Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa
File:                     3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa (raw, json)
Hash identifier:          4U0YClhOnbM+ISD9/qra7P8L1fxQ84vS2wQgfPJU+SQ=
Subject key identifier:   F7:8E:90:8D:51:1E:F7:00:3F:AC:5A:06:EB:ED:DB:E1:69:67:09:31
Certificate issuer:       /CN=4A4846F738C5423546BC20E3E66A87BDCBE3D9B8
Certificate serial:       208AD7D31D2D380E46088AB9B1CB8C6CA1395B86
Authority key identifier: 4A:48:46:F7:38:C5:42:35:46:BC:20:E3:E6:6A:87:BD:CB:E3:D9:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa
Signing time:             Thu 29 Jun 2023 15:07:16 +0000
ROA not before:           Thu 29 Jun 2023 15:02:16 +0000
ROA not after:            Thu 27 Jun 2024 15:07:16 +0000
asID:                     267463
IP address blocks:        192.141.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:d7:d3:1d:2d:38:0e:46:08:8a:b9:b1:cb:8c:6c:a1:39:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4846F738C5423546BC20E3E66A87BDCBE3D9B8
        Validity
            Not Before: Jun 29 15:02:16 2023 GMT
            Not After : Jun 27 15:07:16 2024 GMT
        Subject: CN=F78E908D511EF7003FAC5A06EBEDDBE169670931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:7f:3e:70:67:ad:33:22:77:02:1f:8e:cd:
                    ad:5e:63:c2:95:c6:14:f0:7a:91:cf:47:06:9e:bf:
                    40:dc:30:79:56:b5:e1:ca:99:81:c8:ff:d4:60:4f:
                    cc:4d:78:04:ea:25:c8:54:94:f7:f4:c1:59:bf:5f:
                    d7:29:c0:41:53:49:71:c9:38:5d:b0:46:08:c1:74:
                    a0:ba:00:8d:2a:a3:8d:f8:77:e8:de:3e:25:90:16:
                    66:0e:b9:75:99:f4:60:83:5d:88:5a:bf:dd:91:82:
                    cf:47:bd:b8:8a:e1:58:d2:cd:a9:54:3e:fc:0c:56:
                    da:f9:a8:3c:8d:56:49:f9:a0:d0:0d:c3:b0:d4:6c:
                    7d:9a:18:55:c0:88:36:39:6c:9b:26:83:f6:f3:0e:
                    c8:99:8d:69:e3:df:3e:0a:74:7d:0c:e5:30:a8:9a:
                    60:26:78:08:f6:9d:cc:6d:71:0b:8e:24:3b:3d:c7:
                    b2:2f:23:24:5f:4a:69:64:a3:94:52:36:c8:f4:60:
                    c0:ae:1d:6e:f7:25:5c:5d:d9:75:84:a7:bc:69:62:
                    87:58:53:fc:4d:0c:36:04:c0:00:a3:9f:3a:02:2a:
                    b6:3e:6e:49:eb:3e:78:35:16:51:76:b1:35:f0:4d:
                    d1:1a:36:fc:8e:ee:92:34:68:a3:7c:44:cb:a8:a3:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:90:8D:51:1E:F7:00:3F:AC:5A:06:EB:ED:DB:E1:69:67:09:31
            X509v3 Authority Key Identifier:
                keyid:4A:48:46:F7:38:C5:42:35:46:BC:20:E3:E6:6A:87:BD:CB:E3:D9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A4846F738C5423546BC20E3E66A87BDCBE3D9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/0/3139322e3134312e3131342e302f32342d3234203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:8e:95:fc:5c:29:13:ce:a1:53:9e:ef:e7:bd:24:4b:d4:
