Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa
File:                     3134332e302e382e302f32322d3234203d3e20323634353136.roa (raw, json)
Hash identifier:          M8bQEnhtQUFGZLiMSa4otINDBN8ZyW1/gamt6SepjHI=
Subject key identifier:   2B:E0:03:89:85:FB:66:EA:DA:5D:80:9A:15:8A:7F:7C:DA:EE:BA:C2
Certificate issuer:       /CN=B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6
Certificate serial:       0EDD42FD66DCDEFA2F5D3492A3FF4F146188ADAF
Authority key identifier: B9:86:01:9E:B8:FF:EE:3D:DA:2D:5B:20:BA:50:EF:C4:93:FC:70:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa
Signing time:             Thu 04 Apr 2024 18:48:15 +0000
ROA not before:           Thu 04 Apr 2024 18:43:15 +0000
ROA not after:            Thu 03 Apr 2025 18:48:15 +0000
asID:                     264516
IP address blocks:        143.0.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dd:42:fd:66:dc:de:fa:2f:5d:34:92:a3:ff:4f:14:61:88:ad:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6
        Validity
            Not Before: Apr  4 18:43:15 2024 GMT
            Not After : Apr  3 18:48:15 2025 GMT
        Subject: CN=2BE0038985FB66EADA5D809A158A7F7CDAEEBAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:0f:0d:f0:21:31:4b:e9:d5:d6:36:dd:49:
                    b1:5c:c1:36:41:7d:2a:58:25:29:55:2c:63:b0:57:
                    75:5d:ce:ce:a9:87:14:4b:42:f2:87:78:c0:a2:21:
                    c8:3c:86:be:da:6b:4e:b8:88:76:de:66:8d:5a:c2:
                    b7:86:af:5a:f5:22:04:5c:0d:f0:6f:5f:f3:14:a8:
                    52:cc:cd:54:02:51:a7:d9:63:df:55:55:5e:de:a7:
                    a6:86:e5:a8:dc:b0:53:55:14:96:bc:03:7c:34:a4:
                    35:05:17:9b:b3:c6:3d:8f:fe:1a:04:31:f2:9b:85:
                    b5:bf:ba:51:ce:62:d3:19:57:73:bf:12:84:a9:f0:
                    fa:2f:23:15:b4:e7:dd:d4:f0:d1:75:d1:2f:5e:83:
                    9d:c3:bc:c8:53:85:36:7d:3e:9c:4e:b5:e1:d1:a9:
                    7e:1d:a8:d1:01:50:a9:c7:95:b4:4d:48:88:67:5b:
                    08:f3:5b:e2:56:07:52:3f:31:0e:4a:0a:e1:82:af:
                    b4:83:b3:e6:f3:89:18:0e:10:0f:2e:95:86:f4:12:
                    2c:fe:ea:74:1c:0c:21:f0:5b:c7:cb:56:74:3e:81:
                    d8:0f:10:fe:87:d3:b0:96:e1:5b:13:9f:19:56:b5:
                    14:db:31:2c:8c:08:03:b1:6b:28:46:0c:06:a7:8c:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:03:89:85:FB:66:EA:DA:5D:80:9A:15:8A:7F:7C:DA:EE:BA:C2
            X509v3 Authority Key Identifier:
                keyid:B9:86:01:9E:B8:FF:EE:3D:DA:2D:5B:20:BA:50:EF:C4:93:FC:70:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B986019EB8FFEE3DDA2D5B20BA50EFC493FC70E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:88:89:b8:2d:c4:49:70:87:ab:89:e1:4c:88:f3:c4:9c:
