Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3234203d3e20323633353434.roa
File:                     3134332e302e34382e302f32322d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          P0WfCs9147dwN1n7DwuuaCPUkvxntkhUzBgloZhaTag=
Subject key identifier:   C0:8D:4F:A8:08:85:8C:5A:FB:77:8C:78:45:DC:5F:21:D7:C8:E4:B3
Certificate issuer:       /CN=E66153261DF76D7AF85F0116373381AC74E0188B
Certificate serial:       3A4D1D0972D2B0A133E6DB14201D810D71353C6B
Authority key identifier: E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3234203d3e20323633353434.roa
Signing time:             Tue 06 Jun 2023 13:10:05 +0000
ROA not before:           Tue 06 Jun 2023 13:05:05 +0000
ROA not after:            Tue 04 Jun 2024 13:10:05 +0000
asID:                     263544
IP address blocks:        143.0.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4d:1d:09:72:d2:b0:a1:33:e6:db:14:20:1d:81:0d:71:35:3c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66153261DF76D7AF85F0116373381AC74E0188B
        Validity
            Not Before: Jun  6 13:05:05 2023 GMT
            Not After : Jun  4 13:10:05 2024 GMT
        Subject: CN=C08D4FA808858C5AFB778C7845DC5F21D7C8E4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:87:5a:7f:f8:30:a8:84:d6:89:11:16:e8:
                    71:9b:56:44:71:67:77:68:f9:7a:2a:af:d2:b0:36:
                    7d:09:02:a2:78:02:c7:ae:2c:65:5b:1c:44:ec:26:
                    33:7e:b0:a3:02:fe:06:e9:73:d0:c5:c2:e1:e4:4a:
                    86:05:ba:e3:d7:7d:27:74:c5:ea:fe:37:9c:a0:a0:
                    a4:2c:ef:3c:8a:de:1d:b9:e1:d6:dc:d3:64:e7:7c:
                    be:20:13:40:a5:7c:c6:fc:2c:e3:ed:43:1b:3e:0d:
                    58:e1:a4:49:a1:78:cd:9f:2b:d8:8d:5c:30:cc:de:
                    d4:01:5e:59:6b:df:bf:c3:c8:60:de:6a:f2:21:25:
                    25:0a:98:ff:fd:ed:c8:01:39:51:94:3e:5d:3b:ff:
                    8f:8b:c2:c8:6f:02:be:97:2b:b7:a5:67:e2:e8:b2:
                    18:17:a3:a8:0a:5d:49:6f:41:3b:99:94:87:d1:a9:
                    b6:30:27:63:d2:36:e7:67:3b:d5:df:55:ed:eb:2f:
                    a4:40:e6:31:dc:b0:b5:fb:5e:13:d2:73:3d:f8:9d:
                    4f:d4:2b:df:1a:b5:9b:a9:49:d9:8e:f7:9b:34:da:
                    a5:ac:78:fe:9f:9a:5e:0b:37:b2:a6:5b:c4:f1:8b:
                    99:85:06:c2:97:e6:84:4a:05:2e:70:3e:30:07:c4:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:4F:A8:08:85:8C:5A:FB:77:8C:78:45:DC:5F:21:D7:C8:E4:B3
            X509v3 Authority Key Identifier:
                keyid:E6:61:53:26:1D:F7:6D:7A:F8:5F:01:16:37:33:81:AC:74:E0:18:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E66153261DF76D7AF85F0116373381AC74E0188B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E66153261DF76D7AF85F0116373381AC74E0188B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:0c:40:b3:d8:33:df:6d:6a:8f:a2:92:e5:5e:08:6b:af:
         28:c0:28:40:1e:88:63:a3:a4:b7:01:89:d2:fd:ec:36:da:54:
         87:10:96:16:b1:e4:bf:d0:d1:66:ee:c6:3f:34:2f:9d:d6:cf:
         72:26:00:ce:47:0b:8a:36:00:bd:c6:20:a9:3b:fb:6a:53:ac:
         82:98:14:ed:cb:86:70:0e:6a:ed:1f:1f:5b:47:6e:c6:29:98:
         b0:36:01:d3:cd:d1:cd:f5:89:be:1c:43:af:cf:95:84:e0:60:
         b1:a0:bb:d5:e1:0c:a1:54:7e:ea:45:85:f8:62:50:04:9b:76:
         54:ec:26:3d:ba:ca:16:dc:7c:ab:39:d1:4b:5a:cb:d6:e4:28:
         2f:f7:8c:86:87:94:03:bb:05:1f:14:1b:f9:93:41:80:b5:b8:
         75:89:76:7a:8f:54:15:d3:f3:0c:1c:9d:a9:dc:36:af:61:27:
         79:c1:f1:9a:5a:94:08:b9:d9:fc:de:b8:a7:73:f7:78:6a:89:
         44:9d:6d:06:52:d0:42:3e:79:e4:35:59:25:51:13:89:24:ef:
         3b:e4:dc:f3:3e:44:5a:a3:e3:36:f3:8a:90:98:b2:2a:98:4b:
         dc:0c:c5:78:18:08:b6:c7:86:62:82:f7:35:8d:85:e8:aa:5e:
         e0:49:af:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOk0dCXLSsKEz5tsUIB2BDXE1PGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY2MTUzMjYxREY3NkQ3QUY4NUYwMTE2MzczMzgxQUM3
NEUwMTg4QjAeFw0yMzA2MDYxMzA1MDVaFw0yNDA2MDQxMzEwMDVaMDMxMTAvBgNV
BAMTKEMwOEQ0RkE4MDg4NThDNUFGQjc3OEM3ODQ1REM1RjIxRDdDOEU0QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdodaf/gwqITWiREW6HGbVkRx
Z3do+Xoqr9KwNn0JAqJ4AseuLGVbHETsJjN+sKMC/gbpc9DFwuHkSoYFuuPXfSd0
xer+N5ygoKQs7zyK3h254dbc02TnfL4gE0ClfMb8LOPtQxs+DVjhpEmheM2fK9iN
XDDM3tQBXllr37/DyGDeavIhJSUKmP/97cgBOVGUPl07/4+LwshvAr6XK7elZ+Lo
shgXo6gKXUlvQTuZlIfRqbYwJ2PSNudnO9XfVe3rL6RA5jHcsLX7XhPScz34nU/U
K98atZupSdmO95s02qWseP6fml4LN7KmW8Txi5mFBsKX5oRKBS5wPjAHxLepAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwI1PqAiFjFr7d4x4RdxfIdfI5LMwHwYDVR0j
BBgwFoAU5mFTJh33bXr4XwEWNzOBrHTgGIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFGcWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJH
V3gvMC9FNjYxNTMyNjFERjc2RDdBRjg1RjAxMTYzNzMzODFBQzc0RTAxODhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U2NjE1MzI2MURGNzZEN0FG
ODVGMDExNjM3MzM4MUFDNzRFMDE4OEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBRnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAv
MzEzNDMzMmUzMDJlMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM1
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAo8AMDANBgkqhkiG9w0BAQsFAAOCAQEADnYMQLPYM99t
ao+ikuVeCGuvKMAoQB6IY6OktwGJ0v3sNtpUhxCWFrHkv9DRZu7GPzQvndbPciYA
zkcLijYAvcYgqTv7alOsgpgU7cuGcA5q7R8fW0duximYsDYB083RzfWJvhxDr8+V
hOBgsaC71eEMoVR+6kWF+GJQBJt2VOwmPbrKFtx8qznRS1rL1uQoL/eMhoeUA7sF
HxQb+ZNBgLW4dYl2eo9UFdPzDBydqdw2r2EnecHxmlqUCLnZ/N64p3P3eGqJRJ1t
BlLQQj555DVZJVETiSTvO+Tc8z5EWqPjNvOKkJiyKphL3AzFeBgItseGYoL3NY2F
6Kpe4EmvPw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org