Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa
File:                     3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa (raw, json)
Hash identifier:          jqWI96qYOflzfHeiBK+Y10DKzcC8qhl+Veu4+xHb/o4=
Subject key identifier:   5C:BD:B4:5B:F9:BC:1F:3D:02:ED:3A:24:1D:A6:86:02:49:D1:FB:DF
Certificate issuer:       /CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
Certificate serial:       6EE8560A915D4C74B1402E5E962073EDAC3ABE8D
Authority key identifier: 25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa
Signing time:             Tue 21 Nov 2023 13:41:16 +0000
ROA not before:           Tue 21 Nov 2023 13:36:16 +0000
ROA not after:            Tue 19 Nov 2024 13:41:16 +0000
asID:                     265144
IP address blocks:        131.161.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:56:0a:91:5d:4c:74:b1:40:2e:5e:96:20:73:ed:ac:3a:be:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3
        Validity
            Not Before: Nov 21 13:36:16 2023 GMT
            Not After : Nov 19 13:41:16 2024 GMT
        Subject: CN=5CBDB45BF9BC1F3D02ED3A241DA6860249D1FBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:44:d0:d1:be:46:46:9a:20:50:b0:da:19:
                    c8:db:56:44:ad:67:7d:9f:6a:ec:54:2a:9e:f2:ca:
                    90:3a:6d:d0:c8:b2:5e:52:ba:73:65:1d:23:d1:c2:
                    b2:79:3d:8f:27:af:90:42:ec:3c:80:5d:e9:92:7f:
                    1d:45:55:df:08:3a:f1:6e:d9:40:64:88:65:58:f8:
                    53:8a:a7:d3:d8:10:72:b3:56:6c:d0:6c:c7:cc:ac:
                    9a:56:f3:4f:65:3b:00:b2:85:e5:bc:13:1a:7e:9b:
                    9b:62:b9:76:3b:1b:36:be:8f:a2:23:57:02:60:f4:
                    23:6f:7b:70:20:92:6f:02:17:52:7b:da:a9:06:47:
                    e0:46:e5:56:16:c9:b8:e7:0c:d1:18:0d:2a:fc:6f:
                    c3:98:ee:01:87:a2:6b:4b:9a:3c:59:97:d5:c6:2d:
                    b5:26:7c:b4:4d:0f:5d:e2:16:51:84:18:86:23:a5:
                    cf:56:9e:09:b2:88:1c:9f:72:30:f6:32:0e:f6:b2:
                    65:b6:63:8e:db:a8:e0:3e:4a:9a:42:09:5d:97:9a:
                    cc:f1:8a:f3:16:a6:04:b5:79:59:82:5b:4c:f8:b1:
                    2d:50:60:22:f0:f2:96:fe:de:58:d0:a9:98:f9:c0:
                    f3:bd:a2:ec:c0:e3:10:07:6d:03:19:8e:15:4f:24:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BD:B4:5B:F9:BC:1F:3D:02:ED:3A:24:1D:A6:86:02:49:D1:FB:DF
            X509v3 Authority Key Identifier:
                keyid:25:1E:34:6C:D4:BE:E6:D0:8C:7C:5E:F0:0B:B3:C7:C2:67:69:74:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/251E346CD4BEE6D08C7C5EF00BB3C7C2676974E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:9c:0f:9c:95:72:8e:22:3c:42:32:32:85:cb:9b:48:86:7e:
