Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32332d3233203d3e203631383539.roa
File:                     3230312e3134392e3131362e302f32332d3233203d3e203631383539.roa (raw, json)
Hash identifier:          qS9Wlj1Iq3rGK6JLBQsjLNlLWqbiQ2CiU3hhoBk9AWs=
Subject key identifier:   F0:DC:07:72:EB:E6:E0:22:4F:DD:80:C1:65:17:D0:53:28:40:25:A0
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       232D09E83A907ECB58EAE4922DECD2362E427EDD
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32332d3233203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:41:45 +0000
ROA not before:           Wed 07 Jun 2023 13:36:45 +0000
ROA not after:            Wed 05 Jun 2024 13:41:45 +0000
asID:                     61859
IP address blocks:        201.149.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:09:e8:3a:90:7e:cb:58:ea:e4:92:2d:ec:d2:36:2e:42:7e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:36:45 2023 GMT
            Not After : Jun  5 13:41:45 2024 GMT
        Subject: CN=F0DC0772EBE6E0224FDD80C16517D053284025A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:46:15:6e:e0:dd:d1:6b:4e:83:ea:7b:d7:
                    bb:e3:44:43:40:c4:28:33:e8:2b:1e:8f:44:e4:4c:
                    d8:c9:13:2b:96:72:70:24:61:ac:b2:39:5d:9c:9c:
                    53:a6:f5:9a:3d:80:75:38:62:7e:18:0f:e6:85:4d:
                    c4:1a:36:58:6a:5b:97:96:91:ab:e8:a0:a7:bf:a3:
                    ec:a6:ff:2e:57:07:5b:f2:83:76:b1:90:d0:7e:d1:
                    3e:b9:24:0f:38:e2:ab:40:7c:06:4e:f2:3b:7c:bb:
                    7a:b7:4a:8b:e2:1e:ca:2a:6d:39:06:cd:6b:44:23:
                    67:af:e0:d5:7c:57:f5:94:e4:46:a1:c3:fe:69:d7:
                    ab:09:03:6f:7c:dd:7b:cf:15:5a:09:74:a9:f1:71:
                    0d:f7:d1:b9:20:13:44:e2:7b:a5:6d:0d:1c:48:aa:
                    43:e8:95:29:e6:d5:90:f7:59:a1:2f:bf:7c:1e:27:
                    cd:58:da:60:db:42:85:f5:ff:ac:db:80:66:a5:80:
                    61:e0:84:2f:bc:66:96:4b:5e:95:41:05:ab:f3:f3:
                    14:37:14:9a:c7:d2:ca:2a:a4:f6:97:c1:71:95:0e:
                    ef:1c:0d:2b:07:80:16:c0:c4:5c:70:3b:ec:03:3c:
                    52:9a:33:62:89:69:0e:ee:c1:b8:f4:f3:76:82:88:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:07:72:EB:E6:E0:22:4F:DD:80:C1:65:17:D0:53:28:40:25:A0
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131362e302f32332d3233203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:98:e3:1b:8a:c1:94:b5:8d:47:17:1e:86:e5:1c:49:2a:5b:
         f0:05:a6:5e:96:a4:7d:59:bb:56:4c:b4:55:c5:65:aa:ee:68:
         89:92:0a:ed:6f:d8:b3:94:b4:43:ec:95:f4:89:67:1e:ff:e0:
         7b:cf:f6:cc:0f:70:c1:be:51:83:f3:b2:c0:56:93:51:aa:63:
         da:3a:8d:b5:66:17:7a:0f:6a:39:a4:9d:f6:b2:83:ea:40:f6:
         24:15:36:b4:d3:88:79:ec:91:cf:5f:da:a9:10:2d:84:c6:97:
         6d:4d:42:0e:98:bf:7e:a5:6d:39:4c:f4:10:3c:e5:db:94:51:
         14:8c:a6:f0:13:6d:02:d5:ce:50:39:d0:a2:3d:16:5f:59:23:
         41:5c:9b:cc:f3:a0:35:18:68:c6:54:64:70:18:70:ef:b1:d2:
         33:78:2d:ef:e0:6a:25:64:d6:9f:ee:15:3d:13:1e:58:02:ef:
         f1:f3:e9:b5:6a:7a:2a:2b:68:8d:98:93:49:10:e4:1f:b1:d4:
         e9:cc:28:97:cd:0f:62:9d:0d:e6:d9:02:7d:b4:d8:c4:45:ef:
         a8:3c:c6:8c:38:5b:cc:25:92:49:9c:7d:39:d6:14:fa:31:fe:
         14:ab:a2:24:ac:0b:5e:b7:42:27:a3:4d:89:66:0d:a3:7f:0f:
         1f:e7:e5:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIy0J6DqQfstY6uSSLezSNi5Cft0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQUQwMkRENUNDRkUxQ0QyNDlDNjE3NzMwRUY0ODc4
QjUxNjMzNDAeFw0yMzA2MDcxMzM2NDVaFw0yNDA2MDUxMzQxNDVaMDMxMTAvBgNV
BAMTKEYwREMwNzcyRUJFNkUwMjI0RkREODBDMTY1MTdEMDUzMjg0MDI1QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HUYVbuDd0WtOg+p717vjRENA
xCgz6Csej0TkTNjJEyuWcnAkYayyOV2cnFOm9Zo9gHU4Yn4YD+aFTcQaNlhqW5eW
kavooKe/o+ym/y5XB1vyg3axkNB+0T65JA844qtAfAZO8jt8u3q3SoviHsoqbTkG
zWtEI2ev4NV8V/WU5Eahw/5p16sJA2983XvPFVoJdKnxcQ330bkgE0Tie6VtDRxI
qkPolSnm1ZD3WaEvv3weJ81Y2mDbQoX1/6zbgGalgGHghC+8ZpZLXpVBBavz8xQ3
FJrH0soqpPaXwXGVDu8cDSsHgBbAxFxwO+wDPFKaM2KJaQ7uwbj083aCiFdTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8NwHcuvm4CJP3YDBZRfQUyhAJaAwHwYDVR0j
BBgwFoAUSjrQLdXM/hzSScYXcw70h4tRYzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRlTXI4NVlQZUU3UE5DRldxa0E2UWt6dHk0eWRaRjMxTWVSMVdCNVVq
R1AvMC80QTNBRDAyREQ1Q0NGRTFDRDI0OUM2MTc3MzBFRjQ4NzhCNTE2MzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBM0FEMDJERDVDQ0ZFMUNE
MjQ5QzYxNzczMEVGNDg3OEI1MTYzMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUZU1yODVZUGVFN1BOQ0ZXcWtBNlFrenR5NHlkWkYzMU1lUjFXQjVVakdQLzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJlXQwDQYJKoZIhvcNAQELBQADggEBABiY4xuK
wZS1jUcXHoblHEkqW/AFpl6WpH1Zu1ZMtFXFZaruaImSCu1v2LOUtEPslfSJZx7/
4HvP9swPcMG+UYPzssBWk1GqY9o6jbVmF3oPajmknfayg+pA9iQVNrTTiHnskc9f
2qkQLYTGl21NQg6Yv36lbTlM9BA85duUURSMpvATbQLVzlA50KI9Fl9ZI0Fcm8zz
oDUYaMZUZHAYcO+x0jN4Le/gaiVk1p/uFT0THlgC7/Hz6bVqeioraI2Yk0kQ5B+x
1OnMKJfND2KdDebZAn202MRF76g8xow4W8wlkkmcfTnWFPox/hSroiSsC163Qiej
TYlmDaN/Dx/n5dw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org