Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File:                     3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          98zLpGNXiwW6O1EPmamsYJXHWES7LpRDYjMPUoLYwcs=
Subject key identifier:   70:21:E9:D7:CF:91:8C:E9:A6:36:80:55:0B:22:A5:32:6B:97:8D:61
Certificate issuer:       /CN=543EAEA9D1F4201E7F2216F8B72D16BC14FC1577
Certificate serial:       5F0D5330BF8249833AC2A735A00F590473741077
Authority key identifier: 54:3E:AE:A9:D1:F4:20:1E:7F:22:16:F8:B7:2D:16:BC:14:FC:15:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time:             Thu 03 Aug 2023 19:29:35 +0000
ROA not before:           Thu 03 Aug 2023 19:24:35 +0000
ROA not after:            Thu 01 Aug 2024 19:29:35 +0000
asID:                     262675
IP address blocks:        186.233.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0d:53:30:bf:82:49:83:3a:c2:a7:35:a0:0f:59:04:73:74:10:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543EAEA9D1F4201E7F2216F8B72D16BC14FC1577
        Validity
            Not Before: Aug  3 19:24:35 2023 GMT
            Not After : Aug  1 19:29:35 2024 GMT
        Subject: CN=7021E9D7CF918CE9A63680550B22A5326B978D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:35:03:41:f0:6b:fa:71:99:8f:a2:64:40:
                    a4:ae:31:e3:10:f8:2f:91:42:4e:c2:08:e9:b9:37:
                    b3:8e:f2:99:29:42:6b:ec:49:93:49:76:40:90:df:
                    24:4d:ac:61:d4:f9:68:2e:57:e4:63:4d:64:9f:dc:
                    bd:18:37:ed:6f:5e:cf:b6:0e:11:89:9e:fc:de:67:
                    01:05:5a:94:b6:1c:8e:1b:d7:93:57:58:31:18:21:
                    3b:74:bd:1c:ef:be:8e:ce:ee:b5:7f:67:91:e6:bf:
                    cb:c9:e8:07:1f:4d:d9:51:96:7d:d5:78:28:d7:67:
                    ed:82:cd:54:c5:f7:2c:af:e9:13:2b:f2:9c:38:fd:
                    b5:01:97:ef:00:b9:b7:d6:09:de:8e:1b:2f:4c:45:
                    6c:bd:b5:cf:2a:29:f9:d3:5c:11:48:77:fe:b1:bf:
                    0b:4e:71:5a:13:db:02:9d:fd:bc:e9:25:61:4a:39:
                    ba:a8:e1:d1:87:ef:46:37:77:f8:56:1f:7d:16:53:
                    d8:d5:dd:71:08:32:48:cf:9e:df:08:e2:f8:00:ca:
                    32:84:15:b1:6a:e9:64:3a:b6:e8:ca:36:67:4d:9f:
                    95:73:d5:5d:55:e8:18:f8:a0:5f:b0:52:87:a4:d0:
                    71:04:c7:59:2d:f6:31:cf:87:b1:e2:4f:ad:06:06:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:E9:D7:CF:91:8C:E9:A6:36:80:55:0B:22:A5:32:6B:97:8D:61
            X509v3 Authority Key Identifier:
                keyid:54:3E:AE:A9:D1:F4:20:1E:7F:22:16:F8:B7:2D:16:BC:14:FC:15:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/543EAEA9D1F4201E7F2216F8B72D16BC14FC1577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:d3:f1:de:1b:aa:19:95:4e:fb:14:5e:53:4e:12:19:d3:
