Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa
File:                     3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (raw, json)
Hash identifier:          amYKYF05fMS2Q2Wla2EqlcdhDMV3Ptt+XqZgcnBluOI=
Subject key identifier:   20:54:34:9D:9F:76:3C:E3:EC:59:71:2C:81:E4:48:85:09:47:12:30
Certificate issuer:       /CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
Certificate serial:       04BFB84FAABEFE459BF09637B29852D6318D9BB1
Authority key identifier: E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa
Signing time:             Tue 11 Apr 2023 10:33:14 +0000
ROA not before:           Tue 11 Apr 2023 10:28:14 +0000
ROA not after:            Tue 09 Apr 2024 10:33:14 +0000
asID:                     264009
IP address blocks:        143.0.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bf:b8:4f:aa:be:fe:45:9b:f0:96:37:b2:98:52:d6:31:8d:9b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F
        Validity
            Not Before: Apr 11 10:28:14 2023 GMT
            Not After : Apr  9 10:33:14 2024 GMT
        Subject: CN=2054349D9F763CE3EC59712C81E4488509471230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:7d:0a:4a:1d:a4:6f:43:d4:bb:8d:d6:6b:
                    07:18:ce:1e:b9:06:4d:f7:36:8c:71:a9:cd:97:85:
                    e2:6d:eb:5c:46:d1:4f:b2:72:47:da:8c:3b:13:94:
                    cc:cc:94:11:c0:c7:28:c9:bd:eb:b5:3c:6f:e0:85:
                    8f:b4:0c:44:0e:cb:30:f4:90:ab:e0:30:5a:8f:41:
                    2f:74:9a:6b:34:f2:27:ba:60:07:03:06:e5:f7:76:
                    4e:93:e8:63:b7:b1:c1:17:41:a0:69:ef:27:59:10:
                    ca:bc:ec:42:ba:68:09:6f:ed:ac:42:ef:46:6d:e1:
                    25:7c:ab:89:90:42:e1:42:9f:f0:85:33:f9:27:a1:
                    3f:6b:53:4c:72:68:26:47:d6:34:69:d5:46:6e:61:
                    81:65:5a:c9:1d:80:15:2a:03:81:49:8e:b2:af:8f:
                    6e:92:f4:3a:ca:5b:a7:20:a9:3a:db:45:72:7f:f3:
                    c2:8c:b9:59:6a:20:9f:d1:a5:3b:df:26:f9:be:95:
                    ab:55:17:96:a3:60:a5:c4:5f:9d:0f:e4:80:cc:ae:
                    2b:a9:c6:5d:cb:30:92:75:b5:cd:0c:2e:56:fa:0a:
                    61:3c:fa:17:1c:53:85:65:95:7e:1d:d5:2f:7d:18:
                    08:45:dc:b5:86:2e:94:ef:cb:99:65:7d:95:37:88:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:34:9D:9F:76:3C:E3:EC:59:71:2C:81:E4:48:85:09:47:12:30
            X509v3 Authority Key Identifier:
                keyid:E2:6E:C6:7B:22:DE:C9:50:EE:3F:C2:2B:A1:28:E6:FA:5C:91:EF:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26EC67B22DEC950EE3FC22BA128E6FA5C91EF1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:6e:41:0e:95:f2:d2:19:e1:69:57:26:af:18:0b:98:0c:d2:
