Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          MkF6ePMcJpEM4c8w3T7Ff3pSS4dE42RrlO1RyJAnkgs=
Subject key identifier:   BB:E9:79:F6:0D:6B:EF:55:10:44:79:06:53:FB:68:BA:68:B8:87:64
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       5CA318C189BB55D05F69D7AE4C6393FEFB3D003B
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 08 Mar 2024 13:44:49 +0000
ROA not before:           Fri 08 Mar 2024 13:39:49 +0000
ROA not after:            Fri 07 Mar 2025 13:44:49 +0000
asID:                     52758
IP address blocks:        201.131.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a3:18:c1:89:bb:55:d0:5f:69:d7:ae:4c:63:93:fe:fb:3d:00:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar  8 13:39:49 2024 GMT
            Not After : Mar  7 13:44:49 2025 GMT
        Subject: CN=BBE979F60D6BEF551044790653FB68BA68B88764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:75:d1:df:bc:a2:a5:51:3b:ad:f0:9e:71:
                    63:da:9d:19:33:11:4f:b5:0f:99:9b:85:15:04:45:
                    1e:c9:0b:6e:f2:eb:bd:d2:51:2a:4f:c3:60:57:2e:
                    29:a6:77:b5:6e:51:49:63:d9:c8:58:31:e8:11:56:
                    73:49:9e:1c:d6:32:00:1f:e5:93:c6:b2:b3:71:f7:
                    ba:c6:f8:f9:61:e1:ef:5d:79:1c:7a:60:aa:14:10:
                    66:b4:10:16:83:b5:a4:e0:5f:bf:f1:d5:91:0c:12:
                    ea:b8:09:e2:e1:9f:62:5b:36:7d:72:2b:04:2c:d3:
                    c5:f3:1f:5f:ea:aa:17:4d:3e:3e:d8:d2:0c:46:64:
                    4a:ee:84:ff:2d:d1:e7:a6:55:d1:80:2b:88:ec:44:
                    ec:f4:d3:82:e2:11:9d:a1:1f:fe:68:49:20:64:5f:
                    82:9b:f1:f4:52:bb:b6:ca:f8:b8:3c:28:4f:21:6a:
                    df:e0:a2:91:91:2c:8e:b5:e3:c6:25:b0:91:24:a8:
                    35:b9:15:90:6a:ab:3f:1f:fd:82:0e:64:dd:5d:f9:
                    a4:cd:3c:de:c0:32:b4:fb:42:3d:3c:3c:8b:d9:c9:
                    c7:8f:c7:52:62:80:3d:c9:de:99:cd:16:99:50:f4:
                    5c:e2:01:66:9c:7f:bf:36:1f:a0:1d:46:bf:01:e7:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:79:F6:0D:6B:EF:55:10:44:79:06:53:FB:68:BA:68:B8:87:64
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234302e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:b5:72:0e:9b:d2:ae:a1:b1:53:c9:47:30:fb:47:c2:1c:01:
         46:56:46:f7:02:47:4b:54:15:5e:f4:b9:0f:8c:e4:12:c1:76:
         f3:48:3d:26:4e:de:fa:cf:f5:a5:b2:f5:b2:9a:84:4c:6b:64:
         5a:f6:0f:5e:1d:5a:8b:b9:c5:b9:56:d7:5a:df:ad:4e:55:a5:
         af:79:16:80:a9:98:49:fc:ca:16:7f:58:e2:ab:65:2b:10:52:
         6b:e7:a0:ab:9b:42:6e:f8:f7:ad:cc:86:4f:d3:22:1a:7a:29:
         34:ed:9b:f3:1e:ae:61:ce:82:a8:52:06:0d:de:10:65:65:b0:
         70:e4:73:bf:b1:6f:c4:dd:1d:e3:7d:f7:1e:4b:14:e0:6f:f7:
         62:e9:b3:30:9c:9e:ea:ef:9b:57:c2:43:b3:7a:7a:89:47:28:
         46:c5:41:e7:74:62:6e:6c:49:0f:50:c2:ae:a7:f4:39:ca:64:
         91:17:eb:e6:7a:6f:ff:f1:6e:4f:b6:81:8e:f4:ab:37:f9:c5:
         42:b0:c1:11:e7:92:12:5a:ff:3a:f9:b2:94:09:3c:3d:fc:fb:
         25:94:25:e9:d0:59:b3:85:a6:25:f7:7a:83:86:63:5d:f7:c5:
         29:5f:f7:33:dd:a3:14:82:60:87:2f:a7:6a:07:26:5f:64:6a:
         6c:26:7f:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXKMYwYm7VdBfadeuTGOT/vs9ADswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMDgxMzM5NDlaFw0yNTAzMDcxMzQ0NDlaMDMxMTAvBgNV
BAMTKEJCRTk3OUY2MEQ2QkVGNTUxMDQ0NzkwNjUzRkI2OEJBNjhCODg3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/HXR37yipVE7rfCecWPanRkz
EU+1D5mbhRUERR7JC27y673SUSpPw2BXLimmd7VuUUlj2chYMegRVnNJnhzWMgAf
5ZPGsrNx97rG+Plh4e9deRx6YKoUEGa0EBaDtaTgX7/x1ZEMEuq4CeLhn2JbNn1y
KwQs08XzH1/qqhdNPj7Y0gxGZEruhP8t0eemVdGAK4jsROz004LiEZ2hH/5oSSBk
X4Kb8fRSu7bK+Lg8KE8hat/gopGRLI6148YlsJEkqDW5FZBqqz8f/YIOZN1d+aTN
PN7AMrT7Qj08PIvZycePx1JigD3J3pnNFplQ9FziAWacf782H6AdRr8B59QtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUu+l59g1r71UQRHkGU/toumi4h2QwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJg/AwDQYJKoZIhvcNAQELBQADggEBAK+1cg6b
0q6hsVPJRzD7R8IcAUZWRvcCR0tUFV70uQ+M5BLBdvNIPSZO3vrP9aWy9bKahExr
ZFr2D14dWou5xblW11rfrU5Vpa95FoCpmEn8yhZ/WOKrZSsQUmvnoKubQm74963M
hk/TIhp6KTTtm/MermHOgqhSBg3eEGVlsHDkc7+xb8TdHeN99x5LFOBv92LpszCc
nurvm1fCQ7N6eolHKEbFQed0Ym5sSQ9Qwq6n9DnKZJEX6+Z6b//xbk+2gY70qzf5
xUKwwRHnkhJa/zr5spQJPD38+yWUJenQWbOFpiX3eoOGY133xSlf9zPdoxSCYIcv
p2oHJl9kamwmf6o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org