Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3232203d3e20323730393834.roa
File:                     3133312e3232312e3134302e302f32322d3232203d3e20323730393834.roa (raw, json)
Hash identifier:          I60ERxodJmqpXac+iq7Vz6mUl4nRS9e9xoHRZBv6A2g=
Subject key identifier:   C3:85:D3:74:42:B2:9F:FE:9E:2B:D8:89:B3:D8:11:B9:C8:EA:F6:9E
Certificate issuer:       /CN=A5867F518399DDAB33735A7B2492795CCD727428
Certificate serial:       1CCD7FF7DDA3B7D71D315321EDB71AF4C426EEAC
Authority key identifier: A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3232203d3e20323730393834.roa
Signing time:             Sat 02 Sep 2023 22:00:13 +0000
ROA not before:           Sat 02 Sep 2023 21:55:13 +0000
ROA not after:            Sat 31 Aug 2024 22:00:13 +0000
asID:                     270984
IP address blocks:        131.221.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:7f:f7:dd:a3:b7:d7:1d:31:53:21:ed:b7:1a:f4:c4:26:ee:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5867F518399DDAB33735A7B2492795CCD727428
        Validity
            Not Before: Sep  2 21:55:13 2023 GMT
            Not After : Aug 31 22:00:13 2024 GMT
        Subject: CN=C385D37442B29FFE9E2BD889B3D811B9C8EAF69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:ec:d0:fe:24:39:d2:f5:44:21:97:31:ea:
                    56:28:65:8c:61:12:da:86:eb:88:eb:47:62:3b:7a:
                    42:47:16:50:e2:8a:86:c0:7f:5c:ee:b0:1a:81:f8:
                    af:25:95:15:d9:b4:be:90:1e:82:c9:62:28:67:cb:
                    58:d2:50:13:d2:15:a9:21:50:07:74:09:79:c5:34:
                    9f:0d:08:bf:08:8a:1f:a0:75:55:09:2a:14:e3:8f:
                    47:a2:f0:93:2e:cc:e3:41:6b:3c:21:0c:5c:a3:92:
                    4b:38:49:5e:26:48:db:c6:aa:75:3c:95:fa:9d:6e:
                    a9:c7:b7:81:48:65:89:7a:89:3e:fb:33:42:1d:cf:
                    45:68:6f:d0:40:fd:5a:6d:cb:72:63:4e:2d:6f:52:
                    3a:87:fc:08:ed:94:c1:1d:92:05:a8:de:f8:e4:03:
                    ab:f4:4e:be:9e:db:1a:79:b0:8a:48:c9:cd:7a:7a:
                    a5:75:bd:03:56:7b:48:0d:b0:43:a8:61:4c:a3:2d:
                    a3:0b:d0:27:bb:ca:4d:fc:59:c1:2f:10:f1:18:83:
                    86:d2:18:44:a7:8b:53:0a:21:e5:76:3e:05:a6:43:
                    77:de:21:95:59:36:15:10:8d:96:b2:8a:70:8c:79:
                    59:6b:05:72:9e:14:a1:84:ea:74:ac:4b:0c:87:7e:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:85:D3:74:42:B2:9F:FE:9E:2B:D8:89:B3:D8:11:B9:C8:EA:F6:9E
            X509v3 Authority Key Identifier:
                keyid:A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/A5867F518399DDAB33735A7B2492795CCD727428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/3133312e3232312e3134302e302f32322d3232203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:f6:38:fe:0d:1b:2d:cc:ea:46:e4:24:f2:f9:d3:10:70:
