Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa
File:                     3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          /HlS5Wy5UJezrvAjpkgv/nb7Gpx7Zie128i5rxXla8o=
Subject key identifier:   34:BB:A3:AB:04:33:A4:FA:01:14:F8:00:D7:83:1A:69:ED:6F:E3:25
Certificate issuer:       /CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
Certificate serial:       61E698EDE809E2F13C1AACF3B899B24F5B9AA3D7
Authority key identifier: 55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa
Signing time:             Tue 12 Mar 2024 18:18:44 +0000
ROA not before:           Tue 12 Mar 2024 18:13:44 +0000
ROA not after:            Tue 11 Mar 2025 18:18:44 +0000
asID:                     52758
IP address blocks:        201.131.246.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:98:ed:e8:09:e2:f1:3c:1a:ac:f3:b8:99:b2:4f:5b:9a:a3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17
        Validity
            Not Before: Mar 12 18:13:44 2024 GMT
            Not After : Mar 11 18:18:44 2025 GMT
        Subject: CN=34BBA3AB0433A4FA0114F800D7831A69ED6FE325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:e2:e1:8b:e9:5a:77:4d:89:01:52:f9:43:
                    14:c5:fc:39:ff:d9:73:7c:28:dd:dc:3e:bf:8f:31:
                    fb:63:ac:00:f7:0a:43:a7:bf:e1:28:05:f9:45:3c:
                    3c:c7:9c:62:b8:41:c7:dd:8e:cd:67:f0:e6:c0:8b:
                    b2:af:32:4b:0a:6b:73:1c:88:e4:64:69:f1:48:12:
                    d6:54:a5:e3:96:20:81:33:21:da:c8:41:58:93:29:
                    03:2f:7b:5c:34:36:e9:23:3d:a0:24:c3:42:e3:19:
                    8a:81:3b:45:c0:c8:a0:fe:a4:dd:af:df:c4:3e:78:
                    ff:72:49:7a:60:34:34:e8:56:f5:5f:98:cd:72:a6:
                    54:58:d6:ea:02:07:1f:32:7f:c0:bf:db:7d:65:6e:
                    69:cf:92:91:4a:ba:22:3a:b7:d8:9a:50:4e:7a:a4:
                    c5:14:b6:2a:39:c7:0d:56:db:e0:f4:28:c8:8f:48:
                    70:67:1d:59:d0:37:11:d1:f2:20:4e:16:3e:3f:34:
                    13:f8:3e:87:9a:7e:0a:05:37:ab:26:1e:81:16:2f:
                    47:5d:99:8e:51:ba:7f:40:f5:62:35:43:63:07:5d:
                    bf:50:51:76:a1:9b:43:4d:bc:31:b1:9a:51:45:91:
                    8c:f6:cd:a0:df:4f:ea:ca:a4:74:af:e0:72:94:08:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:A3:AB:04:33:A4:FA:01:14:F8:00:D7:83:1A:69:ED:6F:E3:25
            X509v3 Authority Key Identifier:
                keyid:55:7F:D8:C2:3B:8E:6B:CB:6C:59:5C:EE:2B:8A:1A:C1:B1:91:DC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557FD8C23B8E6BCB6C595CEE2B8A1AC1B191DC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:67:30:ae:6e:ac:f1:bf:e4:db:45:b3:92:03:ff:b7:4d:6e:
         4d:6d:83:ab:38:b9:87:1c:55:b1:62:ca:0e:47:d1:33:56:df:
         36:1c:c8:a3:c0:14:43:12:c9:97:36:2d:4f:2d:ca:7f:21:08:
         7f:02:aa:9b:1f:0f:4d:55:16:79:d6:34:5c:ab:f7:c4:c7:6a:
         d9:ef:29:7e:f2:be:d7:2b:11:5a:22:1c:39:b1:38:4b:85:d7:
         9d:d2:d7:42:93:55:07:ab:9d:48:b9:d5:57:77:1f:64:34:63:
         f1:8f:fe:12:21:ad:66:a4:f7:0f:c7:00:4e:7c:6a:9f:73:af:
         0e:91:97:d9:5f:14:ee:ed:c0:e0:c3:4f:c6:d8:89:85:17:58:
         50:9e:b3:02:50:ec:6e:b4:1a:2e:9d:94:09:30:06:25:1f:40:
         0c:bb:a5:3a:a7:0f:94:63:98:04:11:a4:7d:15:86:bf:01:dd:
         db:41:dd:56:dd:c4:eb:d8:53:c3:12:53:02:16:5f:d7:ee:81:
         71:85:be:6d:a8:85:1e:59:b9:be:d7:06:4c:6b:ef:48:db:0a:
         e2:75:5d:45:92:73:76:14:0e:1f:d7:a5:1f:76:ea:15:0a:32:
         a2:12:d1:25:d7:b2:c6:94:c7:c7:5b:e1:43:aa:81:2b:73:db:
         2d:92:38:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYeaY7egJ4vE8GqzzuJmyT1uao9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU3RkQ4QzIzQjhFNkJDQjZDNTk1Q0VFMkI4QTFBQzFC
MTkxREMxNzAeFw0yNDAzMTIxODEzNDRaFw0yNTAzMTExODE4NDRaMDMxMTAvBgNV
BAMTKDM0QkJBM0FCMDQzM0E0RkEwMTE0RjgwMEQ3ODMxQTY5RUQ2RkUzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQueLhi+lad02JAVL5QxTF/Dn/
2XN8KN3cPr+PMftjrAD3CkOnv+EoBflFPDzHnGK4Qcfdjs1n8ObAi7KvMksKa3Mc
iORkafFIEtZUpeOWIIEzIdrIQViTKQMve1w0NukjPaAkw0LjGYqBO0XAyKD+pN2v
38Q+eP9ySXpgNDToVvVfmM1yplRY1uoCBx8yf8C/231lbmnPkpFKuiI6t9iaUE56
pMUUtio5xw1W2+D0KMiPSHBnHVnQNxHR8iBOFj4/NBP4PoeafgoFN6smHoEWL0dd
mY5Run9A9WI1Q2MHXb9QUXahm0NNvDGxmlFFkYz2zaDfT+rKpHSv4HKUCDvdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNLujqwQzpPoBFPgA14Maae1v4yUwHwYDVR0j
BBgwFoAUVX/YwjuOa8tsWVzuK4oawbGR3BcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMC81NTdGRDhDMjNCOEU2QkNCNkM1OTVDRUUyQjhBMUFDMUIxOTFEQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU1N0ZEOEMyM0I4RTZCQ0I2
QzU5NUNFRTJCOEExQUMxQjE5MURDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzAv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/YwDQYJKoZIhvcNAQELBQADggEBAA1nMK5u
rPG/5NtFs5ID/7dNbk1tg6s4uYccVbFiyg5H0TNW3zYcyKPAFEMSyZc2LU8tyn8h
CH8CqpsfD01VFnnWNFyr98THatnvKX7yvtcrEVoiHDmxOEuF153S10KTVQernUi5
1Vd3H2Q0Y/GP/hIhrWak9w/HAE58ap9zrw6Rl9lfFO7twODDT8bYiYUXWFCeswJQ
7G60Gi6dlAkwBiUfQAy7pTqnD5RjmAQRpH0Vhr8B3dtB3VbdxOvYU8MSUwIWX9fu
gXGFvm2ohR5Zub7XBkxr70jbCuJ1XUWSc3YUDh/XpR926hUKMqIS0SXXssaUx8db
4UOqgStz2y2SOOM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org