Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
File:                     3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          aH1oScptZVpP+0IdNrambEtxTabaeVCHOIh0Yc1oczs=
Subject key identifier:   0B:63:53:03:BE:45:42:2B:53:D5:D6:3B:EB:01:BA:CE:7F:70:84:7F
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       74D7B96494C0F3CA41F267F1D5D866484CB17FA0
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:31 +0000
ROA not before:           Tue 12 Mar 2024 18:13:31 +0000
ROA not after:            Tue 11 Mar 2025 18:18:31 +0000
asID:                     52758
IP address blocks:        201.131.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:b9:64:94:c0:f3:ca:41:f2:67:f1:d5:d8:66:48:4c:b1:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:31 2024 GMT
            Not After : Mar 11 18:18:31 2025 GMT
        Subject: CN=0B635303BE45422B53D5D63BEB01BACE7F70847F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:ad:d9:a3:e7:8f:fa:d5:1a:86:e5:a2:68:
                    e1:02:64:2a:43:09:73:2d:87:3a:d1:bb:5d:3f:af:
                    f7:b5:60:8c:00:63:9a:fa:54:9e:69:3c:1d:95:dc:
                    31:d7:88:33:f1:a6:ae:c9:42:b1:f0:97:7b:fa:ac:
                    8e:11:13:b4:1e:25:02:3d:0c:cd:6a:03:ec:ce:7c:
                    36:0b:0b:96:41:bd:1c:2c:02:e2:1b:1c:d7:e2:92:
                    89:7d:f9:dc:cd:b9:4e:44:9f:ff:51:62:8f:8d:a7:
                    04:61:b5:6d:86:92:50:83:0f:a3:43:80:df:47:d1:
                    b2:86:b5:3c:fa:c3:b6:7f:59:eb:9f:94:45:ec:5c:
                    f6:a4:85:00:6f:20:09:f2:41:19:80:9c:f0:5b:75:
                    ee:cd:22:8d:b7:98:07:1b:09:22:4c:0e:8f:2d:4a:
                    ad:ed:74:f7:10:7c:6c:40:ac:0a:32:43:f8:26:b3:
                    2d:a3:bc:e7:c9:3b:4d:48:58:e7:96:79:15:68:3f:
                    44:2a:92:bc:08:d5:cc:75:54:a9:c7:ae:6b:d0:71:
                    52:57:ef:9d:89:7f:e2:40:3e:1f:38:d4:0f:74:f7:
                    b8:da:80:9c:d3:9a:57:b4:b3:f3:6d:e8:0c:58:cf:
                    21:2b:d9:b5:58:a7:02:74:80:cb:af:d8:ac:71:e3:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:53:03:BE:45:42:2B:53:D5:D6:3B:EB:01:BA:CE:7F:70:84:7F
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:b4:c4:5c:ce:b3:40:ea:7d:c8:e2:13:21:2d:d0:52:ad:
         fc:8e:63:d7:0e:0a:72:e9:4c:ce:62:f9:69:91:09:ca:bf:b6:
         0f:c2:95:5f:9a:7b:68:97:0d:73:cb:56:0c:aa:9d:c7:00:a4:
         aa:ec:17:77:31:19:6d:2f:f4:82:b6:49:55:90:04:92:a5:54:
         5b:ae:1d:ba:0a:5e:df:29:00:f1:98:87:67:42:c6:3e:e5:32:
         cc:da:db:ae:61:1d:c7:dd:73:4a:cf:ec:ba:c4:7b:19:83:03:
         bc:5e:f8:37:c1:5f:45:72:0f:bc:50:df:fb:30:b3:3c:cd:35:
         8f:9c:66:e5:b3:bf:98:c4:eb:09:d1:0c:f3:3c:3d:61:f3:1b:
         ca:30:d9:34:da:b7:ef:f4:af:7f:d9:72:92:1c:84:26:ae:48:
         dc:30:48:4b:ee:48:1b:19:a0:e4:e0:f6:9b:d9:3c:79:05:b5:
         c2:78:26:16:14:66:0c:9c:77:8b:25:22:70:58:30:2a:ef:44:
         39:12:8e:2f:c7:65:36:96:cf:89:50:c4:9a:25:20:09:25:08:
         6b:3f:d4:ef:60:3b:4c:9f:7d:51:bd:c6:11:7b:f0:b0:d4:b4:
         fa:65:74:f2:9c:cf:cb:d9:ed:e0:f0:6a:6b:58:cc:2e:5a:68:
         01:d0:02:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdNe5ZJTA88pB8mfx1dhmSEyxf6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEzMzFaFw0yNTAzMTExODE4MzFaMDMxMTAvBgNV
BAMTKDBCNjM1MzAzQkU0NTQyMkI1M0Q1RDYzQkVCMDFCQUNFN0Y3MDg0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+K3Zo+eP+tUahuWiaOECZCpD
CXMthzrRu10/r/e1YIwAY5r6VJ5pPB2V3DHXiDPxpq7JQrHwl3v6rI4RE7QeJQI9
DM1qA+zOfDYLC5ZBvRwsAuIbHNfikol9+dzNuU5En/9RYo+NpwRhtW2GklCDD6ND
gN9H0bKGtTz6w7Z/WeuflEXsXPakhQBvIAnyQRmAnPBbde7NIo23mAcbCSJMDo8t
Sq3tdPcQfGxArAoyQ/gmsy2jvOfJO01IWOeWeRVoP0QqkrwI1cx1VKnHrmvQcVJX
752Jf+JAPh841A9097jagJzTmle0s/Nt6AxYzyEr2bVYpwJ0gMuv2Kxx46BPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC2NTA75FQitT1dY76wG6zn9whH8wHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/IwDQYJKoZIhvcNAQELBQADggEBAIgatMRc
zrNA6n3I4hMhLdBSrfyOY9cOCnLpTM5i+WmRCcq/tg/ClV+ae2iXDXPLVgyqnccA
pKrsF3cxGW0v9IK2SVWQBJKlVFuuHboKXt8pAPGYh2dCxj7lMsza265hHcfdc0rP
7LrEexmDA7xe+DfBX0VyD7xQ3/swszzNNY+cZuWzv5jE6wnRDPM8PWHzG8ow2TTa
t+/0r3/ZcpIchCauSNwwSEvuSBsZoOTg9pvZPHkFtcJ4JhYUZgycd4slInBYMCrv
RDkSji/HZTaWz4lQxJolIAklCGs/1O9gO0yffVG9xhF78LDUtPpldPKcz8vZ7eDw
amtYzC5aaAHQAn4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org