         bc:0e:60:44:75:ba:6a:ef:67:ef:df:5d:9f:51:ca:25:4a:36:
         0b:06:7b:b8:64:b8:18:16:1d:93:3f:40:16:2c:60:be:f5:88:
         98:74:ea:57:86:42:a1:cf:10:2b:ec:96:bf:bb:d8:85:20:80:
         28:7c:0d:46:69:c4:14:e6:81:01:ca:c7:9e:81:87:92:aa:ce:
         19:4a:33:8b:1e:32:51:46:03:c6:e6:fb:db:d3:f7:a2:06:8d:
         20:ec:02:06:1b:3d:33:90:63:2a:0f:86:ae:59:96:f4:29:75:
         00:16:a2:b7:a3:22:c2:db:5a:10:14:a4:84:9b:85:32:72:c6:
         8f:75:0a:35:2e:45:22:4b:e3:bc:5a:df:a2:9f:a5:ec:9f:a9:
         f6:65:11:2d:fb:6f:e2:2d:08:9d:14:5e:f4:ca:ce:7d:d0:6e:
         5d:37:a8:7d:91:33:72:89:d3:b2:46:50:15:d2:d4:6d:04:8a:
         ae:a8:84:29:ae:e7:d2:27:3b:07:7d:ec:65:98:fa:79:1a:40:
         0b:77:92:29:51:2c:dc:94:47:55:a8:5c:e1:bb:18:e4:0b:3e:
         08:80:bc:f2:08:7b:96:4a:40:45:ea:69:c6:d0:03:ff:3e:84:
         06:c8:38:e4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHM1/992jt9cdMVMh7bca9MQm7qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU4NjdGNTE4Mzk5RERBQjMzNzM1QTdCMjQ5Mjc5NUND
RDcyNzQyODAeFw0yMzA5MDIyMTU1MTNaFw0yNDA4MzEyMjAwMTNaMDMxMTAvBgNV
BAMTKEMzODVEMzc0NDJCMjlGRkU5RTJCRDg4OUIzRDgxMUI5QzhFQUY2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiezQ/iQ50vVEIZcx6lYoZYxh
EtqG64jrR2I7ekJHFlDiiobAf1zusBqB+K8llRXZtL6QHoLJYihny1jSUBPSFakh
UAd0CXnFNJ8NCL8Iih+gdVUJKhTjj0ei8JMuzONBazwhDFyjkks4SV4mSNvGqnU8
lfqdbqnHt4FIZYl6iT77M0Idz0Vob9BA/Vpty3JjTi1vUjqH/AjtlMEdkgWo3vjk
A6v0Tr6e2xp5sIpIyc16eqV1vQNWe0gNsEOoYUyjLaML0Ce7yk38WcEvEPEYg4bS
GESni1MKIeV2PgWmQ3feIZVZNhUQjZayinCMeVlrBXKeFKGE6nSsSwyHfsA7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUw4XTdEKyn/6eK9iJs9gRucjq9p4wHwYDVR0j
BBgwFoAUpYZ/UYOZ3aszc1p7JJJ5XM1ydCgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGp1R1J0QmRxWkxWOFBkajF3TGNwU3poQVV0ZEoyam1BVFU2WjVzU0hG
Q28vMC9BNTg2N0Y1MTgzOTlEREFCMzM3MzVBN0IyNDkyNzk1Q0NENzI3NDI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E1ODY3RjUxODM5OUREQUIz
MzczNUE3QjI0OTI3OTVDQ0Q3Mjc0MjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqdUdSdEJkcVpMVjhQZGoxd0xjcFN6aEFVdGRKMmptQVRVNlo1c1NIRkNvLzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM5MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPdjDANBgkqhkiG9w0BAQsFAAOCAQEAf8H2
OP4NGy3M6kbkJPL50xBwvA5gRHW6au9n799dn1HKJUo2CwZ7uGS4GBYdkz9AFixg
vvWImHTqV4ZCoc8QK+yWv7vYhSCAKHwNRmnEFOaBAcrHnoGHkqrOGUozix4yUUYD
xub729P3ogaNIOwCBhs9M5BjKg+GrlmW9Cl1ABait6MiwttaEBSkhJuFMnLGj3UK
NS5FIkvjvFrfop+l7J+p9mURLftv4i0InRRe9MrOfdBuXTeofZEzconTskZQFdLU
bQSKrqiEKa7n0ic7B33sZZj6eRpAC3eSKVEs3JRHVahc4bsY5As+CIC88gh7lkpA
ReppxtAD/z6EBsg45A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org