Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          BQ+LVYl09TBln2tu1cd7VjFsmCgoe2RROukDdgNx7ok=
Subject key identifier:   4F:6B:C6:D6:5A:F4:E4:02:FD:C0:B4:89:2F:EA:49:1B:1B:63:74:FB
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       75C13AF919DC7090D653B3903B386BE5A69EAA73
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:41 +0000
ROA not before:           Fri 23 Jun 2023 19:01:41 +0000
ROA not after:            Fri 21 Jun 2024 19:06:41 +0000
asID:                     264589
IP address blocks:        143.202.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:3a:f9:19:dc:70:90:d6:53:b3:90:3b:38:6b:e5:a6:9e:aa:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:41 2023 GMT
            Not After : Jun 21 19:06:41 2024 GMT
        Subject: CN=4F6BC6D65AF4E402FDC0B4892FEA491B1B6374FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:00:b2:32:0f:31:d7:7c:20:a8:3c:38:c9:
                    d9:50:d8:a2:c8:f3:ca:3c:e2:94:61:4c:f9:37:b1:
                    2b:d1:c6:dc:08:08:52:cb:fe:f7:8e:3d:a2:8f:66:
                    fa:bd:87:31:a4:8c:ea:98:f4:43:04:c4:24:59:95:
                    4e:20:71:f8:e0:1a:c8:e8:91:6c:d7:39:73:8c:42:
                    bf:d6:f3:9a:c3:9d:dc:ec:19:3c:3a:60:83:56:59:
                    4b:9c:fb:4d:38:7b:76:cb:53:72:22:38:14:8c:4f:
                    68:04:f6:35:dd:0f:c1:30:fd:4d:81:21:16:97:2d:
                    26:62:7a:59:59:24:2a:97:4f:ca:55:23:0d:54:78:
                    aa:ad:45:f4:d7:47:46:ca:fb:61:1b:a0:8e:5d:e4:
                    ac:45:c1:71:11:57:88:41:8c:65:ef:28:ca:5f:02:
                    57:c8:a1:2f:77:de:cc:e6:51:fc:cb:2c:de:a2:8b:
                    c8:35:9a:78:6d:de:96:95:19:0a:e8:03:0b:aa:15:
                    41:b9:b3:de:ec:c0:ea:15:b9:4d:9f:59:78:3b:26:
                    aa:a1:5c:1f:31:43:11:bb:d9:29:e4:55:fd:9a:bc:
                    b3:e0:58:4c:cf:81:b1:c8:b6:35:25:fe:5a:b0:37:
                    23:8a:91:a0:ff:e0:d7:f4:3a:b0:00:56:ef:38:69:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:C6:D6:5A:F4:E4:02:FD:C0:B4:89:2F:EA:49:1B:1B:63:74:FB
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232382e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d9:20:7a:c9:98:11:e5:a5:82:01:55:a8:ce:fd:e3:8b:25:
         22:07:9d:5a:a5:30:31:01:46:f9:bc:0f:80:6c:91:14:d2:f2:
         9d:2a:44:2c:87:a4:ac:d4:ac:0e:a3:30:44:c8:a4:7a:95:27:
         24:0d:08:1a:ee:80:3d:6e:89:29:6f:98:cd:74:12:64:d8:42:
         28:1d:e4:64:18:f2:72:c5:bb:be:02:7f:06:3d:5a:86:4c:6a:
         51:18:4b:56:a5:c9:86:d7:f9:50:2d:a6:a8:dc:c7:86:c1:a8:
         f0:14:e1:d0:44:35:5a:1e:88:7d:8a:f1:06:a9:b7:3d:16:8d:
         bf:81:2b:11:08:6a:2b:30:57:e6:ab:46:25:e8:38:c0:ca:03:
         41:d3:f5:08:d8:d5:c7:3c:c3:92:a2:d2:63:a6:46:4d:49:4e:
         c0:ec:f9:9e:44:fb:c8:e0:3e:a7:14:7f:4b:68:c9:a2:e6:64:
         d4:fd:81:1c:98:e5:f0:2c:54:17:e0:69:58:b9:ca:97:51:f3:
         a7:84:c7:01:36:ac:cf:57:fc:5d:8b:93:99:5c:7c:15:64:ec:
         65:3e:1a:f5:e7:dc:d2:e7:75:c8:18:ae:e3:38:58:b5:f3:82:
         7d:75:fc:f3:76:97:9e:d2:95:d0:b2:90:ad:78:ba:8a:88:c9:
         3e:cd:cf:d1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdcE6+RnccJDWU7OQOzhr5aaeqnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFCMjMyRDJFMjMyODUyMkYzMjg5MzlFNjFBOTQ1N0RB
MDM2MUFGMTAeFw0yMzA2MjMxOTAxNDFaFw0yNDA2MjExOTA2NDFaMDMxMTAvBgNV
BAMTKDRGNkJDNkQ2NUFGNEU0MDJGREMwQjQ4OTJGRUE0OTFCMUI2Mzc0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VgCyMg8x13wgqDw4ydlQ2KLI
88o84pRhTPk3sSvRxtwICFLL/veOPaKPZvq9hzGkjOqY9EMExCRZlU4gcfjgGsjo
kWzXOXOMQr/W85rDndzsGTw6YINWWUuc+004e3bLU3IiOBSMT2gE9jXdD8Ew/U2B
IRaXLSZiellZJCqXT8pVIw1UeKqtRfTXR0bK+2EboI5d5KxFwXERV4hBjGXvKMpf
AlfIoS933szmUfzLLN6ii8g1mnht3paVGQroAwuqFUG5s97swOoVuU2fWXg7Jqqh
XB8xQxG72SnkVf2avLPgWEzPgbHItjUl/lqwNyOKkaD/4Nf0OrAAVu84aYSbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUT2vG1lr05AL9wLSJL+pJGxtjdPswHwYDVR0j
BBgwFoAUmrIy0uIyhSLzKJOeYalFfaA2GvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGo5UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1a
ZHQvMC85QUIyMzJEMkUyMzI4NTIyRjMyODkzOUU2MUE5NDU3REEwMzYxQUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBQjIzMkQyRTIzMjg1MjJG
MzI4OTM5RTYxQTk0NTdEQTAzNjFBRjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRqOVJHTHRFclR4UU1OMVYxUWk4UDNwVHZlcldGdlFwWFlWYWg2TTFtWmR0LzAv
MzEzNDMzMmUzMjMwMzIyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/K5DANBgkqhkiG9w0BAQsFAAOCAQEAudkg
esmYEeWlggFVqM7944slIgedWqUwMQFG+bwPgGyRFNLynSpELIekrNSsDqMwRMik
epUnJA0IGu6APW6JKW+YzXQSZNhCKB3kZBjycsW7vgJ/Bj1ahkxqURhLVqXJhtf5
UC2mqNzHhsGo8BTh0EQ1Wh6IfYrxBqm3PRaNv4ErEQhqKzBX5qtGJeg4wMoDQdP1
CNjVxzzDkqLSY6ZGTUlOwOz5nkT7yOA+pxR/S2jJouZk1P2BHJjl8CxUF+BpWLnK
l1Hzp4THATasz1f8XYuTmVx8FWTsZT4a9efc0ud1yBiu4zhYtfOCfXX883aXntKV
0LKQrXi6iojJPs3P0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org