Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          XMacKu019Ns0h/8uIlqNGxX4sfF2Yhrm8VUk+GsBd+Q=
Subject key identifier:   72:B2:D3:A5:B0:7E:9C:73:81:AA:CF:B2:32:62:1D:88:E0:F2:58:9B
Certificate issuer:       /CN=BC52BA15A425B977C5343EB1A599BEF3A930267D
Certificate serial:       0B262F15411F741EE589FFCF8A91AAE615243C1D
Authority key identifier: BC:52:BA:15:A4:25:B9:77:C5:34:3E:B1:A5:99:BE:F3:A9:30:26:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC52BA15A425B977C5343EB1A599BEF3A930267D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
Signing time:             Sat 10 Dec 2022 21:24:15 +0000
ROA not before:           Sat 10 Dec 2022 21:19:15 +0000
ROA not after:            Sat 09 Dec 2023 21:24:15 +0000
asID:                     264011
IP address blocks:        143.0.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:2f:15:41:1f:74:1e:e5:89:ff:cf:8a:91:aa:e6:15:24:3c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC52BA15A425B977C5343EB1A599BEF3A930267D
        Validity
            Not Before: Dec 10 21:19:15 2022 GMT
            Not After : Dec  9 21:24:15 2023 GMT
        Subject: CN=72B2D3A5B07E9C7381AACFB232621D88E0F2589B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:11:1e:b3:0a:de:4f:69:51:b6:6b:32:8c:
                    7d:8d:29:3e:39:de:d9:46:d1:b6:1a:fd:14:a5:f2:
                    e7:ee:15:e6:a1:12:bc:84:c2:75:5e:52:7c:d1:8f:
                    2b:2b:ae:db:fe:46:1b:b6:b0:22:6e:9d:55:e7:a9:
                    b7:11:72:18:c4:e4:8c:05:04:0c:4f:92:52:4c:8d:
                    61:38:72:6e:03:8d:d6:e4:6b:40:f7:33:9b:df:b1:
                    9a:29:b3:8a:58:24:17:1a:6e:27:fe:15:df:0c:e2:
                    87:79:fc:b8:b0:b0:1e:09:c9:aa:45:fa:ab:9f:4f:
                    3a:79:ab:04:45:89:83:f6:15:e5:41:3e:90:b7:f0:
                    3d:b8:53:ef:0a:42:96:bf:15:3b:ed:2d:8b:ea:00:
                    91:8f:ed:0e:bb:50:99:96:54:72:c4:dc:b2:a9:16:
                    94:34:ad:41:f1:7f:dc:94:bd:c3:3d:4e:8b:0e:ad:
                    85:9d:68:52:ab:d8:10:3b:7f:a3:b0:81:55:eb:2b:
                    22:08:e5:e8:94:59:ff:a4:48:08:d4:0d:0a:39:6d:
                    54:91:ed:e5:8c:ee:1d:f5:e7:05:45:12:12:08:af:
                    39:94:c3:53:0c:77:52:4b:4d:19:b6:05:3d:8a:84:
                    5b:ab:93:70:b4:3b:d2:b3:dc:d4:ba:c5:00:ff:d3:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:D3:A5:B0:7E:9C:73:81:AA:CF:B2:32:62:1D:88:E0:F2:58:9B
            X509v3 Authority Key Identifier:
                keyid:BC:52:BA:15:A4:25:B9:77:C5:34:3E:B1:A5:99:BE:F3:A9:30:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/BC52BA15A425B977C5343EB1A599BEF3A930267D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC52BA15A425B977C5343EB1A599BEF3A930267D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:61:88:24:25:94:00:7a:6d:fd:10:ba:c9:1c:e6:0b:82:bd:
         ff:84:03:03:50:c6:de:5a:3c:c8:41:76:d7:47:9f:23:91:b9:
         7c:a8:da:9b:cc:26:65:85:5d:8c:5c:94:ca:af:e9:7d:ed:0b:
         7a:df:95:a7:e4:c0:ee:3b:fe:57:8d:d6:01:cb:e4:0e:50:50:
         64:be:54:07:6b:16:d0:5c:fa:bf:6f:c7:a7:d7:80:3c:08:44:
         20:28:a4:69:6b:9e:6c:97:22:3b:1a:39:13:6e:24:ef:d1:f6:
         1e:52:f4:96:ec:e5:5f:8a:58:8f:ff:24:d3:00:3c:56:2f:53:
         66:ea:d0:72:15:1c:3d:2b:28:04:93:35:8e:24:e9:a8:72:cb:
         c7:42:7d:61:ac:f8:2d:30:5d:4d:9b:31:bc:60:d0:55:ad:a3:
         ff:40:28:0b:40:8f:81:b9:56:03:ff:e6:4a:a3:28:01:0e:e6:
         ad:d5:33:d0:bc:f2:46:fe:01:c1:b5:5e:9c:aa:be:84:2a:d6:
         8e:82:51:4a:0a:cc:9d:66:1d:0b:5b:16:80:a3:31:2b:1a:3d:
         b2:7c:02:5b:c3:10:db:f6:65:83:e4:5d:1e:0c:11:86:94:e3:
         ac:ad:2f:a8:a0:70:e1:fb:9f:af:97:55:5f:b8:22:d8:90:a4:
         b0:8e:ff:08
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCyYvFUEfdB7lif/PipGq5hUkPB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM1MkJBMTVBNDI1Qjk3N0M1MzQzRUIxQTU5OUJFRjNB
OTMwMjY3RDAeFw0yMjEyMTAyMTE5MTVaFw0yMzEyMDkyMTI0MTVaMDMxMTAvBgNV
BAMTKDcyQjJEM0E1QjA3RTlDNzM4MUFBQ0ZCMjMyNjIxRDg4RTBGMjU4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiREeswreT2lRtmsyjH2NKT45
3tlG0bYa/RSl8ufuFeahEryEwnVeUnzRjysrrtv+Rhu2sCJunVXnqbcRchjE5IwF
BAxPklJMjWE4cm4Djdbka0D3M5vfsZops4pYJBcabif+Fd8M4od5/LiwsB4JyapF
+qufTzp5qwRFiYP2FeVBPpC38D24U+8KQpa/FTvtLYvqAJGP7Q67UJmWVHLE3LKp
FpQ0rUHxf9yUvcM9TosOrYWdaFKr2BA7f6OwgVXrKyII5eiUWf+kSAjUDQo5bVSR
7eWM7h315wVFEhIIrzmUw1MMd1JLTRm2BT2KhFurk3C0O9Kz3NS6xQD/0+YtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcrLTpbB+nHOBqs+yMmIdiODyWJswHwYDVR0j
BBgwFoAUvFK6FaQluXfFND6xpZm+86kwJn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0
UlYvMC9CQzUyQkExNUE0MjVCOTc3QzUzNDNFQjFBNTk5QkVGM0E5MzAyNjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDNTJCQTE1QTQyNUI5NzdD
NTM0M0VCMUE1OTlCRUYzQTkzMDI2N0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpTW1wSkFhMjl1enNraW5nTjQybmp2NU1kN1VaQjNyU2ltQTJrWXJGNFJWLzAv
MzEzNDMzMmUzMDJlMzEzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBjwCIMA0GCSqGSIb3DQEBCwUAA4IBAQA3YYgkJZQA
em39ELrJHOYLgr3/hAMDUMbeWjzIQXbXR58jkbl8qNqbzCZlhV2MXJTKr+l97Qt6
35Wn5MDuO/5XjdYBy+QOUFBkvlQHaxbQXPq/b8en14A8CEQgKKRpa55slyI7GjkT
biTv0fYeUvSW7OVfiliP/yTTADxWL1Nm6tByFRw9KygEkzWOJOmocsvHQn1hrPgt
MF1NmzG8YNBVraP/QCgLQI+BuVYD/+ZKoygBDuat1TPQvPJG/gHBtV6cqr6EKtaO
glFKCsydZh0LWxaAozErGj2yfAJbwxDb9mWD5F0eDBGGlOOsrS+ooHDh+5+vl1Vf
uCLYkKSwjv8I
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org