Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32342d3234203d3e20323634303232.roa
File:                     3134332e302e3232302e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          qlX6bgzZmKqYBdazf618FInwD49Y1izYD6L8+UijHKU=
Subject key identifier:   B1:77:9D:35:12:59:09:41:39:4E:63:49:A3:A8:F9:28:2B:74:85:C3
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       1DFAB4E5E1FEADBA4ECA0450FE0A74FD37DA449E
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32342d3234203d3e20323634303232.roa
Signing time:             Sat 27 Apr 2024 13:58:27 +0000
ROA not before:           Sat 27 Apr 2024 13:53:27 +0000
ROA not after:            Sat 26 Apr 2025 13:58:27 +0000
asID:                     264022
IP address blocks:        143.0.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fa:b4:e5:e1:fe:ad:ba:4e:ca:04:50:fe:0a:74:fd:37:da:44:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 27 13:53:27 2024 GMT
            Not After : Apr 26 13:58:27 2025 GMT
        Subject: CN=B1779D3512590941394E6349A3A8F9282B7485C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:43:04:b2:2b:2e:cc:fd:41:b1:9f:55:45:
                    0e:22:c8:e2:7b:97:de:52:cc:2a:ab:c5:c4:ba:9c:
                    0e:16:38:76:0c:00:d2:7a:e2:cc:24:3e:62:91:6b:
                    b5:b0:58:08:11:d6:1c:3f:46:d3:42:c9:29:bb:b9:
                    0f:82:d7:1d:06:1e:b4:f6:bc:1e:bc:26:2f:02:1a:
                    e6:da:b9:08:d7:c8:0c:62:ba:e1:8a:8b:76:62:fc:
                    c2:72:d8:c6:d3:66:c8:73:28:3e:27:2d:d8:6c:fb:
                    b2:0f:f5:d7:55:35:91:80:bb:d0:9e:80:da:c0:a4:
                    cc:02:ac:d2:b9:ca:2b:1b:de:0a:7f:8e:c0:53:b1:
                    bc:a4:a2:55:50:b2:a6:77:9d:0b:4c:4e:ae:66:6a:
                    d0:18:88:22:01:f4:f5:04:89:af:93:75:d5:51:95:
                    17:f9:3c:1e:93:da:a2:1d:de:5b:f8:7b:56:7a:17:
                    94:55:92:3b:56:63:89:da:09:df:59:18:8f:ec:61:
                    4f:78:c0:73:41:c5:6c:ec:ca:a1:5f:52:2b:dc:42:
                    d1:f8:40:79:89:7d:4d:69:94:58:90:1c:14:08:8a:
                    af:33:9a:84:17:6e:d3:58:b5:08:0d:ed:e5:e1:c6:
                    da:02:86:bf:aa:e0:d3:93:aa:fa:dc:64:68:59:da:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:9D:35:12:59:09:41:39:4E:63:49:A3:A8:F9:28:2B:74:85:C3
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:80:98:d5:c1:8e:7a:ca:3b:e8:5d:04:21:b7:a7:26:3d:97:
         45:fa:ae:d8:73:a3:7c:74:9a:04:46:a2:71:8e:68:dd:9a:75:
         fc:61:9e:ee:94:0a:9f:35:c0:20:a8:a6:c6:3a:8e:76:19:e6:
         c4:4d:e5:e0:94:ec:1e:8c:83:11:02:fe:57:ce:5d:23:db:84:
         24:95:2e:93:2d:ac:9c:d6:fe:55:7b:d2:88:6c:3e:07:ae:e5:
         3b:b2:f2:31:85:15:09:a3:fd:80:a0:42:83:4f:15:d6:b6:af:
         e0:24:6e:50:89:f2:4d:32:3e:5a:a5:1c:a4:84:75:0a:70:72:
         7d:85:a9:ed:29:e5:15:f6:89:a8:7d:2e:7a:02:fa:df:d7:3f:
         ac:ae:1a:a2:22:7d:f9:35:ba:ea:45:b1:64:d7:dd:bf:da:2e:
         19:51:52:92:f0:2f:11:5a:46:08:66:38:ea:3d:1f:04:3f:ce:
         74:0c:5d:19:aa:5e:86:5d:77:26:ec:d8:60:15:2d:d9:6c:eb:
         79:91:b7:6c:0c:32:99:9c:31:29:8a:d7:ba:bc:02:4d:97:9a:
         8d:8c:f0:2d:7f:45:62:5f:fc:77:9c:bc:9b:93:96:fc:6b:48:
         25:cc:1e:b6:49:3f:2a:26:a9:58:66:96:ac:98:0c:fe:0a:ad:
         50:9e:38:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHfq05eH+rbpOygRQ/gp0/TfaRJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NDQjY3MUYxRTcwOTVEQjVENEExNEEwMTkzQTdEMkY0
Q0FCMzI0OTAeFw0yNDA0MjcxMzUzMjdaFw0yNTA0MjYxMzU4MjdaMDMxMTAvBgNV
BAMTKEIxNzc5RDM1MTI1OTA5NDEzOTRFNjM0OUEzQThGOTI4MkI3NDg1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqUMEsisuzP1BsZ9VRQ4iyOJ7
l95SzCqrxcS6nA4WOHYMANJ64swkPmKRa7WwWAgR1hw/RtNCySm7uQ+C1x0GHrT2
vB68Ji8CGubauQjXyAxiuuGKi3Zi/MJy2MbTZshzKD4nLdhs+7IP9ddVNZGAu9Ce
gNrApMwCrNK5yisb3gp/jsBTsbykolVQsqZ3nQtMTq5matAYiCIB9PUEia+TddVR
lRf5PB6T2qId3lv4e1Z6F5RVkjtWY4naCd9ZGI/sYU94wHNBxWzsyqFfUivcQtH4
QHmJfU1plFiQHBQIiq8zmoQXbtNYtQgN7eXhxtoChr+q4NOTqvrcZGhZ2usNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsXedNRJZCUE5TmNJo6j5KCt0hcMwHwYDVR0j
BBgwFoAUPMtnHx5wldtdShSgGTp9L0yrMkkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJXTHVYd2N3N0N5Yzh2WGh2YXllM0RHNHJhZkxjZ0xQOVFkQ2UzWXFN
ZHEvMS8zQ0NCNjcxRjFFNzA5NURCNUQ0QTE0QTAxOTNBN0QyRjRDQUIzMjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQ0I2NzFGMUU3MDk1REI1
RDRBMTRBMDE5M0E3RDJGNENBQjMyNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyV0x1WHdjdzdDeWM4dlhodmF5ZTNERzRyYWZMY2dMUDlRZENlM1lxTWRxLzEv
MzEzNDMzMmUzMDJlMzIzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDcMA0GCSqGSIb3DQEBCwUAA4IBAQDGgJjVwY56
yjvoXQQht6cmPZdF+q7Yc6N8dJoERqJxjmjdmnX8YZ7ulAqfNcAgqKbGOo52GebE
TeXglOwejIMRAv5Xzl0j24QklS6TLayc1v5Ve9KIbD4HruU7svIxhRUJo/2AoEKD
TxXWtq/gJG5QifJNMj5apRykhHUKcHJ9hantKeUV9omofS56Avrf1z+srhqiIn35
NbrqRbFk192/2i4ZUVKS8C8RWkYIZjjqPR8EP850DF0Zql6GXXcm7NhgFS3ZbOt5
kbdsDDKZnDEpite6vAJNl5qNjPAtf0ViX/x3nLybk5b8a0glzB62ST8qJqlYZpas
mAz+Cq1QnjjY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org