         14:af:59:8b:2a:64:05:db:dc:f0:87:2a:d0:2a:8c:9c:25:44:
         f4:21:8b:61:6a:ad:28:f2:03:cd:8b:70:97:5d:9c:45:23:10:
         50:87:0b:7c:ac:5c:21:0b:e4:db:65:d5:fb:99:71:24:b1:ac:
         73:d8:6b:c2:e8:79:ee:79:a1:38:3b:39:11:82:b4:3c:b5:86:
         e9:0f:66:f4:71:fe:dd:10:cb:73:c8:b9:cf:7b:17:16:4c:38:
         00:68:7c:3c:75:54:13:63:98:72:3e:1a:ff:5c:f3:79:95:7c:
         91:21:02:4d:52:82:52:2d:95:90:1b:30:9f:43:dd:7a:c4:23:
         80:ae:2d:84:52:ca:e8:d6:9a:12:51:2e:22:9e:6e:22:52:99:
         11:cb:49:7e:d7:68:aa:18:09:4a:a8:a4:02:bb:5d:16:f7:54:
         c7:a4:de:91:07:52:8d:a4:5d:71:9d:3c:bb:01:70:48:55:ba:
         60:a2:ae:ef:03:23:80:aa:e3:5a:0f:fb:da:15:b8:49:10:6f:
         bc:c7:24:6b:3c:38:c7:03:1e:e6:23:0f:da:c8:f9:2b:39:23:
         fd:9f:9b:eb:7c:54:8c:d9:5d:7d:41:e3:9c:fe:f5:53:42:11:
         9f:67:ef:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBL+4T6q+/kWb8JY3sphS1jGNm7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI2RUM2N0IyMkRFQzk1MEVFM0ZDMjJCQTEyOEU2RkE1
QzkxRUYxRjAeFw0yMzA0MTExMDI4MTRaFw0yNDA0MDkxMDMzMTRaMDMxMTAvBgNV
BAMTKDIwNTQzNDlEOUY3NjNDRTNFQzU5NzEyQzgxRTQ0ODg1MDk0NzEyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4X0KSh2kb0PUu43WawcYzh65
Bk33Noxxqc2XheJt61xG0U+yckfajDsTlMzMlBHAxyjJveu1PG/ghY+0DEQOyzD0
kKvgMFqPQS90mms08ie6YAcDBuX3dk6T6GO3scEXQaBp7ydZEMq87EK6aAlv7axC
70Zt4SV8q4mQQuFCn/CFM/knoT9rU0xyaCZH1jRp1UZuYYFlWskdgBUqA4FJjrKv
j26S9DrKW6cgqTrbRXJ/88KMuVlqIJ/RpTvfJvm+latVF5ajYKXEX50P5IDMriup
xl3LMJJ1tc0MLlb6CmE8+hccU4VllX4d1S99GAhF3LWGLpTvy5llfZU3iLYhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIFQ0nZ92POPsWXEsgeRIhQlHEjAwHwYDVR0j
BBgwFoAU4m7GeyLeyVDuP8IroSjm+lyR7x8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjM0ZzZvb2ZaS2NUU1VvVzRqTDFDeHhHV3JqVmhiWUNXNzE2TTloN0t3
dzMvMC9FMjZFQzY3QjIyREVDOTUwRUUzRkMyMkJBMTI4RTZGQTVDOTFFRjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyNkVDNjdCMjJERUM5NTBF
RTNGQzIyQkExMjhFNkZBNUM5MUVGMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzNGc2b29mWktjVFNVb1c0akwxQ3h4R1dyalZoYllDVzcxNk05aDdLd3czLzAv
MzEzNDMzMmUzMDJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwCMMA0GCSqGSIb3DQEBCwUAA4IBAQDEbkEOlfLS
GeFpVyavGAuYDNIUr1mLKmQF29zwhyrQKoycJUT0IYthaq0o8gPNi3CXXZxFIxBQ
hwt8rFwhC+TbZdX7mXEksaxz2GvC6HnueaE4OzkRgrQ8tYbpD2b0cf7dEMtzyLnP
excWTDgAaHw8dVQTY5hyPhr/XPN5lXyRIQJNUoJSLZWQGzCfQ916xCOAri2EUsro
1poSUS4inm4iUpkRy0l+12iqGAlKqKQCu10W91THpN6RB1KNpF1xnTy7AXBIVbpg
oq7vAyOAquNaD/vaFbhJEG+8xyRrPDjHAx7mIw/ayPkrOSP9n5vrfFSM2V19QeOc
/vVTQhGfZ++D
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org