         c7:aa:da:31:0a:35:d6:5a:f8:33:1c:6d:6a:32:02:e4:bc:f1:
         69:08:1d:48:4f:1c:ea:8c:70:f4:fb:64:20:23:27:00:af:b1:
         0b:d9:ad:03:e2:d0:8e:35:58:80:d4:c4:d0:53:72:82:35:3d:
         f4:46:f4:38:54:fd:7d:15:cc:14:ae:cd:40:f5:8f:e0:a4:27:
         7c:3b:dc:14:58:33:fa:b2:02:e9:1b:83:65:5b:f7:a8:b1:99:
         60:19:53:39:34:c1:63:64:aa:db:89:09:8f:da:24:ed:f9:25:
         12:f1:f0:8a:9f:73:a8:d3:60:ee:fd:97:b5:b5:1d:39:17:a8:
         d6:54:a4:d9:d0:e7:5d:da:4f:77:a9:13:88:af:e7:ee:21:db:
         a3:14:bd:16:16:fd:23:15:60:31:95:e0:5f:8e:bc:f4:3c:83:
         f9:45:b1:93:1d:25:0f:40:82:2e:91:7a:93:e6:dc:1d:6d:60:
         ab:78:bf:21:c5:18:14:a4:f1:98:74:c4:f3:72:89:49:c8:1d:
         00:29:7c:6d:ef:76:6c:2b:7d:db:a2:c3:2e:40:df:02:84:45:
         3c:91:54:a1:25:46:a9:de:a1:36:36:ac:89:c0:58:73:f4:af:
         c6:9b:49:43
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIIrX0x0tOA5GCIq5scuMbKE5W4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0ODQ2RjczOEM1NDIzNTQ2QkMyMEUzRTY2QTg3QkRD
QkUzRDlCODAeFw0yMzA2MjkxNTAyMTZaFw0yNDA2MjcxNTA3MTZaMDMxMTAvBgNV
BAMTKEY3OEU5MDhENTExRUY3MDAzRkFDNUEwNkVCRUREQkUxNjk2NzA5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY738+cGetMyJ3Ah+Oza1eY8KV
xhTwepHPRwaev0DcMHlWteHKmYHI/9RgT8xNeATqJchUlPf0wVm/X9cpwEFTSXHJ
OF2wRgjBdKC6AI0qo434d+jePiWQFmYOuXWZ9GCDXYhav92Rgs9HvbiK4VjSzalU
PvwMVtr5qDyNVkn5oNANw7DUbH2aGFXAiDY5bJsmg/bzDsiZjWnj3z4KdH0M5TCo
mmAmeAj2ncxtcQuOJDs9x7IvIyRfSmlko5RSNsj0YMCuHW73JVxd2XWEp7xpYodY
U/xNDDYEwACjnzoCKrY+bknrPng1FlF2sTXwTdEaNvyO7pI0aKN8RMuoo3QpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU946QjVEe9wA/rFoG6+3b4WlnCTEwHwYDVR0j
BBgwFoAUSkhG9zjFQjVGvCDj5mqHvcvj2bgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhvcHVOWUEyTlVhUG5uMTVyY2o0THlReTlHdzl4a3RiR1htUnlTbUFx
WkUvMC80QTQ4NDZGNzM4QzU0MjM1NDZCQzIwRTNFNjZBODdCRENCRTNEOUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBNDg0NkY3MzhDNTQyMzU0
NkJDMjBFM0U2NkE4N0JEQ0JFM0Q5QjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYb3B1TllBMk5VYVBubjE1cmNqNEx5UXk5R3c5eGt0YkdYbVJ5U21BcVpFLzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNcjANBgkqhkiG9w0BAQsFAAOCAQEAYamO
lfxcKRPOoVOe7+e9JEvUx6raMQo11lr4MxxtajIC5LzxaQgdSE8c6oxw9PtkICMn
AK+xC9mtA+LQjjVYgNTE0FNygjU99Eb0OFT9fRXMFK7NQPWP4KQnfDvcFFgz+rIC
6RuDZVv3qLGZYBlTOTTBY2Sq24kJj9ok7fklEvHwip9zqNNg7v2XtbUdOReo1lSk
2dDnXdpPd6kTiK/n7iHboxS9Fhb9IxVgMZXgX4689DyD+UWxkx0lD0CCLpF6k+bc
HW1gq3i/IcUYFKTxmHTE83KJScgdACl8be92bCt926LDLkDfAoRFPJFUoSVGqd6h
NjasicBYc/SvxptJQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org