Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/3134332e3230382e37322e302f32342d3234203d3e20323635313338.roa
File:                     3134332e3230382e37322e302f32342d3234203d3e20323635313338.roa (raw, json)
Hash identifier:          s3DAJjCJA7f233Zh+A4J3t/QHbCfiLIqvZyjBuJ4uNM=
Subject key identifier:   25:FA:BB:C3:75:81:01:C4:11:7D:E6:BC:32:C8:A0:6C:48:BA:51:C4
Certificate issuer:       /CN=B6CD24F925D5B02BA9586C5598202D5DE275A1ED
Certificate serial:       3DA2538F5C91BE0E905385E3B20D9389E5B3BC42
Authority key identifier: B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/3134332e3230382e37322e302f32342d3234203d3e20323635313338.roa
Signing time:             Fri 02 Jun 2023 17:22:44 +0000
ROA not before:           Fri 02 Jun 2023 17:17:44 +0000
ROA not after:            Fri 31 May 2024 17:22:44 +0000
asID:                     265138
IP address blocks:        143.208.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:53:8f:5c:91:be:0e:90:53:85:e3:b2:0d:93:89:e5:b3:bc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CD24F925D5B02BA9586C5598202D5DE275A1ED
        Validity
            Not Before: Jun  2 17:17:44 2023 GMT
            Not After : May 31 17:22:44 2024 GMT
        Subject: CN=25FABBC3758101C4117DE6BC32C8A06C48BA51C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:f3:16:22:e9:72:82:c3:06:cb:f6:a9:04:
                    8a:7c:70:06:c0:5d:27:e0:31:14:ba:5d:aa:b2:e2:
                    06:f1:c9:c2:93:5e:b3:26:8a:d5:18:ac:b3:5f:c1:
                    41:91:73:de:4c:9d:ee:ec:02:a1:c2:d3:53:37:cf:
                    df:f7:46:25:2f:78:ad:05:c8:c2:fc:ff:a0:95:68:
                    43:de:f7:ad:5e:cd:f5:14:fe:aa:56:dc:d2:1b:41:
                    43:1c:91:0c:40:da:e7:1a:cc:99:29:d2:2d:c5:be:
                    5f:b5:02:7b:1d:6b:3c:cc:89:3d:ab:f9:0c:02:45:
                    18:f3:fb:e8:64:44:61:70:ec:35:a8:b1:f4:d1:7c:
                    fa:3f:04:af:30:61:d9:5b:48:9e:6b:63:fd:48:c1:
                    b9:59:46:f0:2c:c8:80:6c:17:8b:a1:36:cb:da:f0:
                    b2:c3:87:34:c4:03:3d:fe:8a:e4:50:59:97:f0:9b:
                    a4:9f:18:1b:90:f0:30:36:7b:9e:bc:8d:d9:b1:52:
                    c2:26:d9:ce:71:d7:26:ab:0e:2b:4e:00:f0:6a:ff:
                    19:5d:52:f7:ce:ca:0d:5c:c7:39:db:fe:99:30:a9:
                    1a:a2:77:b1:8e:3a:17:de:17:77:c4:29:66:13:09:
                    0b:15:92:ee:22:80:04:70:ce:9f:f3:b7:a2:f5:48:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FA:BB:C3:75:81:01:C4:11:7D:E6:BC:32:C8:A0:6C:48:BA:51:C4
            X509v3 Authority Key Identifier:
                keyid:B6:CD:24:F9:25:D5:B0:2B:A9:58:6C:55:98:20:2D:5D:E2:75:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6CD24F925D5B02BA9586C5598202D5DE275A1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/3134332e3230382e37322e302f32342d3234203d3e20323635313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:b5:c2:8d:04:58:43:de:e6:02:31:de:b0:4f:6f:8a:56:
         87:33:a1:54:30:b8:2b:80:5d:e1:90:99:0a:28:c3:a8:22:15:
         38:d6:80:37:22:3d:9b:25:8c:f2:03:b8:93:1f:80:8b:60:d2:
         49:63:82:90:d0:32:14:f9:f4:d3:ac:86:c6:9c:52:46:be:81:
         19:e6:fd:26:44:db:fc:96:7f:d7:ea:21:2b:6e:e0:35:a2:94:
         e7:30:75:1a:6a:54:0e:0e:b0:f8:43:b0:3d:82:4b:ab:b6:53:
         ba:5d:de:73:88:89:b2:9c:0c:3c:b0:b2:5d:a7:0c:01:f8:e5:
         b5:dc:b3:01:5a:07:55:83:ba:75:81:83:63:e7:f0:a3:e2:11:
         1b:51:d9:b2:67:42:3a:59:59:da:09:d4:84:b4:17:26:2e:88:
         c4:ba:60:ef:72:ec:ca:94:7e:45:e2:10:8a:99:43:1d:27:2b:
         29:d8:1e:84:4d:37:42:88:e6:9f:b0:39:a8:0c:68:96:38:60:
         39:b3:9b:96:85:0f:5c:76:fc:f9:bb:06:36:4f:a3:c0:49:af:
         34:5b:cb:d1:6e:9e:78:9e:16:fe:ef:4d:82:8f:aa:60:f2:ca:
         70:59:8c:89:96:99:65:3c:cf:64:33:55:a4:14:40:e1:a0:7c:
         1f:02:1e:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPaJTj1yRvg6QU4Xjsg2TieWzvEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZDRDI0RjkyNUQ1QjAyQkE5NTg2QzU1OTgyMDJENURF
Mjc1QTFFRDAeFw0yMzA2MDIxNzE3NDRaFw0yNDA1MzExNzIyNDRaMDMxMTAvBgNV
BAMTKDI1RkFCQkMzNzU4MTAxQzQxMTdERTZCQzMyQzhBMDZDNDhCQTUxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yvMWIulygsMGy/apBIp8cAbA
XSfgMRS6Xaqy4gbxycKTXrMmitUYrLNfwUGRc95Mne7sAqHC01M3z9/3RiUveK0F
yML8/6CVaEPe961ezfUU/qpW3NIbQUMckQxA2ucazJkp0i3Fvl+1AnsdazzMiT2r
+QwCRRjz++hkRGFw7DWosfTRfPo/BK8wYdlbSJ5rY/1IwblZRvAsyIBsF4uhNsva
8LLDhzTEAz3+iuRQWZfwm6SfGBuQ8DA2e568jdmxUsIm2c5x1yarDitOAPBq/xld
UvfOyg1cxznb/pkwqRqid7GOOhfeF3fEKWYTCQsVku4igARwzp/zt6L1SPznAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJfq7w3WBAcQRfea8MsigbEi6UcQwHwYDVR0j
BBgwFoAUts0k+SXVsCupWGxVmCAtXeJ1oe0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtRMW5kcWN6QnlvWGhXcjJ2dlduZnp4TXV5QVp3cFJlaDZSY1VlTU12
ZUEvMC9CNkNEMjRGOTI1RDVCMDJCQTk1ODZDNTU5ODIwMkQ1REUyNzVBMUVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2Q0QyNEY5MjVENUIwMkJB
OTU4NkM1NTk4MjAyRDVERTI3NUExRUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrUTFuZHFjekJ5b1hoV3IydnZXbmZ6eE11eUFad3BSZWg2UmNVZU1NdmVBLzAv
MzEzNDMzMmUzMjMwMzgyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACP0EgwDQYJKoZIhvcNAQELBQADggEBAELztcKN
BFhD3uYCMd6wT2+KVoczoVQwuCuAXeGQmQoow6giFTjWgDciPZsljPIDuJMfgItg
0kljgpDQMhT59NOshsacUka+gRnm/SZE2/yWf9fqIStu4DWilOcwdRpqVA4OsPhD
sD2CS6u2U7pd3nOIibKcDDywsl2nDAH45bXcswFaB1WDunWBg2Pn8KPiERtR2bJn
QjpZWdoJ1IS0FyYuiMS6YO9y7MqUfkXiEIqZQx0nKynYHoRNN0KI5p+wOagMaJY4
YDmzm5aFD1x2/Pm7BjZPo8BJrzRby9FunnieFv7vTYKPqmDyynBZjImWmWU8z2Qz
VaQUQOGgfB8CHlg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org