         f2:a5:c3:e9:34:fb:fb:d2:c2:b7:ab:ac:39:a2:06:b0:38:5e:
         84:e2:fe:70:0e:9d:e6:a0:2d:ba:4e:ef:86:7f:08:ef:d7:a4:
         67:2e:db:c4:df:48:e2:06:3a:12:62:bc:6d:d4:4f:44:50:ca:
         48:c9:c1:66:dc:3f:51:90:5e:fb:2f:ef:6b:75:a0:95:dc:2c:
         7d:11:1d:b5:bd:8a:ec:95:e1:b3:2a:68:43:0d:70:79:22:54:
         4b:29:5e:9e:81:ef:7c:a5:eb:9e:d8:03:7c:6c:7c:21:c5:48:
         30:45:cd:aa:82:a5:88:ef:a9:cc:37:cd:a6:54:6d:67:88:d6:
         c9:21:45:37:af:45:db:4e:b5:60:b4:8c:60:41:a2:18:0a:17:
         9d:d6:4d:a2:a6:2d:93:be:2f:86:8e:da:e3:f1:5d:7a:6f:59:
         57:25:53:0a:5b:52:f2:70:97:7d:46:af:29:f6:96:21:e4:e0:
         65:be:9b:af:b9:5a:7a:ef:30:57:7f:3a:ac:f8:a9:ad:7a:88:
         ed:85:3e:c6:af:c0:c6:6f:0d:19:3e:06:33:af:af:cb:d7:e2:
         b2:f9:b5:fc:e8:6d:a8:08:54:6f:ca:03:70:ab:37:7d:a5:9b:
         96:81:4f:89
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUDt1C/Wbc3vovXTSSo/9PFGGIra8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk4NjAxOUVCOEZGRUUzRERBMkQ1QjIwQkE1MEVGQzQ5
M0ZDNzBFNjAeFw0yNDA0MDQxODQzMTVaFw0yNTA0MDMxODQ4MTVaMDMxMTAvBgNV
BAMTKDJCRTAwMzg5ODVGQjY2RUFEQTVEODA5QTE1OEE3RjdDREFFRUJBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08g8N8CExS+nV1jbdSbFcwTZB
fSpYJSlVLGOwV3Vdzs6phxRLQvKHeMCiIcg8hr7aa064iHbeZo1awreGr1r1IgRc
DfBvX/MUqFLMzVQCUafZY99VVV7ep6aG5ajcsFNVFJa8A3w0pDUFF5uzxj2P/hoE
MfKbhbW/ulHOYtMZV3O/EoSp8PovIxW0593U8NF10S9eg53DvMhThTZ9PpxOteHR
qX4dqNEBUKnHlbRNSIhnWwjzW+JWB1I/MQ5KCuGCr7SDs+bziRgOEA8ulYb0Eiz+
6nQcDCHwW8fLVnQ+gdgPEP6H07CW4VsTnxlWtRTbMSyMCAOxayhGDAanjBa5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUK+ADiYX7ZuraXYCaFYp/fNruusIwHwYDVR0j
BBgwFoAUuYYBnrj/7j3aLVsgulDvxJP8cOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTN1MmRXc0czNlFieDN1OHRZTWFEMms3SHBMN0N2RXhiTXlMZzZGWG0z
SHcvMS9COTg2MDE5RUI4RkZFRTNEREEyRDVCMjBCQTUwRUZDNDkzRkM3MEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5ODYwMTlFQjhGRkVFM0RE
QTJENUIyMEJBNTBFRkM0OTNGQzcwRTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEzdTJkV3NHMzZRYngzdTh0WU1hRDJrN0hwTDdDdkV4Yk15TGc2RlhtM0h3LzEv
MzEzNDMzMmUzMDJlMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKPAAgwDQYJKoZIhvcNAQELBQADggEBAGihiIm4LcRJcIer
ieFMiPPEnPKlw+k0+/vSwrerrDmiBrA4XoTi/nAOneagLbpO74Z/CO/XpGcu28Tf
SOIGOhJivG3UT0RQykjJwWbcP1GQXvsv72t1oJXcLH0RHbW9iuyV4bMqaEMNcHki
VEspXp6B73yl657YA3xsfCHFSDBFzaqCpYjvqcw3zaZUbWeI1skhRTevRdtOtWC0
jGBBohgKF53WTaKmLZO+L4aO2uPxXXpvWVclUwpbUvJwl31Gryn2liHk4GW+m6+5
WnrvMFd/Oqz4qa16iO2FPsavwMZvDRk+BjOvr8vX4rL5tfzobagIVG/KA3CrN32l
m5aBT4k=
-----END CERTIFICATE-----
Generated at Tue Aug 13 22:03:43 2024 by rpki-client on console-fra.rpki-client.org