Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/3134332e302e3132302e302f32322d3234203d3e20323632393738.roa
File:                     3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (raw, json)
Hash identifier:          VJOg0I4TMwBhjVozPE3ysczV0SIxHCXlo/8nrsDM1sE=
Subject key identifier:   18:9F:CB:9D:AF:2E:14:2F:42:BD:FD:D4:FD:62:8F:C6:8F:CA:3C:16
Certificate issuer:       /CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
Certificate serial:       04313D4EA012E7E3EB69B78DC7596C8C11BE7F5E
Authority key identifier: 62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/3134332e302e3132302e302f32322d3234203d3e20323632393738.roa
Signing time:             Sat 18 Nov 2023 04:19:11 +0000
ROA not before:           Sat 18 Nov 2023 04:14:11 +0000
ROA not after:            Sat 16 Nov 2024 04:19:11 +0000
asID:                     262978
IP address blocks:        143.0.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:31:3d:4e:a0:12:e7:e3:eb:69:b7:8d:c7:59:6c:8c:11:be:7f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Validity
            Not Before: Nov 18 04:14:11 2023 GMT
            Not After : Nov 16 04:19:11 2024 GMT
        Subject: CN=189FCB9DAF2E142F42BDFDD4FD628FC68FCA3C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:90:bb:08:91:d3:9f:89:92:53:98:84:22:
                    dd:ba:d3:35:93:2e:b6:ed:47:1c:c1:de:b0:17:02:
                    a8:46:ba:d5:01:4d:73:3f:0d:9f:84:2d:2f:d0:c8:
                    9e:82:5a:07:51:30:cc:b7:10:5c:a7:f1:13:36:7a:
                    35:1c:7b:e0:70:d2:70:78:3d:a5:32:36:29:b9:0b:
                    21:eb:f5:b8:a2:94:bc:05:ce:d5:68:45:2e:c0:b0:
                    86:f4:fc:24:56:44:9a:50:16:b3:de:52:31:65:9a:
                    e6:01:1d:f7:eb:6f:48:f8:d3:b8:5a:3a:64:9b:9a:
                    3d:fa:e9:dd:aa:11:75:2a:68:b2:b0:2e:ad:d4:97:
                    10:c2:5d:1f:6b:9a:0b:33:d3:14:3d:bf:29:3c:44:
                    ad:8a:a2:f5:7f:0c:00:02:b9:35:0f:61:a7:a4:46:
                    10:39:0a:7c:86:c0:b6:1c:7b:e4:55:c7:e3:2e:30:
                    01:cc:c4:23:fb:8e:dd:3d:ce:2d:2c:61:77:6f:29:
                    64:b7:14:9f:4d:d1:9b:05:f9:3d:c0:b5:f6:2a:42:
                    20:8f:71:dd:02:7c:a6:6e:46:04:87:39:ba:b7:ac:
                    26:a4:76:32:36:8a:a0:07:ba:82:5e:eb:39:b3:3f:
                    26:7e:d6:de:f2:94:b6:04:19:a7:69:2b:45:e1:c4:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9F:CB:9D:AF:2E:14:2F:42:BD:FD:D4:FD:62:8F:C6:8F:CA:3C:16
            X509v3 Authority Key Identifier:
                keyid:62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/3134332e302e3132302e302f32322d3234203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:0a:80:cb:00:00:c1:69:af:99:2c:b6:8b:01:be:16:0e:
         aa:af:73:9c:40:f6:b7:8c:79:d5:4c:59:d7:d0:d4:a6:57:39:
         94:19:db:ee:d5:23:eb:ed:ac:26:18:37:06:27:a0:65:69:1b:
         17:66:8f:1b:8b:d1:3d:dd:90:ed:4b:b3:75:39:bd:af:77:2d:
         c7:97:e7:68:77:61:71:d2:26:29:01:d5:66:fc:e0:18:ab:c9:
         a4:27:b2:f2:27:bb:ef:70:8f:2f:1f:1c:a1:37:b0:7f:19:82:
         3e:b0:4a:72:1e:da:51:5d:57:83:75:1d:8c:07:c8:ee:40:b1:
         21:0f:a3:88:02:27:9c:9f:ab:94:96:e2:54:40:d9:14:4c:56:
         d5:63:39:1c:0c:d2:11:b2:f1:42:a5:e5:2c:93:5b:d0:de:22:
         8c:9c:d6:d0:5d:6e:10:a4:55:83:81:19:c4:69:c2:f6:2f:67:
         34:66:2e:12:14:cb:a4:94:47:e5:f5:81:c5:0d:d7:8c:f5:95:
         9b:c4:0c:5a:4a:20:a6:0a:d1:cf:c5:e4:f7:dd:f1:3e:c8:e3:
         57:af:88:ca:de:79:f7:90:c8:6b:b5:cc:ba:c5:22:99:64:5f:
         36:11:7e:98:d1:2e:27:9b:da:8c:d0:eb:f1:32:07:17:b8:aa:
         97:c3:c4:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBDE9TqAS5+PrabeNx1lsjBG+f14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI2NTAwOUY5M0NDNkMyNkMwMEZEMUQ2RkVGRUI4MDEw
QTBCREY5ODAeFw0yMzExMTgwNDE0MTFaFw0yNDExMTYwNDE5MTFaMDMxMTAvBgNV
BAMTKDE4OUZDQjlEQUYyRTE0MkY0MkJERkRENEZENjI4RkM2OEZDQTNDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraZC7CJHTn4mSU5iEIt260zWT
LrbtRxzB3rAXAqhGutUBTXM/DZ+ELS/QyJ6CWgdRMMy3EFyn8RM2ejUce+Bw0nB4
PaUyNim5CyHr9biilLwFztVoRS7AsIb0/CRWRJpQFrPeUjFlmuYBHffrb0j407ha
OmSbmj366d2qEXUqaLKwLq3UlxDCXR9rmgsz0xQ9vyk8RK2KovV/DAACuTUPYaek
RhA5CnyGwLYce+RVx+MuMAHMxCP7jt09zi0sYXdvKWS3FJ9N0ZsF+T3AtfYqQiCP
cd0CfKZuRgSHObq3rCakdjI2iqAHuoJe6zmzPyZ+1t7ylLYEGadpK0XhxKKHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGJ/Lna8uFC9Cvf3U/WKPxo/KPBYwHwYDVR0j
BBgwFoAUYmUAn5PMbCbAD9HW/v64AQoL35gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4
WlcvMC82MjY1MDA5RjkzQ0M2QzI2QzAwRkQxRDZGRUZFQjgwMTBBMEJERjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYyNjUwMDlGOTNDQzZDMjZD
MDBGRDFENkZFRkVCODAxMEEwQkRGOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJaMUplTmNjb243ZHFTcVZRUnZKRm96RzdtREJVZTNEb1JNRlkxTTNReFpXLzAv
MzEzNDMzMmUzMDJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwB4MA0GCSqGSIb3DQEBCwUAA4IBAQBgsAqAywAA
wWmvmSy2iwG+Fg6qr3OcQPa3jHnVTFnX0NSmVzmUGdvu1SPr7awmGDcGJ6BlaRsX
Zo8bi9E93ZDtS7N1Ob2vdy3Hl+dod2Fx0iYpAdVm/OAYq8mkJ7LyJ7vvcI8vHxyh
N7B/GYI+sEpyHtpRXVeDdR2MB8juQLEhD6OIAiecn6uUluJUQNkUTFbVYzkcDNIR
svFCpeUsk1vQ3iKMnNbQXW4QpFWDgRnEacL2L2c0Zi4SFMuklEfl9YHFDdeM9ZWb
xAxaSiCmCtHPxeT33fE+yONXr4jK3nn3kMhrtcy6xSKZZF82EX6Y0S4nm9qM0Ovx
MgcXuKqXw8TD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org