Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3233203d3e20323634343739.roa
File:                     3133312e3235352e3132302e302f32322d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          bwvRHG3A3wcet//HSsZGM2HoTY5VrOjj2/tBbZokT0o=
Subject key identifier:   1F:BB:D1:2B:AF:74:F4:98:C9:BE:C9:82:EB:81:5C:28:21:C6:2B:8E
Certificate issuer:       /CN=3225A9367BE412857B6DFF323F2D20F155EF273C
Certificate serial:       2CD26B2BA7D94988B7FEC172A4E733326302B875
Authority key identifier: 32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3233203d3e20323634343739.roa
Signing time:             Mon 15 May 2023 22:43:03 +0000
ROA not before:           Mon 15 May 2023 22:38:03 +0000
ROA not after:            Mon 13 May 2024 22:43:03 +0000
asID:                     264479
IP address blocks:        131.255.120.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d2:6b:2b:a7:d9:49:88:b7:fe:c1:72:a4:e7:33:32:63:02:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3225A9367BE412857B6DFF323F2D20F155EF273C
        Validity
            Not Before: May 15 22:38:03 2023 GMT
            Not After : May 13 22:43:03 2024 GMT
        Subject: CN=1FBBD12BAF74F498C9BEC982EB815C2821C62B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:0c:c6:20:51:02:88:9b:2e:e6:c1:9b:6c:
                    a9:03:27:f1:c9:45:cf:5b:d9:f8:3c:93:be:85:84:
                    21:2b:69:64:70:30:2c:60:e8:44:70:5a:d7:f4:63:
                    a0:de:03:42:3b:4b:62:6c:b6:f9:e1:46:a1:34:94:
                    ff:1c:98:e0:38:17:7a:ea:75:46:e0:37:1b:02:1e:
                    69:51:12:d2:de:ea:58:39:80:be:52:01:3e:6b:c2:
                    9b:6f:7b:83:79:a8:75:fd:00:6b:60:d4:4c:d2:d7:
                    b5:ed:8e:41:17:77:b7:4c:59:fc:ba:df:f8:3f:e7:
                    31:50:e4:de:c5:06:2c:0a:31:74:ca:63:4c:02:34:
                    fb:f9:08:49:13:36:b9:67:8a:1f:74:d7:68:b1:39:
                    73:5c:fa:84:90:ad:93:91:83:5e:89:82:c4:13:ca:
                    b8:eb:cb:ae:fc:e9:b3:6f:d9:cf:2f:34:48:10:fa:
                    01:66:5d:38:e8:2f:a8:7a:2e:92:9b:69:f9:d0:b5:
                    e9:e3:31:31:42:b5:00:3f:fb:33:d4:52:8a:44:db:
                    20:fd:3f:13:cf:36:58:e4:bc:74:87:28:06:84:83:
                    b2:e9:0e:36:79:ed:7c:c8:66:65:a7:ce:95:be:a7:
                    c3:f7:f3:07:e9:d5:8b:aa:b7:62:92:03:66:0d:1d:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BB:D1:2B:AF:74:F4:98:C9:BE:C9:82:EB:81:5C:28:21:C6:2B:8E
            X509v3 Authority Key Identifier:
