Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32332d3233203d3e20323632343931.roa
File:                     3133312e3235352e3137322e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          8oaOg5Og4tfvdz0qfwprSdRMLLRLEylUcG7plIMc6Jw=
Subject key identifier:   2A:8E:D9:B0:4C:76:0A:1F:23:22:AE:59:11:EE:CA:75:47:5C:FE:8B
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       471D6FB37F4F1DC2BAECF8BD092FD3ED180BCF0E
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:00 +0000
ROA not before:           Sat 26 Nov 2022 02:41:00 +0000
ROA not after:            Sat 25 Nov 2023 02:46:00 +0000
asID:                     262491
IP address blocks:        131.255.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:6f:b3:7f:4f:1d:c2:ba:ec:f8:bd:09:2f:d3:ed:18:0b:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:00 2022 GMT
            Not After : Nov 25 02:46:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:0c:6c:7c:00:0c:80:de:f0:58:af:04:a2:
                    97:34:47:24:1a:2e:cb:04:d7:e5:61:70:d7:92:e2:
                    2b:7e:bc:d4:88:86:e3:8d:5a:ef:c2:07:e2:4f:16:
                    74:b4:83:44:f2:76:c7:9c:86:20:cb:8b:be:40:6c:
                    b4:bc:f3:10:46:ff:35:3a:cf:a4:16:cc:86:b6:92:
                    f6:8d:22:f5:b5:72:65:64:a0:37:f2:50:51:47:bf:
                    c3:75:d6:2e:60:e0:5b:3d:4f:77:9c:67:05:cf:3e:
                    6c:b2:ec:4f:1c:e2:8f:18:b1:45:42:5b:ca:5c:e3:
                    b3:1a:47:b5:86:8a:bd:3b:77:53:c9:9f:f0:d7:78:
                    d6:69:1a:2d:91:cb:24:a4:6f:2d:d6:75:b4:b9:61:
                    e4:03:66:d3:05:b4:2d:96:fb:bf:e6:1c:e6:bd:12:
                    f9:b8:b5:e9:0d:cb:28:20:5f:a5:81:6d:0c:d6:72:
                    05:a3:ec:35:45:35:2b:59:ee:2e:ab:6b:dc:fd:16:
                    a0:56:b1:77:e6:17:1c:88:39:53:36:15:9e:ce:db:
                    36:98:9c:62:a8:20:c7:09:4c:f2:1d:47:47:14:77:
                    91:fd:61:50:62:72:4d:67:7c:50:cd:95:66:2a:0e:
                    7a:7c:de:e9:c8:d8:20:01:9f:31:31:aa:0e:27:60:
                    0c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8E:D9:B0:4C:76:0A:1F:23:22:AE:59:11:EE:CA:75:47:5C:FE:8B
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3133312e3235352e3137322e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:6e:c8:12:b4:aa:7a:55:21:1f:20:e4:f4:2b:af:75:6f:
         d1:08:20:16:58:9e:8c:09:ff:b3:c2:e3:83:ce:d0:79:f1:dd:
         39:a4:39:55:8a:80:73:d9:6d:23:54:73:d1:87:90:dc:db:1c:
         13:19:fc:a8:f7:b2:c3:01:22:e2:c0:66:81:e2:33:22:b2:12:
         af:a2:2f:e6:d8:f9:dd:c7:61:dc:64:63:dd:08:5b:41:6f:f5:
         48:9e:43:a7:57:3c:2d:89:b3:11:29:0f:00:80:b4:b6:2b:48:
         c3:fa:f6:0e:14:35:a4:32:1f:18:1f:ab:41:09:85:de:3d:25:
         80:21:23:de:85:6b:b0:37:e9:c1:b9:44:b3:a1:a4:c0:ad:c0:
         a5:9b:d0:a8:01:4a:0b:e9:e5:b3:b2:d3:95:68:16:de:82:d2:
         1a:22:bb:90:72:28:11:05:c7:9b:fc:65:03:5c:85:15:df:f3:
         aa:1c:26:4d:a6:c5:d0:c2:75:0a:92:51:50:df:e2:93:dd:a4:
         b4:9a:47:df:8f:3f:53:15:e3:67:7b:cb:c5:bf:1c:44:bd:52:
         b1:fe:0a:f9:2b:e4:87:24:9f:ee:0d:c6:03:a2:21:3a:4c:b9:
         91:dd:a4:09:2c:c8:b0:9a:e3:67:98:a8:68:00:ec:17:ea:e4:
         d6:b0:34:f9
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIURx1vs39PHcK67Pi9CS/T7RgLzw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyQTZFMUFGMDg0N0VBMUE3RDY3N0UyREEwOTEyQTFB
QkY0QjlBQzAeFw0yMjExMjYwMjQxMDBaFw0yMzExMjUwMjQ2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdGMTBDNkM3QzAwMEM4MERF
RjA1OEFGMDRBMjk3MzQ0NzI0MUEyRUNCMDREN0U1NjE3MEQ3OTJFMjJCN0VCQ0Q0
ODg4NkUzOEQ1QUVGQzIwN0UyNEYxNjc0QjQ4MzQ0RjI3NkM3OUM4NjIwQ0I4QkJF
NDA2Q0I0QkNGMzEwNDZGRjM1M0FDRkE0MTZDQzg2QjY5MkY2OEQyMkY1QjU3MjY1
NjRBMDM3RjI1MDUxNDdCRkMzNzVENjJFNjBFMDVCM0Q0Rjc3OUM2NzA1Q0YzRTZD
QjJFQzRGMUNFMjhGMThCMTQ1NDI1QkNBNUNFM0IzMUE0N0I1ODY4QUJEM0I3NzUz
Qzk5RkYwRDc3OEQ2NjkxQTJEOTFDQjI0QTQ2RjJERDY3NUI0Qjk2MUU0MDM2NkQz
MDVCNDJEOTZGQkJGRTYxQ0U2QkQxMkY5QjhCNUU5MERDQjI4MjA1RkE1ODE2RDBD
RDY3MjA1QTNFQzM1NDUzNTJCNTlFRTJFQUI2QkRDRkQxNkEwNTZCMTc3RTYxNzFD
ODgzOTUzMzYxNTlFQ0VEQjM2OTg5QzYyQTgyMEM3MDk0Q0YyMUQ0NzQ3MTQ3Nzkx
RkQ2MTUwNjI3MjRENjc3QzUwQ0Q5NTY2MkEwRTdBN0NERUU5QzhEODIwMDE5RjMx
MzFBQTBFMjc2MDBDRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx/EMbHwADIDe8FivBKKXNEckGi7LBNflYXDXkuIrfrzUiIbjjVrv
wgfiTxZ0tINE8nbHnIYgy4u+QGy0vPMQRv81Os+kFsyGtpL2jSL1tXJlZKA38lBR
R7/DddYuYOBbPU93nGcFzz5ssuxPHOKPGLFFQlvKXOOzGke1hoq9O3dTyZ/w13jW
aRotkcskpG8t1nW0uWHkA2bTBbQtlvu/5hzmvRL5uLXpDcsoIF+lgW0M1nIFo+w1
RTUrWe4uq2vc/RagVrF35hcciDlTNhWezts2mJxiqCDHCUzyHUdHFHeR/WFQYnJN
Z3xQzZVmKg56fN7pyNggAZ8xMaoOJ2AM+QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCqO2bBMdgofIyKuWRHuynVHXP6LMB8GA1UdIwQYMBaAFP4qbhrwhH6hp9Z34toJ
EqGr9LmsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h3UnRLQkt4U1A1YlFG
bW5DNTh5WlJCTnQ2RzVYTE15MUF3bTJOUTZkbnZOLzAvRkUyQTZFMUFGMDg0N0VB
MUE3RDY3N0UyREEwOTEyQTFBQkY0QjlBQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRTJBNkUxQUYwODQ3RUExQTdENjc3RTJEQTA5MTJBMUFCRjRC
OUFDLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Id1J0S0JLeFNQNWJRRm1uQzU4
eVpSQk50Nkc1WExNeTFBd20yTlE2ZG52Ti8wLzMxMzMzMTJlMzIzNTM1MmUzMTM3
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIzNDM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGD/6wwDQYJKoZIhvcNAQELBQADggEBAF+gbsgStKp6VSEfIOT0K691b9EIIBZY
nowJ/7PC44PO0Hnx3TmkOVWKgHPZbSNUc9GHkNzbHBMZ/Kj3ssMBIuLAZoHiMyKy
Eq+iL+bY+d3HYdxkY90IW0Fv9UieQ6dXPC2JsxEpDwCAtLYrSMP69g4UNaQyHxgf
q0EJhd49JYAhI96Fa7A36cG5RLOhpMCtwKWb0KgBSgvp5bOy05VoFt6C0hoiu5By
KBEFx5v8ZQNchRXf86ocJk2mxdDCdQqSUVDf4pPdpLSaR9+PP1MV42d7y8W/HES9
UrH+Cvkr5Ickn+4NxgOiITpMuZHdpAksyLCa42eYqGgA7Bfq5NawNPk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org