Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
File:                     3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          uqDpzkZSQf32rDO+XD0H94pQ2zd9d8RlVGC1veEIQlQ=
Subject key identifier:   B7:CE:58:BF:1D:45:2C:73:10:EA:C5:49:0B:67:25:F6:9A:93:67:FF
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       3256B703A3946333A5FE7BE807AF5D205386E42E
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:50 +0000
ROA not before:           Mon 08 Apr 2024 20:01:50 +0000
ROA not after:            Mon 07 Apr 2025 20:06:50 +0000
asID:                     28270
IP address blocks:        143.255.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:56:b7:03:a3:94:63:33:a5:fe:7b:e8:07:af:5d:20:53:86:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:50 2024 GMT
            Not After : Apr  7 20:06:50 2025 GMT
        Subject: CN=B7CE58BF1D452C7310EAC5490B6725F69A9367FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:45:d6:f0:68:1b:14:7e:56:14:a3:6e:82:
                    d0:04:79:5e:ab:58:15:c8:14:ff:a5:2f:e2:86:57:
                    b5:ed:fd:a2:d0:58:d5:0b:c3:46:62:a4:a1:af:bf:
                    82:d2:57:7c:81:6a:3c:c0:b4:bc:63:0a:33:0e:30:
                    c6:9b:1e:7e:14:62:a0:61:fb:b6:c8:0e:1d:2e:c7:
                    3a:43:ce:a4:db:6d:1b:dc:70:8c:e4:06:06:41:6a:
                    f5:99:b0:c9:a1:6c:dd:a0:34:a0:64:c9:8b:94:5b:
                    d9:48:ff:23:06:4e:1b:b6:f7:2e:93:c5:25:5a:eb:
                    ac:ea:13:11:5e:07:c5:a6:07:63:ba:c9:16:67:b0:
                    31:6c:5e:08:ed:9c:7d:ea:42:0c:71:c9:c5:0b:4d:
                    00:45:0a:e0:ad:30:75:ce:63:3d:4d:ea:88:82:62:
                    56:54:e4:8b:bb:1e:32:3a:5c:ad:4c:65:6d:19:b5:
                    fc:f2:f6:eb:53:32:9f:b5:65:76:ac:a9:68:9d:ef:
                    d0:19:a2:c3:ae:d6:c9:b9:a7:25:53:c2:1a:21:f1:
                    de:ae:87:b0:9d:d9:32:41:96:7d:73:21:dd:e7:69:
                    40:9a:a2:38:7f:3a:cd:f0:a5:86:77:2d:cc:f2:74:
                    b1:5d:46:37:95:54:6e:03:22:77:57:24:88:b3:4c:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:58:BF:1D:45:2C:73:10:EA:C5:49:0B:67:25:F6:9A:93:67:FF
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:58:39:0c:04:1f:cc:38:56:2a:28:3c:b8:f6:05:8d:55:5e:
         14:0f:87:e1:7b:90:e1:82:2d:96:5a:fe:00:6b:c7:02:86:65:
         08:33:6e:13:76:0e:4d:f0:3e:61:81:71:e0:0f:f8:3a:65:87:
         30:21:4d:05:dd:96:55:e4:76:86:13:34:c5:01:ba:51:19:cd:
         78:3a:b3:06:0e:9a:95:25:a6:b2:e1:fa:01:e3:d7:f5:bc:09:
         40:71:9f:29:89:e4:c6:46:fa:c2:69:6f:e6:b8:ec:4f:bd:24:
         ac:5b:03:b8:4d:ff:00:0f:9d:d8:29:42:5b:3d:59:eb:a1:e0:
         30:25:cb:d6:65:a2:d8:03:8c:38:c8:45:bc:f9:7d:39:ea:24:
         05:66:ab:fd:99:96:c3:22:95:c8:3e:ac:5c:c7:e2:fa:5a:f4:
         d6:5b:19:f3:7c:00:8d:e4:70:e4:21:f9:ce:d3:e0:7e:eb:5c:
         a3:15:c7:52:a1:c2:e1:5c:3f:61:ec:06:92:c3:3e:59:d7:eb:
         18:19:08:12:04:e3:ba:6f:e6:e3:7a:57:4f:31:c0:0c:3d:f2:
         88:a2:7d:43:f5:d4:ed:00:10:a9:91:ab:f5:60:50:a3:70:6f:
         bd:d0:5d:d6:dd:3e:b1:b1:6d:dc:6a:b4:0e:87:bf:54:51:17:
         71:33:17:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMla3A6OUYzOl/nvoB69dIFOG5C4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTBaFw0yNTA0MDcyMDA2NTBaMDMxMTAvBgNV
BAMTKEI3Q0U1OEJGMUQ0NTJDNzMxMEVBQzU0OTBCNjcyNUY2OUE5MzY3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVkXW8GgbFH5WFKNugtAEeV6r
WBXIFP+lL+KGV7Xt/aLQWNULw0ZipKGvv4LSV3yBajzAtLxjCjMOMMabHn4UYqBh
+7bIDh0uxzpDzqTbbRvccIzkBgZBavWZsMmhbN2gNKBkyYuUW9lI/yMGThu29y6T
xSVa66zqExFeB8WmB2O6yRZnsDFsXgjtnH3qQgxxycULTQBFCuCtMHXOYz1N6oiC
YlZU5Iu7HjI6XK1MZW0Ztfzy9utTMp+1ZXasqWid79AZosOu1sm5pyVTwhoh8d6u
h7Cd2TJBln1zId3naUCaojh/Os3wpYZ3LczydLFdRjeVVG4DIndXJIizTOkbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt85Yvx1FLHMQ6sVJC2cl9pqTZ/8wHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP/3AwDQYJKoZIhvcNAQELBQADggEBAEBYOQwE
H8w4ViooPLj2BY1VXhQPh+F7kOGCLZZa/gBrxwKGZQgzbhN2Dk3wPmGBceAP+Dpl
hzAhTQXdllXkdoYTNMUBulEZzXg6swYOmpUlprLh+gHj1/W8CUBxnymJ5MZG+sJp
b+a47E+9JKxbA7hN/wAPndgpQls9Weuh4DAly9ZlotgDjDjIRbz5fTnqJAVmq/2Z
lsMilcg+rFzH4vpa9NZbGfN8AI3kcOQh+c7T4H7rXKMVx1KhwuFcP2HsBpLDPlnX
6xgZCBIE47pv5uN6V08xwAw98oiifUP11O0AEKmRq/VgUKNwb73QXdbdPrGxbdxq
tA6Hv1RRF3EzF0Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org