         6e:81:18:2a:93:4a:ca:41:2e:96:a0:a4:72:34:77:1b:18:ed:
         1e:63:04:66:4f:fb:f8:6c:9c:28:b2:8d:b9:65:10:20:40:31:
         4a:5a:0a:b0:2a:8c:ba:16:87:34:fd:2c:58:5e:de:09:6c:81:
         5e:ed:cd:c0:f2:4c:44:8c:9d:df:af:d9:32:ad:2f:85:09:f1:
         40:cd:00:1f:b9:38:c5:c6:a2:b4:20:de:92:ca:30:c9:4c:87:
         d0:53:0f:ec:f4:68:a4:c5:c3:1e:08:3a:17:8a:f1:22:c0:bf:
         b2:2c:22:f3:40:54:cb:2e:ab:52:cd:c7:f3:e4:85:1f:a6:a3:
         2b:7e:7a:f8:e2:a9:3c:3c:51:be:e1:b0:a6:e8:3a:6c:98:51:
         d9:73:fe:37:a6:3f:4c:fc:27:06:89:82:5e:8e:79:70:8a:58:
         8d:3e:29:58:36:07:e4:b3:78:1a:d3:de:0c:32:e4:e4:c3:37:
         b6:c9:49:92:ec:13:52:7b:76:04:0f:c0:69:a3:c7:1c:b9:61:
         21:16:82:79:0c:71:f5:06:9b:5c:f6:3d:3c:c6:bc:bd:4d:bc:
         a4:9c:39:49:e3:9a:40:71:ed:7e:00:16:cd:e4:fd:f7:2e:58:
         72:84:da:92
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXw1TML+CSYM6wqc1oA9ZBHN0EHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQzRUFFQTlEMUY0MjAxRTdGMjIxNkY4QjcyRDE2QkMx
NEZDMTU3NzAeFw0yMzA4MDMxOTI0MzVaFw0yNDA4MDExOTI5MzVaMDMxMTAvBgNV
BAMTKDcwMjFFOUQ3Q0Y5MThDRTlBNjM2ODA1NTBCMjJBNTMyNkI5NzhENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfzUDQfBr+nGZj6JkQKSuMeMQ
+C+RQk7CCOm5N7OO8pkpQmvsSZNJdkCQ3yRNrGHU+WguV+RjTWSf3L0YN+1vXs+2
DhGJnvzeZwEFWpS2HI4b15NXWDEYITt0vRzvvo7O7rV/Z5Hmv8vJ6AcfTdlRln3V
eCjXZ+2CzVTF9yyv6RMr8pw4/bUBl+8AubfWCd6OGy9MRWy9tc8qKfnTXBFId/6x
vwtOcVoT2wKd/bzpJWFKObqo4dGH70Y3d/hWH30WU9jV3XEIMkjPnt8I4vgAyjKE
FbFq6WQ6tujKNmdNn5Vz1V1V6Bj4oF+wUoek0HEEx1kt9jHPh7HiT60GBmTPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcCHp18+RjOmmNoBVCyKlMmuXjWEwHwYDVR0j
BBgwFoAUVD6uqdH0IB5/Ihb4ty0WvBT8FXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr
dzIvMC81NDNFQUVBOUQxRjQyMDFFN0YyMjE2RjhCNzJEMTZCQzE0RkMxNTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU0M0VBRUE5RDFGNDIwMUU3
RjIyMTZGOEI3MkQxNkJDMTRGQzE1NzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1TGtkdDlTZExFWjl2NXNVRVp6dmtHTXdSVDR4QjluTVZMZmdpcmpHa3cyLzAv
MzEzODM2MmUzMjMzMzMyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrp5DANBgkqhkiG9w0BAQsFAAOCAQEAFHvT
8d4bqhmVTvsUXlNOEhnTboEYKpNKykEulqCkcjR3GxjtHmMEZk/7+GycKLKNuWUQ
IEAxSloKsCqMuhaHNP0sWF7eCWyBXu3NwPJMRIyd36/ZMq0vhQnxQM0AH7k4xcai
tCDeksowyUyH0FMP7PRopMXDHgg6F4rxIsC/siwi80BUyy6rUs3H8+SFH6ajK356
+OKpPDxRvuGwpug6bJhR2XP+N6Y/TPwnBomCXo55cIpYjT4pWDYH5LN4GtPeDDLk
5MM3tslJkuwTUnt2BA/AaaPHHLlhIRaCeQxx9QabXPY9PMa8vU28pJw5SeOaQHHt
fgAWzeT99y5YcoTakg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org