                keyid:32:25:A9:36:7B:E4:12:85:7B:6D:FF:32:3F:2D:20:F1:55:EF:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3225A9367BE412857B6DFF323F2D20F155EF273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3225A9367BE412857B6DFF323F2D20F155EF273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/0/3133312e3235352e3132302e302f32322d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:0c:f9:52:3d:79:30:31:5d:88:30:ea:b8:03:a1:f8:da:
         e2:c4:b6:97:67:53:fd:d1:f2:73:4a:95:11:f1:35:c0:b2:3b:
         2e:0c:c9:44:0c:3d:8f:e4:72:98:85:79:6c:1d:d6:be:1b:cc:
         98:3c:fe:40:9d:b2:c9:f0:72:13:71:df:b0:cf:bb:de:0c:74:
         21:51:11:52:2f:87:01:4a:cd:a3:83:58:65:da:ce:7a:01:0d:
         52:ab:7f:d9:29:90:0d:88:30:76:53:fa:32:c3:55:aa:f5:01:
         f0:5a:8a:bf:4c:a6:58:89:d3:c4:9c:d4:d3:f6:c1:02:2e:01:
         c1:2f:16:83:ed:5e:ce:d7:83:3d:30:ac:a9:85:01:16:dd:6c:
         17:a6:f7:39:61:22:cd:3b:61:22:a9:eb:08:e0:26:55:90:f2:
         4d:65:68:e1:24:bf:0b:5e:a0:e7:e7:54:e2:c8:45:c9:44:bc:
         dc:22:66:21:ed:04:23:17:5b:4e:ba:9d:86:a8:81:78:10:1e:
         b8:32:83:e3:28:fc:73:8e:33:75:2c:6e:ff:c5:ab:3e:a2:54:
         8d:22:66:98:b7:67:9d:10:95:19:f6:c1:7d:5a:d1:c3:f4:a5:
         55:9e:1d:9c:d7:6f:ce:f8:3e:ef:cf:a0:47:54:6c:af:f4:ff:
         6b:f3:c6:a3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULNJrK6fZSYi3/sFypOczMmMCuHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyNUE5MzY3QkU0MTI4NTdCNkRGRjMyM0YyRDIwRjE1
NUVGMjczQzAeFw0yMzA1MTUyMjM4MDNaFw0yNDA1MTMyMjQzMDNaMDMxMTAvBgNV
BAMTKDFGQkJEMTJCQUY3NEY0OThDOUJFQzk4MkVCODE1QzI4MjFDNjJCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UwzGIFECiJsu5sGbbKkDJ/HJ
Rc9b2fg8k76FhCEraWRwMCxg6ERwWtf0Y6DeA0I7S2JstvnhRqE0lP8cmOA4F3rq
dUbgNxsCHmlREtLe6lg5gL5SAT5rwptve4N5qHX9AGtg1EzS17XtjkEXd7dMWfy6
3/g/5zFQ5N7FBiwKMXTKY0wCNPv5CEkTNrlnih9012ixOXNc+oSQrZORg16JgsQT
yrjry6786bNv2c8vNEgQ+gFmXTjoL6h6LpKbafnQtenjMTFCtQA/+zPUUopE2yD9
PxPPNljkvHSHKAaEg7LpDjZ57XzIZmWnzpW+p8P38wfp1Yuqt2KSA2YNHeK5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH7vRK6909JjJvsmC64FcKCHGK44wHwYDVR0j
BBgwFoAUMiWpNnvkEoV7bf8yPy0g8VXvJzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMC8zMjI1QTkzNjdCRTQxMjg1N0I2REZGMzIzRjJEMjBGMTU1RUYyNzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMjVBOTM2N0JFNDEyODU3
QjZERkYzMjNGMkQyMEYxNTVFRjI3M0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzNDM0MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/eDANBgkqhkiG9w0BAQsFAAOCAQEAUfwM
+VI9eTAxXYgw6rgDofja4sS2l2dT/dHyc0qVEfE1wLI7LgzJRAw9j+RymIV5bB3W
vhvMmDz+QJ2yyfByE3HfsM+73gx0IVERUi+HAUrNo4NYZdrOegENUqt/2SmQDYgw
dlP6MsNVqvUB8FqKv0ymWInTxJzU0/bBAi4BwS8Wg+1ezteDPTCsqYUBFt1sF6b3
OWEizTthIqnrCOAmVZDyTWVo4SS/C16g5+dU4shFyUS83CJmIe0EIxdbTrqdhqiB
eBAeuDKD4yj8c44zdSxu/8WrPqJUjSJmmLdnnRCVGfbBfVrRw/SlVZ4dnNdvzvg+
78+gR1Rsr/T/a/PGow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org