Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134332e302f32342d3234203d3e20323636363331.roa
File:                     3132382e3230312e3134332e302f32342d3234203d3e20323636363331.roa (raw, json)
Hash identifier:          +aTZRPQK0tDjvtopoq25L5kopuG0azmq4Bn2uvW56/Q=
Subject key identifier:   C0:F1:90:20:C4:4A:D1:E7:D2:52:2D:DD:60:CF:48:7B:E2:87:F3:B6
Certificate issuer:       /CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
Certificate serial:       02EEF911741D98A5CBAE625E8F50166F12FBB720
Authority key identifier: 8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134332e302f32342d3234203d3e20323636363331.roa
Signing time:             Thu 23 Nov 2023 19:33:18 +0000
ROA not before:           Thu 23 Nov 2023 19:28:18 +0000
ROA not after:            Thu 21 Nov 2024 19:33:18 +0000
asID:                     266631
IP address blocks:        128.201.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ee:f9:11:74:1d:98:a5:cb:ae:62:5e:8f:50:16:6f:12:fb:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873
        Validity
            Not Before: Nov 23 19:28:18 2023 GMT
            Not After : Nov 21 19:33:18 2024 GMT
        Subject: CN=C0F19020C44AD1E7D2522DDD60CF487BE287F3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:34:4f:64:6b:08:96:0c:20:1a:e3:a1:c9:
                    29:51:b6:6a:5d:cc:5c:9e:0f:c9:ee:23:29:f8:9c:
                    ef:ac:fe:83:2f:68:cf:9d:7d:10:0d:3d:01:2b:e1:
                    23:0d:85:c3:13:d7:a5:7f:7d:70:05:db:62:b7:a9:
                    6f:9a:9b:9d:b2:dc:4d:79:0e:f2:90:18:24:8b:de:
                    5f:30:d7:7e:64:f4:4a:2c:f3:1e:9f:76:b8:3b:20:
                    ec:17:40:11:c1:b4:d2:83:a1:32:3d:4b:12:77:e7:
                    90:bf:9c:04:6c:14:40:c7:38:73:02:28:ee:97:d6:
                    2e:ce:01:c2:8d:fe:ea:77:59:a8:17:ed:dd:41:ac:
                    f3:60:93:97:99:2f:92:92:71:46:7e:16:b2:be:1e:
                    87:c2:98:dc:83:0f:00:13:03:46:55:67:b4:58:65:
                    50:29:e0:43:83:32:11:00:52:c5:82:58:aa:de:c1:
                    bc:13:df:42:ac:e3:40:6c:8e:10:4e:54:b0:90:30:
                    6c:27:4c:05:9a:34:03:25:f7:ce:37:37:1f:2f:e9:
                    3b:8b:47:e0:71:cd:7e:d0:02:49:b3:53:d0:6f:38:
                    8b:ce:52:1c:eb:6c:f7:01:11:86:f3:27:32:28:85:
                    9f:20:25:ce:af:ce:2d:35:71:ad:c1:7d:a6:9e:0b:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:90:20:C4:4A:D1:E7:D2:52:2D:DD:60:CF:48:7B:E2:87:F3:B6
            X509v3 Authority Key Identifier:
                keyid:8C:4D:FA:E8:AE:BA:99:08:5D:CC:51:D1:C1:0F:99:B8:A3:C8:88:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4DFAE8AEBA99085DCC51D1C10F99B8A3C88873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/3132382e3230312e3134332e302f32342d3234203d3e20323636363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:08:66:9b:79:d2:e6:ec:5a:e6:31:a5:1c:57:96:c1:12:e4:
