Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32332d3233203d3e203631383539.roa
File:                     3230312e3134392e3131382e302f32332d3233203d3e203631383539.roa (raw, json)
Hash identifier:          Y5Ph7j1LJRo8XKwe00XwVxQuFrREEDFUJSrHka8j3YM=
Subject key identifier:   86:E7:6C:AE:0A:4B:70:2C:31:4C:1E:2F:9F:AA:7F:2A:E2:64:33:31
Certificate issuer:       /CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
Certificate serial:       5F9FE9751ED4DE3C74C21D18DE131C7713EFF5E7
Authority key identifier: 4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32332d3233203d3e203631383539.roa
Signing time:             Wed 07 Jun 2023 13:42:03 +0000
ROA not before:           Wed 07 Jun 2023 13:37:03 +0000
ROA not after:            Wed 05 Jun 2024 13:42:03 +0000
asID:                     61859
IP address blocks:        201.149.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9f:e9:75:1e:d4:de:3c:74:c2:1d:18:de:13:1c:77:13:ef:f5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AD02DD5CCFE1CD249C617730EF4878B516334
        Validity
            Not Before: Jun  7 13:37:03 2023 GMT
            Not After : Jun  5 13:42:03 2024 GMT
        Subject: CN=86E76CAE0A4B702C314C1E2F9FAA7F2AE2643331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:f2:8e:ca:b5:e3:aa:58:9f:aa:f5:f7:aa:
                    8e:4c:c3:70:98:3d:ab:0d:8d:0f:c9:30:d9:27:bc:
                    59:d7:49:6a:f0:a8:0e:cd:31:c9:9c:d4:3d:3d:b4:
                    c0:d7:a0:7f:0a:bc:a5:be:52:39:db:71:dd:7e:33:
                    34:7e:85:78:7c:87:8c:fd:c5:f0:40:b1:c9:20:52:
                    91:1b:aa:69:6e:99:e9:d7:93:04:11:67:76:8a:dd:
                    23:01:93:43:31:c8:97:0a:7a:d1:9d:10:b3:1c:dd:
                    cb:cd:de:9e:04:9a:69:8a:03:cc:f5:32:1b:12:f1:
                    21:09:93:f5:b5:7d:24:d4:cf:5d:39:fb:bf:06:5f:
                    8c:fc:8c:54:36:cd:82:ad:87:d1:04:e0:0d:df:c1:
                    88:cf:7e:7b:1e:26:5b:c2:64:6a:9a:b5:63:1d:68:
                    5b:5a:20:a0:f3:b6:a8:3e:65:24:db:b6:db:20:fa:
                    b0:48:f5:9a:05:f5:d2:fe:a7:3b:69:d9:ba:4c:c7:
                    0b:bb:5b:f5:75:1b:73:e9:6e:94:ec:1b:a9:ce:ab:
                    b3:ef:98:fe:b4:ac:12:f3:fe:18:fb:57:84:a1:4a:
                    87:5e:0c:a1:30:09:08:eb:f4:b7:de:13:53:e7:ac:
                    62:e4:a3:39:8e:c3:6c:8c:e6:c8:84:da:f2:27:f2:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E7:6C:AE:0A:4B:70:2C:31:4C:1E:2F:9F:AA:7F:2A:E2:64:33:31
            X509v3 Authority Key Identifier:
                keyid:4A:3A:D0:2D:D5:CC:FE:1C:D2:49:C6:17:73:0E:F4:87:8B:51:63:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A3AD02DD5CCFE1CD249C617730EF4878B516334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TeMr85YPeE7PNCFWqkA6Qkzty4ydZF31MeR1WB5UjGP/0/3230312e3134392e3131382e302f32332d3233203d3e203631383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:49:f9:6d:ba:59:f2:c6:19:9c:26:d0:7d:d1:a2:c6:94:77:
         fd:1f:b1:b0:6a:f6:b9:a2:07:78:a2:04:cd:54:b2:7a:2d:fd:
         5a:5f:42:bb:aa:51:81:0d:8d:3d:45:b1:51:03:f5:12:2d:8d:
         3e:68:97:be:4c:e6:7e:6b:41:d0:fd:8d:43:e9:a8:c0:ba:b8:
         ce:3e:5f:f2:b9:c5:cf:98:a2:d7:c0:21:1f:07:11:27:25:7d:
         e7:9a:98:26:3a:5b:c1:29:70:06:65:6d:df:96:a8:87:7f:8f:
         61:9f:19:b4:22:7c:d9:c5:14:22:44:e4:7d:b3:41:5e:45:ac:
         f1:6d:42:35:27:ba:42:92:8d:ee:4e:d9:90:1f:cd:86:80:bf:
         ec:8f:47:f9:c6:66:c6:dd:58:9b:47:e6:8a:df:69:24:d4:47:
         73:24:17:bf:5b:5c:f2:f6:27:ec:7d:73:9f:16:13:33:e2:a7:
         6e:b3:3b:b5:fc:cf:80:4b:17:47:fe:95:b9:e5:de:7d:df:73:
         65:66:76:e4:cf:e8:14:5b:da:dc:14:9c:ff:9e:6c:13:27:8a:
         3e:3d:25:de:59:f3:3c:88:0b:ec:a9:06:9b:3c:d3:cb:21:53:
         8e:b4:e2:ad:88:63:32:62:19:8b:39:de:4c:4b:4b:c2:52:95:
         8c:e5:e9:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX5/pdR7U3jx0wh0Y3hMcdxPv9ecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQUQwMkRENUNDRkUxQ0QyNDlDNjE3NzMwRUY0ODc4
QjUxNjMzNDAeFw0yMzA2MDcxMzM3MDNaFw0yNDA2MDUxMzQyMDNaMDMxMTAvBgNV
BAMTKDg2RTc2Q0FFMEE0QjcwMkMzMTRDMUUyRjlGQUE3RjJBRTI2NDMzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfvKOyrXjqlifqvX3qo5Mw3CY
PasNjQ/JMNknvFnXSWrwqA7NMcmc1D09tMDXoH8KvKW+Ujnbcd1+MzR+hXh8h4z9
xfBAsckgUpEbqmlumenXkwQRZ3aK3SMBk0MxyJcKetGdELMc3cvN3p4EmmmKA8z1
MhsS8SEJk/W1fSTUz105+78GX4z8jFQ2zYKth9EE4A3fwYjPfnseJlvCZGqatWMd
aFtaIKDztqg+ZSTbttsg+rBI9ZoF9dL+pztp2bpMxwu7W/V1G3PpbpTsG6nOq7Pv
mP60rBLz/hj7V4ShSodeDKEwCQjr9LfeE1PnrGLkozmOw2yM5siE2vIn8kwfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhudsrgpLcCwxTB4vn6p/KuJkMzEwHwYDVR0j
BBgwFoAUSjrQLdXM/hzSScYXcw70h4tRYzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRlTXI4NVlQZUU3UE5DRldxa0E2UWt6dHk0eWRaRjMxTWVSMVdCNVVq
R1AvMC80QTNBRDAyREQ1Q0NGRTFDRDI0OUM2MTc3MzBFRjQ4NzhCNTE2MzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBM0FEMDJERDVDQ0ZFMUNE
MjQ5QzYxNzczMEVGNDg3OEI1MTYzMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUZU1yODVZUGVFN1BOQ0ZXcWtBNlFrenR5NHlkWkYzMU1lUjFXQjVVakdQLzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzEzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzODM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJlXYwDQYJKoZIhvcNAQELBQADggEBAFFJ+W26
WfLGGZwm0H3RosaUd/0fsbBq9rmiB3iiBM1Usnot/VpfQruqUYENjT1FsVED9RIt
jT5ol75M5n5rQdD9jUPpqMC6uM4+X/K5xc+YotfAIR8HESclfeeamCY6W8EpcAZl
bd+WqId/j2GfGbQifNnFFCJE5H2zQV5FrPFtQjUnukKSje5O2ZAfzYaAv+yPR/nG
ZsbdWJtH5orfaSTUR3MkF79bXPL2J+x9c58WEzPip26zO7X8z4BLF0f+lbnl3n3f
c2VmduTP6BRb2twUnP+ebBMnij49Jd5Z8zyIC+ypBps808shU4604q2IYzJiGYs5
3kxLS8JSlYzl6Rg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org