         bc:76:cf:55:bd:a4:07:99:7f:db:24:ac:53:d6:75:06:4c:1d:
         56:c3:0c:4d:03:f2:0f:61:0c:7c:78:68:91:ae:2d:d3:f2:47:
         95:55:64:d3:92:e7:44:c1:b9:e6:09:24:96:7c:13:d7:e1:f3:
         f1:1e:4f:4e:7b:2c:87:e4:5f:91:2f:1c:51:b0:3d:1d:2b:2e:
         a4:cc:6a:f3:66:9a:eb:af:cc:34:22:e6:f5:a0:4a:71:0c:e9:
         aa:25:1d:87:41:9d:f4:20:73:0d:d4:b6:e2:ea:2a:4f:30:01:
         f6:06:97:09:96:e9:ca:bf:49:e9:ff:30:db:cf:7e:ff:8e:21:
         6f:98:0e:a9:d2:21:5e:cd:29:76:c2:71:d7:5b:bb:e5:6c:d2:
         81:21:f2:04:6e:7b:e5:39:03:e4:b6:60:4e:bb:e2:88:28:75:
         5d:c8:97:92:a8:44:31:5a:09:18:dd:a4:29:ed:c1:27:24:ec:
         70:57:a1:62:95:55:ec:8c:69:cc:19:11:3d:a7:23:d0:29:7e:
         7a:6a:7a:a8:05:a3:ce:41:9f:de:f1:38:1c:19:5f:e7:0b:ff:
         b1:5b:db:e9:b7:0a:39:56:ee:62:1a:01:ac:31:14:9a:f6:4b:
         19:de:19:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbuhWCpFdTHSxQC5eliBz7aw6vo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUxRTM0NkNENEJFRTZEMDhDN0M1RUYwMEJCM0M3QzI2
NzY5NzRFMzAeFw0yMzExMjExMzM2MTZaFw0yNDExMTkxMzQxMTZaMDMxMTAvBgNV
BAMTKDVDQkRCNDVCRjlCQzFGM0QwMkVEM0EyNDFEQTY4NjAyNDlEMUZCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mETQ0b5GRpogULDaGcjbVkSt
Z32fauxUKp7yypA6bdDIsl5SunNlHSPRwrJ5PY8nr5BC7DyAXemSfx1FVd8IOvFu
2UBkiGVY+FOKp9PYEHKzVmzQbMfMrJpW809lOwCyheW8Exp+m5tiuXY7Gza+j6Ij
VwJg9CNve3Agkm8CF1J72qkGR+BG5VYWybjnDNEYDSr8b8OY7gGHomtLmjxZl9XG
LbUmfLRND13iFlGEGIYjpc9WngmyiByfcjD2Mg72smW2Y47bqOA+SppCCV2Xmszx
ivMWpgS1eVmCW0z4sS1QYCLw8pb+3ljQqZj5wPO9ouzA4xAHbQMZjhVPJO2PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXL20W/m8Hz0C7TokHaaGAknR+98wHwYDVR0j
BBgwFoAUJR40bNS+5tCMfF7wC7PHwmdpdOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlyV3hmeTlkY2hlNGJaQ3B4S0tiZVFXRVZaUVd2SEN0ckNYMVJSdUM4
ZVcvMC8yNTFFMzQ2Q0Q0QkVFNkQwOEM3QzVFRjAwQkIzQzdDMjY3Njk3NEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1MUUzNDZDRDRCRUU2RDA4
QzdDNUVGMDBCQjNDN0MyNjc2OTc0RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpcld4Znk5ZGNoZTRiWkNweEtLYmVRV0VWWlFXdkhDdHJDWDFSUnVDOGVXLzAv
MzEzMzMxMmUzMTM2MzEyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDoSwwDQYJKoZIhvcNAQELBQADggEBALScD5yV
co4iPEIyMoXLm0iGfrx2z1W9pAeZf9skrFPWdQZMHVbDDE0D8g9hDHx4aJGuLdPy
R5VVZNOS50TBueYJJJZ8E9fh8/EeT057LIfkX5EvHFGwPR0rLqTMavNmmuuvzDQi
5vWgSnEM6aolHYdBnfQgcw3UtuLqKk8wAfYGlwmW6cq/Sen/MNvPfv+OIW+YDqnS
IV7NKXbCcddbu+Vs0oEh8gRue+U5A+S2YE674ogodV3Il5KoRDFaCRjdpCntwSck
7HBXoWKVVeyMacwZET2nI9ApfnpqeqgFo85Bn97xOBwZX+cL/7Fb2+m3CjlW7mIa
AawxFJr2SxneGWg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:36 2025 by rpki-client