         f0:38:bb:4c:8a:d9:8a:4e:ab:bc:e5:d4:5c:ba:14:02:0e:71:
         5e:8d:85:8f:11:bd:36:df:fd:ee:18:07:58:5a:35:61:56:34:
         d5:a9:ab:78:cb:be:c3:df:5b:13:c8:f4:48:83:78:ef:e5:b6:
         a0:ed:27:41:e1:8f:03:b1:5f:db:0c:04:a7:44:86:4d:47:dd:
         3f:89:fc:96:8c:ed:23:b2:92:c4:c2:35:18:c8:fc:76:e5:fa:
         1a:94:40:06:ed:9d:6a:58:bd:54:c5:0e:ec:b3:64:b0:b6:3b:
         d6:82:42:d5:ba:46:7b:05:5b:ea:84:15:b3:ad:d8:eb:f0:91:
         3d:41:e3:ec:ec:0f:4d:6f:a1:67:1f:89:0f:bf:0b:3b:1e:9a:
         f6:45:96:a4:88:ae:b1:79:b3:81:3f:19:a3:40:16:a3:2f:5a:
         a5:98:fb:77:57:a4:4e:3c:03:56:b2:5a:47:34:1f:3b:1d:45:
         05:71:40:47:11:44:e9:f1:8a:7f:4a:d0:f8:33:d5:3c:e4:ac:
         5f:10:06:9d:6b:8c:3e:ae:5e:8b:7c:10:de:ff:d8:83:67:c2:
         96:b9:78:b1:ef:46:a4:33:04:7e:ce:4d:84:a9:ed:64:b6:c0:
         30:22:4f:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAu75EXQdmKXLrmJej1AWbxL7tyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM0REZBRThBRUJBOTkwODVEQ0M1MUQxQzEwRjk5QjhB
M0M4ODg3MzAeFw0yMzExMjMxOTI4MThaFw0yNDExMjExOTMzMThaMDMxMTAvBgNV
BAMTKEMwRjE5MDIwQzQ0QUQxRTdEMjUyMkRERDYwQ0Y0ODdCRTI4N0YzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27jRPZGsIlgwgGuOhySlRtmpd
zFyeD8nuIyn4nO+s/oMvaM+dfRANPQEr4SMNhcMT16V/fXAF22K3qW+am52y3E15
DvKQGCSL3l8w135k9Eos8x6fdrg7IOwXQBHBtNKDoTI9SxJ355C/nARsFEDHOHMC
KO6X1i7OAcKN/up3WagX7d1BrPNgk5eZL5KScUZ+FrK+HofCmNyDDwATA0ZVZ7RY
ZVAp4EODMhEAUsWCWKrewbwT30Ks40BsjhBOVLCQMGwnTAWaNAMl9843Nx8v6TuL
R+BxzX7QAkmzU9BvOIvOUhzrbPcBEYbzJzIohZ8gJc6vzi01ca3BfaaeCxCtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwPGQIMRK0efSUi3dYM9Ie+KH87YwHwYDVR0j
BBgwFoAUjE366K66mQhdzFHRwQ+ZuKPIiHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpTV0g2aWdHM0hXeWNxZDZ0dDZaazkyUWdYUUZpZnhLQUpDNzc1Qnk4
Z0ovMC84QzRERkFFOEFFQkE5OTA4NURDQzUxRDFDMTBGOTlCOEEzQzg4ODczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNERGQUU4QUVCQTk5MDg1
RENDNTFEMUMxMEY5OUI4QTNDODg4NzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKU1dINmlnRzNIV3ljcWQ2dHQ2Wms5MlFnWFFGaWZ4S0FKQzc3NUJ5OGdKLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJjzANBgkqhkiG9w0BAQsFAAOCAQEAEAhm
m3nS5uxa5jGlHFeWwRLk8Di7TIrZik6rvOXUXLoUAg5xXo2FjxG9Nt/97hgHWFo1
YVY01amreMu+w99bE8j0SIN47+W2oO0nQeGPA7Ff2wwEp0SGTUfdP4n8loztI7KS
xMI1GMj8duX6GpRABu2dali9VMUO7LNksLY71oJC1bpGewVb6oQVs63Y6/CRPUHj
7OwPTW+hZx+JD78LOx6a9kWWpIiusXmzgT8Zo0AWoy9apZj7d1ekTjwDVrJaRzQf
Ox1FBXFARxFE6fGKf0rQ+DPVPOSsXxAGnWuMPq5ei3wQ3v/Yg2fClrl4se9GpDME
fs5NhKntZLbAMCJPkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org