Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137382e302f32342d3234203d3e20323634333834.roa
File:                     3133312e3136312e3137382e302f32342d3234203d3e20323634333834.roa (raw, json)
Hash identifier:          nvMeAdrJ4iRb5oxlKsn9ENG6UevRlm0SI9GeCCtueYE=
Subject key identifier:   21:99:F8:55:9A:83:62:0A:ED:D6:BD:CC:16:96:3F:A8:74:F6:FD:C1
Certificate issuer:       /CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
Certificate serial:       63B611124E0630CD7CD2F412598E1A5B95F7804C
Authority key identifier: AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137382e302f32342d3234203d3e20323634333834.roa
Signing time:             Mon 27 Feb 2023 18:00:54 +0000
ROA not before:           Mon 27 Feb 2023 17:55:54 +0000
ROA not after:            Mon 26 Feb 2024 18:00:54 +0000
asID:                     264384
IP address blocks:        131.161.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b6:11:12:4e:06:30:cd:7c:d2:f4:12:59:8e:1a:5b:95:f7:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699
        Validity
            Not Before: Feb 27 17:55:54 2023 GMT
            Not After : Feb 26 18:00:54 2024 GMT
        Subject: CN=2199F8559A83620AEDD6BDCC16963FA874F6FDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:29:cd:24:ce:a3:c1:7f:78:0c:d4:5f:73:
                    7d:2e:36:1f:84:65:b0:a5:87:6d:58:68:6b:c9:26:
                    1d:c0:3d:43:ee:8d:85:af:c2:0a:de:84:a2:c5:1b:
                    cd:34:90:57:1a:0c:b1:82:2a:52:7b:2f:12:13:83:
                    cd:f9:f6:a2:bb:84:f6:b2:a8:f2:cb:d7:eb:09:3a:
                    d2:84:ec:e1:44:27:de:b4:88:70:ea:50:4f:7e:25:
                    f8:80:19:50:7e:a9:a2:59:f9:6a:4f:8e:9f:e0:cc:
                    d5:57:51:b6:2d:43:09:e0:a8:c7:9f:39:c4:d9:61:
                    87:e3:7a:c3:6e:5a:51:59:83:44:0a:94:1c:a6:20:
                    9f:d1:55:8c:94:73:8b:0e:24:de:23:6e:a0:70:a9:
                    f6:c2:13:ab:c1:ec:49:a1:4b:0a:5c:14:3f:32:0c:
                    a6:42:e5:85:01:35:60:b3:f8:7f:f3:c4:fc:c1:c7:
                    26:a4:4e:20:d6:13:e9:f3:fb:2c:0d:08:aa:4a:67:
                    36:17:ca:13:25:82:7d:71:c4:ec:9c:cd:9a:a4:2e:
                    74:d4:d0:64:63:ad:cd:51:a0:e4:6b:f1:93:3f:96:
                    fc:8f:07:eb:d9:d7:97:4f:bc:97:0b:85:5c:86:55:
                    fc:b8:c4:51:e4:0c:ec:65:f1:92:4e:48:98:98:39:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:F8:55:9A:83:62:0A:ED:D6:BD:CC:16:96:3F:A8:74:F6:FD:C1
            X509v3 Authority Key Identifier:
                keyid:AC:32:EB:9E:48:59:B6:D0:CF:A4:7C:B6:8A:AA:7A:15:28:1B:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC32EB9E4859B6D0CFA47CB68AAA7A15281BC699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/0/3133312e3136312e3137382e302f32342d3234203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:06:0f:ba:c5:8d:1e:c2:6d:e6:be:c9:8f:7b:5c:28:fb:6d:
         99:0b:48:f8:8c:ae:11:1c:81:45:59:0e:71:ad:4e:84:5f:68:
         82:b6:3a:f5:85:66:86:f1:21:04:53:59:19:d7:e3:09:7e:c5:
         b1:3b:11:95:23:09:b1:37:fa:bb:2a:63:3e:12:e2:ca:a0:05:
         52:13:5f:28:51:56:82:23:d9:de:27:e8:af:9e:28:a6:9a:64:
         3c:c1:ea:50:ed:c9:b3:58:dd:f4:00:46:b5:22:ef:10:24:94:
         5b:bf:ae:c3:34:80:95:24:7f:2e:14:b7:7c:cb:e4:c8:ac:9b:
         e0:2e:25:72:f1:4c:1a:76:32:3e:0c:11:bb:a7:bc:a0:2f:67:
         28:42:ef:dc:f7:dc:90:19:a8:31:02:42:4c:eb:25:33:2e:38:
         29:ce:47:12:b4:e1:ae:c1:18:97:6a:bb:d5:5f:19:c1:81:07:
         e4:b1:83:20:ad:84:37:15:ed:59:ac:c6:d2:ef:aa:c2:14:f3:
         ec:2a:c1:d2:e0:ee:c9:90:81:a2:ba:0c:08:4d:40:7f:27:2b:
         51:d9:93:b0:c9:25:55:1b:1d:b6:9a:80:7c:3a:32:af:14:d3:
         5c:da:4e:71:88:32:ed:04:1b:6d:7e:22:a8:16:bb:86:c8:18:
         90:40:f5:5f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY7YREk4GMM180vQSWY4aW5X3gEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMzMkVCOUU0ODU5QjZEMENGQTQ3Q0I2OEFBQTdBMTUy
ODFCQzY5OTAeFw0yMzAyMjcxNzU1NTRaFw0yNDAyMjYxODAwNTRaMDMxMTAvBgNV
BAMTKDIxOTlGODU1OUE4MzYyMEFFREQ2QkRDQzE2OTYzRkE4NzRGNkZEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNinNJM6jwX94DNRfc30uNh+E
ZbClh21YaGvJJh3APUPujYWvwgrehKLFG800kFcaDLGCKlJ7LxITg8359qK7hPay
qPLL1+sJOtKE7OFEJ960iHDqUE9+JfiAGVB+qaJZ+WpPjp/gzNVXUbYtQwngqMef
OcTZYYfjesNuWlFZg0QKlBymIJ/RVYyUc4sOJN4jbqBwqfbCE6vB7EmhSwpcFD8y
DKZC5YUBNWCz+H/zxPzBxyakTiDWE+nz+ywNCKpKZzYXyhMlgn1xxOyczZqkLnTU
0GRjrc1RoORr8ZM/lvyPB+vZ15dPvJcLhVyGVfy4xFHkDOxl8ZJOSJiYOZQzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIZn4VZqDYgrt1r3MFpY/qHT2/cEwHwYDVR0j
BBgwFoAUrDLrnkhZttDPpHy2iqp6FSgbxpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3
dnYvMC9BQzMyRUI5RTQ4NTlCNkQwQ0ZBNDdDQjY4QUFBN0ExNTI4MUJDNjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDMzJFQjlFNDg1OUI2RDBD
RkE0N0NCNjhBQUE3QTE1MjgxQkM2OTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0Y3ZZTTZXdnczQ2tCamM5SDUxN2Vldmg2M3prZFhQVFlUV3lTQk5EN3Z2LzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIOhsjANBgkqhkiG9w0BAQsFAAOCAQEAcAYP
usWNHsJt5r7Jj3tcKPttmQtI+IyuERyBRVkOca1OhF9ogrY69YVmhvEhBFNZGdfj
CX7FsTsRlSMJsTf6uypjPhLiyqAFUhNfKFFWgiPZ3ifor54opppkPMHqUO3Js1jd
9ABGtSLvECSUW7+uwzSAlSR/LhS3fMvkyKyb4C4lcvFMGnYyPgwRu6e8oC9nKELv
3PfckBmoMQJCTOslMy44Kc5HErThrsEYl2q71V8ZwYEH5LGDIK2ENxXtWazG0u+q
whTz7CrB0uDuyZCBoroMCE1AfycrUdmTsMklVRsdtpqAfDoyrxTTXNpOcYgy7QQb
bX4iqBa7hsgYkED1Xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org