Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32322d3232203d3e203631383539.roa
File:                     3230312e3134392e3131362e302f32322d3232203d3e203631383539.roa (raw, json)
Hash identifier:          oYyQP+8fZRWkDC0/oG1pj+FyNMfOW7QBZ4hwLy8xcJQ=
Subject key identifier:   54:A6:72:A1:D6:59:C3:66:B5:9C:42:0E:3D:A8:11:DF:C5:FD:F6:61
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       6CAFF64CF0A1DA4A3CC86A0070B21EA410BCBB13
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32322d3232203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:40:51 +0000
ROA not before:           Wed 07 Jun 2023 13:35:51 +0000
ROA not after:            Wed 05 Jun 2024 13:40:51 +0000
asID:                     61859
IP address blocks:        201.149.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:af:f6:4c:f0:a1:da:4a:3c:c8:6a:00:70:b2:1e:a4:10:bc:bb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:35:51 2023 GMT
            Not After : Jun  5 13:40:51 2024 GMT
        Subject: CN=54A672A1D659C366B59C420E3DA811DFC5FDF661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:ea:a6:29:0f:b0:67:7b:ea:da:2a:8e:d4:
                    a3:f0:88:f8:82:d3:f0:40:a1:7e:7f:f0:fb:6f:d6:
                    4b:38:a1:a6:ac:93:8c:85:69:5e:44:01:1d:79:a5:
                    35:db:68:5c:63:c9:9a:c9:85:09:c0:39:ca:df:e0:
                    6e:74:02:09:62:9d:25:cc:bc:fd:25:d9:3b:cd:fe:
                    6f:8c:ef:51:ee:26:63:d4:35:95:d5:79:89:e1:ea:
                    73:ce:f2:e8:e2:cb:c0:a2:cf:d2:37:d1:97:c5:7d:
                    d2:86:27:d6:19:4f:31:ad:0b:b1:24:f6:d7:36:91:
                    37:be:c8:ae:4f:31:90:b8:a9:c8:a3:e5:9e:06:e8:
                    23:e3:e2:4e:f8:a6:25:45:79:c7:c2:58:32:56:5b:
                    45:73:ba:63:4c:e7:42:45:1a:90:d2:ea:6e:29:d1:
                    24:0b:ec:ad:1a:59:2f:03:83:68:0a:cc:5a:40:36:
                    4b:92:ec:a0:22:2a:9a:fc:c5:d3:84:e2:85:10:c6:
                    f2:4d:ea:8d:d0:fb:1f:4a:7f:98:56:3c:57:6a:c5:
                    66:e0:4c:af:21:50:e5:1a:90:02:a3:fe:cb:e4:fc:
                    a9:d8:90:f6:a1:af:6e:5b:0e:e6:91:9f:65:79:03:
                    38:08:e8:8b:43:5d:cd:2b:07:18:d4:3b:ac:11:e9:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A6:72:A1:D6:59:C3:66:B5:9C:42:0E:3D:A8:11:DF:C5:FD:F6:61
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32322d3232203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:96:de:16:e0:f7:d5:18:62:72:03:5c:2a:40:ee:d1:99:
         71:6b:55:aa:ca:fc:18:64:71:a6:93:c4:62:9f:de:a8:34:91:
         bb:2b:f3:82:be:e9:ff:50:ad:9f:e4:26:30:ff:ab:de:de:30:
         16:a1:63:3b:28:6e:58:65:50:d6:d6:31:48:61:d7:18:73:3f:
         e5:e1:a4:7d:a6:d9:6f:86:96:63:c6:96:78:7c:e9:e5:0a:ec:
         1b:59:cc:5c:97:93:ab:96:ab:00:2b:79:a4:ca:78:ed:e2:ec:
         ec:c9:16:55:65:01:56:6b:b0:26:8a:2f:cd:87:bd:3d:08:33:
         05:a1:41:33:3e:e4:a0:c3:81:7a:bb:bf:89:84:89:68:f0:a1:
         9c:40:f5:68:5e:72:5b:49:d8:6d:50:c5:a2:41:4c:2f:eb:c7:
         85:6d:64:2e:bb:6f:af:48:fa:f0:5d:ee:21:fa:9e:17:a8:be:
         6c:4c:9e:10:67:83:ec:b8:8c:4a:bd:3d:14:68:f1:55:ec:2a:
         02:5b:61:ad:71:34:48:3a:39:03:88:f6:dc:f8:ba:fd:6f:8f:
         cd:cc:25:87:32:02:20:b9:45:35:20:83:ef:c4:eb:b3:18:b9:
         fc:cc:55:3f:9c:59:41:4a:b2:6b:d1:2e:e7:05:cb:be:33:13:
         ef:53:d7:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbK/2TPCh2ko8yGoAcLIepBC8uxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQUQwMkRENUNDRkUxQ0QyNDlDNjE3NzMwRUY0ODc4
QjUxNjMzNDAeFw0yMzA2MDcxMzM1NTFaFw0yNDA2MDUxMzQwNTFaMDMxMTAvBgNV
BAMTKDU0QTY3MkExRDY1OUMzNjZCNTlDNDIwRTNEQTgxMURGQzVGREY2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqeqmKQ+wZ3vq2iqO1KPwiPiC
0/BAoX5/8Ptv1ks4oaask4yFaV5EAR15pTXbaFxjyZrJhQnAOcrf4G50AglinSXM
vP0l2TvN/m+M71HuJmPUNZXVeYnh6nPO8ujiy8Ciz9I30ZfFfdKGJ9YZTzGtC7Ek
9tc2kTe+yK5PMZC4qcij5Z4G6CPj4k74piVFecfCWDJWW0VzumNM50JFGpDS6m4p
0SQL7K0aWS8Dg2gKzFpANkuS7KAiKpr8xdOE4oUQxvJN6o3Q+x9Kf5hWPFdqxWbg
TK8hUOUakAKj/svk/KnYkPahr25bDuaRn2V5AzgI6ItDXc0rBxjUO6wR6RrpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVKZyodZZw2a1nEIOPagR38X99mEwHwYDVR0j
BBgwFoAUSjrQLdXM/hzSScYXcw70h4tRYzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRlTXI4NVlQZUU3UE5DRldxa0E2UWt6dHk0eWRaRjMxTWVSMVdCNVVq
R1AvMC80QTNBRDAyREQ1Q0NGRTFDRDI0OUM2MTc3MzBFRjQ4NzhCNTE2MzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBM0FEMDJERDVDQ0ZFMUNE
MjQ5QzYxNzczMEVGNDg3OEI1MTYzMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUZU1yODVZUGVFN1BOQ0ZXcWtBNlFrenR5NHlkWkYzMU1lUjFXQjVVakdQLzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlXQwDQYJKoZIhvcNAQELBQADggEBAEm7lt4W
4PfVGGJyA1wqQO7RmXFrVarK/BhkcaaTxGKf3qg0kbsr84K+6f9QrZ/kJjD/q97e
MBahYzsoblhlUNbWMUhh1xhzP+XhpH2m2W+GlmPGlnh86eUK7BtZzFyXk6uWqwAr
eaTKeO3i7OzJFlVlAVZrsCaKL82HvT0IMwWhQTM+5KDDgXq7v4mEiWjwoZxA9Whe
cltJ2G1QxaJBTC/rx4VtZC67b69I+vBd7iH6nheovmxMnhBng+y4jEq9PRRo8VXs
KgJbYa1xNEg6OQOI9tz4uv1vj83MJYcyAiC5RTUgg+/E67MYufzMVT+cWUFKsmvR
LucFy74zE+9T1yY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org