Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          L5uD0c4muR7Owi68OYAWNibI1sLmwX6AxF12Umk46FU=
Subject key identifier:   DE:73:8A:5E:53:87:F7:D6:6B:F0:B9:FF:03:F1:FD:34:07:AC:63:19
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       2ECEF2147D7026E4BCEAF4EE27D824B3533F0CA4
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:12 +0000
ROA not before:           Wed 13 Mar 2024 19:16:12 +0000
ROA not after:            Wed 12 Mar 2025 19:21:12 +0000
asID:                     262369
IP address blocks:        143.137.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:f2:14:7d:70:26:e4:bc:ea:f4:ee:27:d8:24:b3:53:3f:0c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:12 2024 GMT
            Not After : Mar 12 19:21:12 2025 GMT
        Subject: CN=DE738A5E5387F7D66BF0B9FF03F1FD3407AC6319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:45:21:4b:a2:c9:d3:7c:b5:8c:75:05:07:
                    0e:19:e2:23:56:4f:92:79:39:b9:d1:4b:7a:4d:5e:
                    70:7a:02:5b:4b:31:aa:ff:40:02:32:dd:e2:26:25:
                    c9:9d:80:d0:5d:f5:f9:3b:d0:c7:49:c4:d7:96:f6:
                    56:95:b2:7d:9d:1e:ea:17:fc:cb:d0:ef:ea:c6:0c:
                    f6:9d:66:04:60:3b:8e:d5:b8:72:f0:ac:cc:1c:91:
                    08:4a:ca:f1:af:95:83:0a:e5:84:70:5c:d3:d5:87:
                    5d:55:36:f0:8d:07:32:f4:8d:f7:43:d2:3c:dc:64:
                    ad:66:23:21:64:c8:af:60:be:10:71:ea:c2:01:88:
                    41:13:2c:dd:ac:d1:73:a8:89:a7:84:02:41:7e:25:
                    fe:45:64:0e:74:36:a4:c3:75:02:04:a0:13:cd:72:
                    6a:ca:c7:20:d6:f2:ef:1b:1d:5f:f2:76:1a:cd:0b:
                    bd:38:61:7a:07:1c:a5:1c:c1:12:ab:df:48:10:57:
                    02:5f:55:38:08:6e:23:4f:b7:af:d2:7c:8e:38:06:
                    e6:5b:64:78:c8:aa:af:98:82:4a:71:99:5b:d4:c8:
                    05:2e:16:9e:54:b4:db:91:10:5a:5d:3d:f0:09:f5:
                    a8:0e:aa:3b:4e:44:48:81:e7:7b:44:ab:24:f1:75:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:8A:5E:53:87:F7:D6:6B:F0:B9:FF:03:F1:FD:34:07:AC:63:19
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:af:9b:7b:e8:15:52:46:62:11:a3:50:98:ba:93:c8:ef:
         b7:3a:fb:90:cd:f5:88:87:e9:15:54:ff:a6:1d:c5:8e:77:90:
         54:b1:21:c3:a2:38:23:16:9d:25:cd:9f:08:3f:95:b0:d6:28:
         4d:27:33:58:e9:6e:8b:95:17:29:e3:29:71:c5:a6:4f:37:2d:
         dd:5d:83:95:a4:0c:36:ab:15:ef:99:37:ad:15:0e:c0:b4:d0:
         70:34:57:98:3f:61:e5:eb:9b:56:75:23:30:09:f9:73:e1:e2:
         9f:e4:d5:ad:af:06:de:08:68:c2:40:93:3e:dc:3c:08:bd:fe:
         c8:ef:5b:a9:81:0a:e2:cd:0c:d6:6a:ca:54:40:b3:d3:ce:b4:
         03:42:37:0a:b5:65:a2:82:e5:08:a9:dc:b4:12:c6:2c:38:38:
         33:06:1f:77:7a:57:30:81:4f:8a:67:ec:b9:8e:10:1b:66:ff:
         3f:41:e1:7b:0a:32:b8:57:17:cc:6b:9d:fa:2a:fb:4c:ea:ea:
         5d:73:6d:8b:97:c2:07:2b:f7:c2:19:c3:8a:ce:7d:b3:11:bc:
         f9:df:b5:5f:ae:93:52:c9:ff:13:29:4f:0e:53:9b:36:b2:6f:
         f9:cb:5f:50:1c:7c:39:93:11:86:1b:10:06:5e:73:5d:74:e4:
         e5:39:cf:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULs7yFH1wJuS86vTuJ9gks1M/DKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRERTI2OEI4MThCQkYwREU5Q0RFRkExRkQ5NzY2MTJG
RUQ3QkU5QzAeFw0yNDAzMTMxOTE2MTJaFw0yNTAzMTIxOTIxMTJaMDMxMTAvBgNV
BAMTKERFNzM4QTVFNTM4N0Y3RDY2QkYwQjlGRjAzRjFGRDM0MDdBQzYzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7EUhS6LJ03y1jHUFBw4Z4iNW
T5J5ObnRS3pNXnB6AltLMar/QAIy3eImJcmdgNBd9fk70MdJxNeW9laVsn2dHuoX
/MvQ7+rGDPadZgRgO47VuHLwrMwckQhKyvGvlYMK5YRwXNPVh11VNvCNBzL0jfdD
0jzcZK1mIyFkyK9gvhBx6sIBiEETLN2s0XOoiaeEAkF+Jf5FZA50NqTDdQIEoBPN
cmrKxyDW8u8bHV/ydhrNC704YXoHHKUcwRKr30gQVwJfVTgIbiNPt6/SfI44BuZb
ZHjIqq+YgkpxmVvUyAUuFp5UtNuREFpdPfAJ9agOqjtOREiB53tEqyTxdflHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3nOKXlOH99Zr8Ln/A/H9NAesYxkwHwYDVR0j
BBgwFoAUBN4mi4GLvw3pze+h/ZdmEv7XvpwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC8wNERFMjY4QjgxOEJCRjBERTlDREVGQTFGRDk3NjYxMkZFRDdCRTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0REUyNjhCODE4QkJGMERF
OUNERUZBMUZEOTc2NjEyRkVEN0JFOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzEzNDMzMmUzMTMzMzcyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACPiUQwDQYJKoZIhvcNAQELBQADggEBAHQbr5t7
6BVSRmIRo1CYupPI77c6+5DN9YiH6RVU/6YdxY53kFSxIcOiOCMWnSXNnwg/lbDW
KE0nM1jpbouVFynjKXHFpk83Ld1dg5WkDDarFe+ZN60VDsC00HA0V5g/YeXrm1Z1
IzAJ+XPh4p/k1a2vBt4IaMJAkz7cPAi9/sjvW6mBCuLNDNZqylRAs9POtANCNwq1
ZaKC5Qip3LQSxiw4ODMGH3d6VzCBT4pn7LmOEBtm/z9B4XsKMrhXF8xrnfoq+0zq
6l1zbYuXwgcr98IZw4rOfbMRvPnftV+uk1LJ/xMpTw5Tmzayb/nLX1AcfDmTEYYb
EAZec1105OU5z6w=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org