Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32322d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          p+y257pNUb1u17yXribxOwEJrZi/OR7p7b1xLby+qOY=
Subject key identifier:   C2:23:AA:60:6F:5E:16:A2:34:CA:DA:44:F5:CB:26:68:61:E1:B1:49
Certificate issuer:       /CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
Certificate serial:       65AA8FB96F69D5D28BE3FC1F0B0A476589BC14BE
Authority key identifier: F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa
Signing time:             Mon 01 Apr 2024 15:40:19 +0000
ROA not before:           Mon 01 Apr 2024 15:35:19 +0000
ROA not after:            Mon 31 Mar 2025 15:40:19 +0000
asID:                     264011
IP address blocks:        143.0.136.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:8f:b9:6f:69:d5:d2:8b:e3:fc:1f:0b:0a:47:65:89:bc:14:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9DCFE18A323910BC0ECFC653163E431C1161F3B
        Validity
            Not Before: Apr  1 15:35:19 2024 GMT
            Not After : Mar 31 15:40:19 2025 GMT
        Subject: CN=C223AA606F5E16A234CADA44F5CB266861E1B149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:98:41:af:ea:9a:19:f2:4d:b9:56:80:7f:
                    8b:74:9c:93:27:bd:ce:0b:58:a4:3c:5b:20:49:9f:
                    83:64:00:ee:40:a1:21:a4:0c:07:bc:2f:f7:92:77:
                    5c:42:4c:b3:5a:44:08:bc:d7:ee:e4:20:2e:59:23:
                    10:d8:06:15:5a:b3:ca:b3:b1:a1:30:11:7c:e0:0a:
                    f0:9f:16:35:11:58:2c:69:57:01:91:ed:90:52:13:
                    ce:e7:57:67:44:a1:be:51:31:dc:27:14:9e:2f:34:
                    d3:92:30:16:12:24:0b:ec:c8:6d:b2:90:79:22:f6:
                    2e:30:1a:f8:76:16:47:b6:21:89:60:09:a9:4e:1a:
                    fb:89:17:2d:91:60:4a:52:36:2b:fc:17:b4:a5:4c:
                    d8:3c:50:06:74:a9:0e:43:71:8b:d3:10:32:f8:5d:
                    80:1c:13:e6:53:b4:c3:b0:00:6d:2d:e7:94:85:15:
                    d3:93:98:83:c9:ff:c9:aa:62:05:3e:17:8f:fc:42:
                    64:71:b9:12:2a:1e:25:6d:75:32:69:34:70:b5:e1:
                    c0:a8:14:18:e4:44:33:52:ac:17:d9:b4:45:af:08:
                    a9:3e:6e:cf:87:3b:54:11:a2:ec:16:2a:b2:e9:2a:
                    ec:13:fb:2d:49:e9:45:73:77:b5:97:0f:57:c9:2c:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:AA:60:6F:5E:16:A2:34:CA:DA:44:F5:CB:26:68:61:E1:B1:49
            X509v3 Authority Key Identifier:
                keyid:F9:DC:FE:18:A3:23:91:0B:C0:EC:FC:65:31:63:E4:31:C1:16:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9DCFE18A323910BC0ECFC653163E431C1161F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:66:4b:dd:e0:64:f8:6d:bb:30:09:09:9c:d1:6c:c9:3b:
         f3:1a:97:59:46:4c:ba:96:5f:f0:05:75:18:71:a5:e0:57:bd:
         62:d8:4e:a0:e4:8e:56:04:18:55:8c:66:21:4b:9b:23:a1:a2:
         05:40:bd:db:fc:d3:3f:91:e8:e7:05:76:f6:6d:71:3b:a6:3a:
         99:24:0e:61:00:79:54:81:5c:98:b4:29:65:e7:d1:78:e4:08:
         c9:35:62:f2:41:6a:06:89:94:67:ea:d9:ec:38:66:33:5e:66:
         e2:24:8f:39:b2:8f:ef:27:73:d2:aa:d4:4e:cc:b7:43:3e:0c:
         05:5e:31:0b:05:08:a4:7b:2b:17:7f:93:cb:1a:83:36:3b:fa:
         b6:e3:d8:86:b1:3d:77:f9:1b:fa:51:d0:c1:af:04:a6:2b:24:
         54:3c:5d:85:a5:86:d3:8f:dc:79:c2:79:47:60:f7:4d:6c:9d:
         23:76:f3:06:dd:1e:66:f4:99:6c:a5:f3:68:32:9b:5a:0c:7a:
         66:a9:3b:a6:5e:37:44:b8:f4:6d:fd:c4:5e:91:55:f5:42:91:
         a5:97:3c:8e:81:36:ec:9e:d3:90:01:db:84:75:b9:ea:56:6a:
         94:52:92:e0:91:86:c3:12:62:80:ef:b2:47:67:7f:82:ad:5b:
         2b:63:2a:91
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZaqPuW9p1dKL4/wfCwpHZYm8FL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlEQ0ZFMThBMzIzOTEwQkMwRUNGQzY1MzE2M0U0MzFD
MTE2MUYzQjAeFw0yNDA0MDExNTM1MTlaFw0yNTAzMzExNTQwMTlaMDMxMTAvBgNV
BAMTKEMyMjNBQTYwNkY1RTE2QTIzNENBREE0NEY1Q0IyNjY4NjFFMUIxNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNcJhBr+qaGfJNuVaAf4t0nJMn
vc4LWKQ8WyBJn4NkAO5AoSGkDAe8L/eSd1xCTLNaRAi81+7kIC5ZIxDYBhVas8qz
saEwEXzgCvCfFjURWCxpVwGR7ZBSE87nV2dEob5RMdwnFJ4vNNOSMBYSJAvsyG2y
kHki9i4wGvh2Fke2IYlgCalOGvuJFy2RYEpSNiv8F7SlTNg8UAZ0qQ5DcYvTEDL4
XYAcE+ZTtMOwAG0t55SFFdOTmIPJ/8mqYgU+F4/8QmRxuRIqHiVtdTJpNHC14cCo
FBjkRDNSrBfZtEWvCKk+bs+HO1QRouwWKrLpKuwT+y1J6UVzd7WXD1fJLIpnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwiOqYG9eFqI0ytpE9csmaGHhsUkwHwYDVR0j
BBgwFoAU+dz+GKMjkQvA7PxlMWPkMcEWHzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0
UlYvMC9GOURDRkUxOEEzMjM5MTBCQzBFQ0ZDNjUzMTYzRTQzMUMxMTYxRjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y5RENGRTE4QTMyMzkxMEJD
MEVDRkM2NTMxNjNFNDMxQzExNjFGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpTW1wSkFhMjl1enNraW5nTjQybmp2NU1kN1VaQjNyU2ltQTJrWXJGNFJWLzAv
MzEzNDMzMmUzMDJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM0
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwCIMA0GCSqGSIb3DQEBCwUAA4IBAQBHoGZL3eBk
+G27MAkJnNFsyTvzGpdZRky6ll/wBXUYcaXgV71i2E6g5I5WBBhVjGYhS5sjoaIF
QL3b/NM/kejnBXb2bXE7pjqZJA5hAHlUgVyYtCll59F45AjJNWLyQWoGiZRn6tns
OGYzXmbiJI85so/vJ3PSqtROzLdDPgwFXjELBQikeysXf5PLGoM2O/q249iGsT13
+Rv6UdDBrwSmKyRUPF2FpYbTj9x5wnlHYPdNbJ0jdvMG3R5m9JlspfNoMptaDHpm
qTumXjdEuPRt/cRekVX1QpGllzyOgTbsntOQAduEdbnqVmqUUpLgkYbDEmKA77JH
Z3+CrVsrYyqR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org