Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3134332e302e3131322e302f32322d3234203d3e20323632393935.roa
File:                     3134332e302e3131322e302f32322d3234203d3e20323632393935.roa (raw, json)
Hash identifier:          sGYSc9wRjEJkTxFJmXky5K4nnpv1QMsYbolo+MjHbnA=
Subject key identifier:   3C:45:8C:BD:A4:FC:B1:0F:2E:23:D9:3F:4E:3B:8C:2B:AC:D6:E7:E8
Certificate issuer:       /CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
Certificate serial:       6BBCA2299B38D06003F310189E90FF37CE25A8C8
Authority key identifier: 47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3134332e302e3131322e302f32322d3234203d3e20323632393935.roa
Signing time:             Sat 05 Aug 2023 16:00:00 +0000
ROA not before:           Sat 05 Aug 2023 15:55:00 +0000
ROA not after:            Mon 05 Aug 2024 16:00:00 +0000
asID:                     262995
IP address blocks:        143.0.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bc:a2:29:9b:38:d0:60:03:f3:10:18:9e:90:ff:37:ce:25:a8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
        Validity
            Not Before: Aug  5 15:55:00 2023 GMT
            Not After : Aug  5 16:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:2f:a8:fd:46:a5:6d:6d:dc:81:1d:1f:aa:
                    74:38:ee:81:b1:8b:b1:07:13:5f:d5:8d:92:fc:93:
                    de:1a:59:05:63:c2:e4:b1:ab:c3:87:77:d3:2b:90:
                    70:96:ae:b6:3a:da:50:10:2b:44:12:9e:fe:82:2b:
                    de:56:45:c6:c2:49:45:75:5d:05:81:1f:6a:11:09:
                    50:b9:c4:73:63:93:8d:00:4d:61:97:98:a6:9d:62:
                    a2:4c:51:86:e6:13:18:a4:71:61:1b:ba:e9:24:a5:
                    0b:10:3d:8b:4e:71:d9:63:fa:cb:06:07:a4:34:23:
                    27:88:4f:0d:05:dd:9f:a9:54:37:1d:da:fb:45:af:
                    c7:7b:99:93:9a:a8:15:db:aa:39:16:7b:ca:bd:57:
                    e1:4c:af:88:5c:52:c8:14:36:50:78:b0:00:7f:7c:
                    e8:e6:12:8e:55:33:f4:73:39:fd:40:97:35:dd:ca:
                    c1:08:9e:30:a8:d5:85:e5:20:c6:57:07:14:b9:a0:
                    6c:37:25:c2:c1:be:3a:e7:cc:3a:08:6b:e8:81:dd:
                    d6:18:6d:0b:bf:c9:d5:a8:e7:c5:8b:3b:c2:9f:9b:
                    ea:e8:08:0a:f9:a3:83:0c:40:d9:28:c4:10:bc:22:
                    76:e6:71:ce:1e:cf:b8:3a:36:a2:18:3d:35:fc:6d:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:8C:BD:A4:FC:B1:0F:2E:23:D9:3F:4E:3B:8C:2B:AC:D6:E7:E8
            X509v3 Authority Key Identifier:
                keyid:47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3134332e302e3131322e302f32322d3234203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:c8:06:b9:69:e3:0e:46:ba:b3:e8:34:44:d6:42:85:cf:
         0c:c5:aa:69:5a:9e:fc:ec:97:df:0e:1d:e1:27:f2:fb:87:4f:
         71:c1:77:34:28:20:22:48:61:7f:77:3d:6f:ff:40:fb:20:3f:
         19:5e:08:f3:be:d0:8e:44:e7:c8:b2:dd:9e:ad:30:84:a7:14:
         ce:6b:a5:f7:f9:29:2e:85:90:7a:f4:9b:96:f3:b1:a2:46:e6:
         6a:be:9f:f4:3b:58:e3:b1:a5:ce:a5:0e:2a:e0:57:c9:67:d4:
         15:80:d4:a6:b5:7b:90:9d:39:d5:0f:97:9c:c9:d0:a3:b0:59:
         a4:5f:0a:25:75:f8:83:30:98:ac:af:41:4d:80:ca:4e:4a:52:
         1d:85:ad:7d:c4:9c:70:87:0d:bb:d7:78:fd:e8:f4:66:bd:d4:
         f0:f0:f5:d6:e7:a2:9c:a6:41:46:43:52:5d:78:07:13:5f:49:
         58:e8:c9:30:74:99:1b:cf:28:5e:33:b4:90:e9:ee:6c:3f:35:
         2b:05:1b:0f:ee:c9:82:e7:35:6e:54:26:03:82:ec:3d:71:34:
         aa:0e:6f:bd:93:75:aa:d0:32:e9:a9:8c:44:7e:7c:ce:97:6d:
         92:06:34:f4:1b:30:ed:ba:74:e7:ba:39:86:d5:ac:78:d1:f3:
         5f:33:bf:7b
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUa7yiKZs40GAD8xAYnpD/N84lqMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1MDZDQkNEN0M5NDY4Q0ZERjVDMkJCOUIyMzk0NkYz
NDBFM0VEMzAeFw0yMzA4MDUxNTU1MDBaFw0yNDA4MDUxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkU3RjJGQThGRDQ2QTU2RDZE
REM4MTFEMUZBQTc0MzhFRTgxQjE4QkIxMDcxMzVGRDU4RDkyRkM5M0RFMUE1OTA1
NjNDMkU0QjFBQkMzODc3N0QzMkI5MDcwOTZBRUI2M0FEQTUwMTAyQjQ0MTI5RUZF
ODIyQkRFNTY0NUM2QzI0OTQ1NzU1RDA1ODExRjZBMTEwOTUwQjlDNDczNjM5MzhE
MDA0RDYxOTc5OEE2OUQ2MkEyNEM1MTg2RTYxMzE4QTQ3MTYxMUJCQUU5MjRBNTBC
MTAzRDhCNEU3MUQ5NjNGQUNCMDYwN0E0MzQyMzI3ODg0RjBEMDVERDlGQTk1NDM3
MUREQUZCNDVBRkM3N0I5OTkzOUFBODE1REJBQTM5MTY3QkNBQkQ1N0UxNENBRjg4
NUM1MkM4MTQzNjUwNzhCMDAwN0Y3Q0U4RTYxMjhFNTUzM0Y0NzMzOUZENDA5NzM1
RERDQUMxMDg5RTMwQThENTg1RTUyMEM2NTcwNzE0QjlBMDZDMzcyNUMyQzFCRTNB
RTdDQzNBMDg2QkU4ODFEREQ2MTg2RDBCQkZDOUQ1QThFN0M1OEIzQkMyOUY5QkVB
RTgwODBBRjlBMzgzMEM0MEQ5MjhDNDEwQkMyMjc2RTY3MUNFMUVDRkI4M0EzNkEy
MTgzRDM1RkM2RDRCNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvn8vqP1GpW1t3IEdH6p0OO6BsYuxBxNf1Y2S/JPeGlkFY8LksavD
h3fTK5Bwlq62OtpQECtEEp7+giveVkXGwklFdV0FgR9qEQlQucRzY5ONAE1hl5im
nWKiTFGG5hMYpHFhG7rpJKULED2LTnHZY/rLBgekNCMniE8NBd2fqVQ3Hdr7Ra/H
e5mTmqgV26o5FnvKvVfhTK+IXFLIFDZQeLAAf3zo5hKOVTP0czn9QJc13crBCJ4w
qNWF5SDGVwcUuaBsNyXCwb4658w6CGvogd3WGG0Lv8nVqOfFizvCn5vq6AgK+aOD
DEDZKMQQvCJ25nHOHs+4OjaiGD01/G1LcQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FDxFjL2k/LEPLiPZP047jCus1ufoMB8GA1UdIwQYMBaAFEdQbLzXyUaM/fXCu5sj
lG80Dj7TMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJwTFc0Qk13bkhuUDli
V0VVMkc5MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzAvNDc1MDZDQkNEN0M5NDY4
Q0ZERjVDMkJCOUIyMzk0NkYzNDBFM0VEMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NzUwNkNCQ0Q3Qzk0NjhDRkRGNUMyQkI5QjIzOTQ2RjM0MEUz
RUQzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ycExXNEJNd25IblA5YldFVTJH
OTJZb3lhS0JkalRaekZRTTZ5aEhUOW5KNC8wLzMxMzQzMzJlMzAyZTMxMzEzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM5MzkzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo8A
cDANBgkqhkiG9w0BAQsFAAOCAQEAfTDIBrlp4w5GurPoNETWQoXPDMWqaVqe/OyX
3w4d4Sfy+4dPccF3NCggIkhhf3c9b/9A+yA/GV4I877QjkTnyLLdnq0whKcUzmul
9/kpLoWQevSblvOxokbmar6f9DtY47GlzqUOKuBXyWfUFYDUprV7kJ051Q+XnMnQ
o7BZpF8KJXX4gzCYrK9BTYDKTkpSHYWtfcSccIcNu9d4/ej0Zr3U8PD11ueinKZB
RkNSXXgHE19JWOjJMHSZG88oXjO0kOnubD81KwUbD+7Jguc1blQmA4LsPXE0qg5v
vZN1qtAy6amMRH58zpdtkgY09Bsw7bp057o5htWseNHzXzO/ew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org