Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234342e302f32332d3234203d3e203532373538.roa
File:                     3230312e3133312e3234342e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          /IVMVH/qIBqfgGyJOkMZE2RxYiHktTqGsM1rnpKZqLc=
Subject key identifier:   52:97:F0:C6:9B:64:C7:79:94:D8:EB:C9:F4:98:DF:43:8B:61:B9:25
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       3A3171C8495EB3B45E0FD5E7CBA2EF1D52EA94EE
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234342e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:39 +0000
ROA not before:           Tue 12 Mar 2024 18:13:39 +0000
ROA not after:            Tue 11 Mar 2025 18:18:39 +0000
asID:                     52758
IP address blocks:        201.131.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:31:71:c8:49:5e:b3:b4:5e:0f:d5:e7:cb:a2:ef:1d:52:ea:94:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:39 2024 GMT
            Not After : Mar 11 18:18:39 2025 GMT
        Subject: CN=5297F0C69B64C77994D8EBC9F498DF438B61B925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:ff:9e:4a:84:08:1e:62:42:8c:bf:9f:f7:
                    1d:e1:8f:dc:37:53:10:b0:29:f7:27:e6:1e:ac:69:
                    c1:2c:f8:8e:b5:b3:e7:f9:54:24:2a:00:aa:44:d6:
                    e8:af:70:94:0a:ce:ca:3e:48:ed:5a:ff:2b:81:c1:
                    64:66:a9:6d:94:6a:69:0f:75:e7:4b:c0:50:ce:d0:
                    e5:83:20:e5:da:f6:9d:2d:57:0c:3a:6c:27:dc:92:
                    88:51:ca:4e:5a:24:f8:f1:08:75:22:d8:fd:f6:04:
                    21:a4:2a:e1:b2:1f:da:f8:0f:66:ec:0e:5e:d5:9f:
                    f1:7a:82:26:e1:62:40:50:17:b3:3d:dd:70:26:d6:
                    1a:da:5e:16:16:99:15:66:28:1b:c2:39:9c:7c:c7:
                    fa:59:24:47:59:d5:3b:c1:ad:99:66:12:f3:28:eb:
                    82:28:6e:89:51:8b:15:a5:97:58:b7:f5:77:d4:67:
                    53:1f:32:38:e5:a8:6a:81:95:1a:7e:e7:b6:87:75:
                    3d:38:69:cc:73:bb:df:ac:2d:e9:49:12:9c:c8:7c:
                    e3:ae:bf:07:f7:4c:46:9a:3d:56:4c:25:7c:47:63:
                    99:87:fb:57:bb:95:82:74:17:2d:cc:97:14:e5:a0:
                    f2:f9:43:5a:6e:57:d0:e2:27:f1:bb:14:61:10:51:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:F0:C6:9B:64:C7:79:94:D8:EB:C9:F4:98:DF:43:8B:61:B9:25
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234342e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:3f:38:72:60:e8:77:21:d7:9e:3d:02:7b:97:b6:7a:6d:
         80:8e:d2:bb:b7:f3:3f:a3:9e:4b:ae:ff:ef:77:41:63:ce:3c:
         ff:b4:17:80:aa:f7:ce:81:19:6e:84:81:74:29:be:15:a1:87:
         ab:aa:b4:03:f2:04:e6:c1:e6:7e:86:68:f4:14:9c:29:99:98:
         ee:ba:9e:5d:4b:0a:fd:50:2c:40:06:b0:78:a6:b3:b6:ba:72:
         71:7e:75:81:dd:8e:50:5d:ff:74:d6:df:86:36:eb:00:b4:75:
         9a:b1:67:5d:f1:a6:8c:be:5f:47:bf:2d:72:39:03:24:7c:a5:
         a7:0f:0b:02:33:18:46:c1:f8:0b:3c:73:25:48:b0:e4:fc:32:
         a8:fc:e8:a6:51:f1:a8:26:16:e2:f0:e0:32:2b:3c:1e:80:32:
         6a:f0:63:86:4f:5f:de:36:cb:4a:53:32:95:09:53:7a:a4:76:
         48:58:6f:83:80:b8:d6:f4:a5:77:4f:6d:6b:78:3e:4e:b2:de:
         5a:3f:be:b6:55:ef:06:df:b1:49:e8:9a:95:6b:19:b0:67:90:
         fc:f3:4a:3a:2d:90:28:20:44:89:be:20:bd:28:d6:9c:2c:fe:
         cf:76:56:5c:dc:d6:2a:4b:de:6c:7d:1e:e5:4e:e5:0e:3d:9d:
         32:da:98:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOjFxyEles7ReD9Xny6LvHVLqlO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEzMzlaFw0yNTAzMTExODE4MzlaMDMxMTAvBgNV
BAMTKDUyOTdGMEM2OUI2NEM3Nzk5NEQ4RUJDOUY0OThERjQzOEI2MUI5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU/+eSoQIHmJCjL+f9x3hj9w3
UxCwKfcn5h6sacEs+I61s+f5VCQqAKpE1uivcJQKzso+SO1a/yuBwWRmqW2UamkP
dedLwFDO0OWDIOXa9p0tVww6bCfckohRyk5aJPjxCHUi2P32BCGkKuGyH9r4D2bs
Dl7Vn/F6gibhYkBQF7M93XAm1hraXhYWmRVmKBvCOZx8x/pZJEdZ1TvBrZlmEvMo
64IobolRixWll1i39XfUZ1MfMjjlqGqBlRp+57aHdT04acxzu9+sLelJEpzIfOOu
vwf3TEaaPVZMJXxHY5mH+1e7lYJ0Fy3MlxTloPL5Q1puV9DiJ/G7FGEQUdaXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUpfwxptkx3mU2OvJ9JjfQ4thuSUwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/QwDQYJKoZIhvcNAQELBQADggEBAD2SPzhy
YOh3IdeePQJ7l7Z6bYCO0ru38z+jnkuu/+93QWPOPP+0F4Cq986BGW6EgXQpvhWh
h6uqtAPyBObB5n6GaPQUnCmZmO66nl1LCv1QLEAGsHims7a6cnF+dYHdjlBd/3TW
34Y26wC0dZqxZ13xpoy+X0e/LXI5AyR8pacPCwIzGEbB+As8cyVIsOT8Mqj86KZR
8agmFuLw4DIrPB6AMmrwY4ZPX942y0pTMpUJU3qkdkhYb4OAuNb0pXdPbWt4Pk6y
3lo/vrZV7wbfsUnompVrGbBnkPzzSjotkCggRIm+IL0o1pws/s92Vlzc1ipL3mx9
HuVO5Q49nTLamIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org