64:E0:0A:1C:B1:CF:03:D0:F2:F4:87:FE:D5:1B:56:D9
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       5B9F4D6E067E296C5C22520C578CAD340A37B88B
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
Signing time:             Fri 08 Mar 2024 13:44:49 +0000
ROA not before:           Fri 08 Mar 2024 13:39:49 +0000
ROA not after:            Fri 07 Mar 2025 13:44:49 +0000
asID:                     52758
IP address blocks:        201.131.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9f:4d:6e:06:7e:29:6c:5c:22:52:0c:57:8c:ad:34:0a:37:b8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar  8 13:39:49 2024 GMT
            Not After : Mar  7 13:44:49 2025 GMT
        Subject: CN=5835CAE264E00A1CB1CF03D0F2F487FED51B56D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:da:55:d3:c4:1d:77:37:9e:44:4c:64:09:
                    e8:f2:6e:3b:d4:34:72:7f:c0:1b:f5:8e:4d:12:a8:
                    63:9d:61:78:a7:a7:84:b7:64:3e:35:b9:9f:e4:b7:
                    5c:47:4f:4e:44:7a:29:15:8a:11:31:dc:a3:e2:46:
                    ab:f0:51:e5:00:86:b0:6f:97:fc:56:6c:c0:ae:55:
                    64:fd:48:47:ff:d2:b0:64:d6:11:f4:67:c2:d6:f9:
                    8b:79:ce:6d:7b:3d:62:42:b9:5b:8d:b6:b3:9c:04:
                    1c:62:f9:85:9b:18:f2:b9:14:0b:9c:d5:31:4a:6b:
                    6b:4b:83:53:86:75:4c:b7:c9:a8:97:c0:e1:6f:05:
                    20:61:8c:42:13:eb:a9:50:cd:88:46:f4:b4:08:e6:
                    b3:45:f5:c0:de:d4:c8:75:3e:a0:b3:50:a1:df:f2:
                    b5:40:35:99:f5:34:96:65:dd:ae:b0:42:cf:9b:56:
                    10:36:8f:2e:67:38:40:95:54:33:9a:c8:1f:b1:82:
                    a5:22:a7:da:72:fc:57:66:50:e1:0f:ce:0c:68:54:
                    44:74:28:86:15:22:b7:44:c4:51:a5:b9:20:67:36:
                    0f:f8:66:df:18:3c:48:b1:88:fd:2b:3a:1c:3f:d5:
                    5a:22:55:5b:f4:f6:5d:e3:39:d6:f7:bd:4e:30:77:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:CA:E2:64:E0:0A:1C:B1:CF:03:D0:F2:F4:87:FE:D5:1B:56:D9
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:a3:1e:fd:8c:ce:79:07:c2:2a:5e:0b:90:59:11:ee:25:
         d0:b4:63:50:7d:17:34:14:e5:44:37:45:e9:9d:72:fa:06:7b:
         ee:69:67:2a:39:b8:bc:9e:ad:49:90:92:e6:a6:b2:d3:d8:fe:
         cd:15:dd:de:bc:af:71:82:86:55:a0:58:87:f7:84:11:e0:f0:
         b4:ce:be:96:08:2c:7e:67:9d:aa:b9:b2:c8:b4:be:1b:db:3b:
         0f:ed:b3:78:89:a9:36:b2:ed:2e:0b:2c:6e:e0:35:a7:b8:ad:
         c9:d3:b8:22:36:19:a7:17:37:63:1f:21:68:a5:17:c3:fd:13:
         6c:de:57:35:d7:b3:34:b4:7a:84:f4:8d:be:12:e8:6e:8f:86:
         6d:10:f1:f9:28:9c:68:97:e8:be:fc:c7:05:b5:81:d5:7f:72:
         44:4e:8a:63:8a:47:dd:f3:e5:65:af:14:0c:63:04:13:d7:33:
         c3:c5:99:60:c9:eb:46:e2:6c:d2:5c:e8:5b:6e:b0:13:85:2f:
         c1:01:78:a3:af:cf:69:1e:4d:36:7f:c1:d1:f1:e8:c1:cf:97:
         05:8f:6b:95:ec:de:7d:64:e7:ad:71:33:88:11:a2:10:f2:64:
         9b:9d:78:74:9b:16:6e:28:98:07:5d:7b:2c:99:36:5e:ad:86:
         48:df:cd:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW59NbgZ+KWxcIlIMV4ytNAo3uIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMDgxMzM5NDlaFw0yNTAzMDcxMzQ0NDlaMDMxMTAvBgNV
BAMTKDU4MzVDQUUyNjRFMDBBMUNCMUNGMDNEMEYyRjQ4N0ZFRDUxQjU2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDntpV08QddzeeRExkCejybjvU
NHJ/wBv1jk0SqGOdYXinp4S3ZD41uZ/kt1xHT05EeikVihEx3KPiRqvwUeUAhrBv
l/xWbMCuVWT9SEf/0rBk1hH0Z8LW+Yt5zm17PWJCuVuNtrOcBBxi+YWbGPK5FAuc
1TFKa2tLg1OGdUy3yaiXwOFvBSBhjEIT66lQzYhG9LQI5rNF9cDe1Mh1PqCzUKHf
8rVANZn1NJZl3a6wQs+bVhA2jy5nOECVVDOayB+xgqUip9py/FdmUOEPzgxoVER0
KIYVIrdExFGluSBnNg/4Zt8YPEixiP0rOhw/1VoiVVv09l3jOdb3vU4wd7BnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWDXK4mTgChyxzwPQ8vSH/tUbVtkwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/AwDQYJKoZIhvcNAQELBQADggEBAAELox79
jM55B8IqXguQWRHuJdC0Y1B9FzQU5UQ3RemdcvoGe+5pZyo5uLyerUmQkuamstPY
/s0V3d68r3GChlWgWIf3hBHg8LTOvpYILH5nnaq5ssi0vhvbOw/ts3iJqTay7S4L
LG7gNae4rcnTuCI2GacXN2MfIWilF8P9E2zeVzXXszS0eoT0jb4S6G6Phm0Q8fko
nGiX6L78xwW1gdV/ckROimOKR93z5WWvFAxjBBPXM8PFmWDJ60bibNJc6FtusBOF
L8EBeKOvz2keTTZ/wdHx6MHPlwWPa5Xs3n1k561xM4gRohDyZJudeHSbFm4omAdd
eyyZNl6thkjfzYY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org