Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          LDXAvcgEWDwvwkATMRcgpGCv5Hm3Nk0e51Yge4Aa6Eo=
Subject key identifier:   36:68:BB:0D:AF:C7:3C:F5:8B:29:CF:6F:25:24:BC:35:9F:3E:23:66
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       778867C92C65E517C6CA83AF4EA97FD245113A45
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:52 +0000
ROA not before:           Thu 21 Sep 2023 13:31:52 +0000
ROA not after:            Thu 19 Sep 2024 13:36:52 +0000
asID:                     263604
IP address blocks:        143.202.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:88:67:c9:2c:65:e5:17:c6:ca:83:af:4e:a9:7f:d2:45:11:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:52 2023 GMT
            Not After : Sep 19 13:36:52 2024 GMT
        Subject: CN=3668BB0DAFC73CF58B29CF6F2524BC359F3E2366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:fa:51:15:83:ea:d4:77:f3:9a:e7:7c:f4:
                    1e:98:19:c1:e6:72:59:1f:1f:be:51:14:61:c7:4b:
                    6a:fd:e9:20:20:bc:29:89:8a:bd:12:90:57:11:27:
                    f8:a1:49:2b:f9:7f:40:34:34:ee:b4:31:80:d6:6f:
                    ac:a0:9a:b4:f7:2b:f5:f7:16:e8:fb:47:1a:af:3f:
                    6b:a7:8c:28:76:55:32:b7:a4:3c:81:35:b9:af:46:
                    71:0f:3c:f5:d0:a7:9c:c8:81:73:62:a6:74:29:ab:
                    09:16:98:15:8a:72:0a:91:65:36:7c:9a:27:1b:13:
                    e4:95:b2:4a:6d:8a:5e:03:d9:0c:90:8f:f3:4a:89:
                    77:1f:64:79:4c:1f:f6:55:c7:d6:47:0c:6d:09:4e:
                    ce:bf:3a:b0:c7:00:52:0d:ff:67:04:48:d1:68:76:
                    b1:93:6d:25:54:0b:b7:ed:30:6e:e6:e4:8f:f3:48:
                    f9:db:90:32:df:4e:dd:ce:c5:eb:99:cf:0b:64:34:
                    ef:41:a9:13:53:82:59:ea:86:18:97:90:40:aa:09:
                    a2:3f:cb:82:dc:f9:cd:d9:43:a7:44:fc:e6:e3:7e:
                    64:a7:86:30:a7:a6:6a:c6:48:ea:6d:4b:7f:c0:84:
                    71:5d:92:54:be:d0:8d:b9:ca:1a:c2:3b:08:56:58:
                    4f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:BB:0D:AF:C7:3C:F5:8B:29:CF:6F:25:24:BC:35:9F:3E:23:66
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d5:e0:cc:f2:f6:f6:3c:81:7c:a2:2b:f4:33:a0:86:5b:7b:
         dd:23:bc:4b:7e:05:d9:51:bf:b2:6f:46:26:d6:20:1b:d2:bb:
         df:72:aa:a4:11:e5:28:a2:5b:cd:a1:bf:f3:b1:0b:73:b4:b6:
         f0:1d:ae:04:28:87:d1:52:8c:b8:8d:09:46:da:04:a7:86:59:
         9c:57:c9:0c:67:78:b2:bd:b2:8d:62:3c:8b:6e:5e:a7:22:17:
         4f:a1:7d:14:84:c6:6f:8c:e0:ee:0e:53:37:1c:13:ba:a5:c1:
         db:6a:de:c1:74:8a:9d:1b:5d:c6:f2:db:c2:c8:5a:53:43:d5:
         c4:da:77:96:e9:7e:9b:b6:90:0e:f1:39:7e:1d:e7:3a:01:10:
         95:c9:c8:62:1f:e6:49:5a:11:46:be:b8:8f:d1:fd:1f:54:07:
         1f:92:40:af:af:d1:44:c8:d6:b6:0f:b7:9b:1a:1b:24:4f:6d:
         b8:86:a7:2f:ab:9f:5d:2b:59:e0:3e:1a:a9:3c:58:11:e9:20:
         67:dd:0b:bd:27:ae:8e:9a:62:d5:10:4a:a9:c4:44:93:7e:29:
         3b:2c:b1:23:82:83:a4:26:6d:a1:85:8f:17:48:28:5d:32:7e:
         1c:d9:19:2d:d9:7e:b8:87:9b:c6:d8:b8:72:25:be:3f:6c:60:
         5c:5c:92:97
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd4hnySxl5RfGyoOvTql/0kUROkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDk4QUM4MzIxOTk3QkE0QzhFOEZERTZDODZBQjhD
MDcwNDVCQjAeFw0yMzA5MjExMzMxNTJaFw0yNDA5MTkxMzM2NTJaMDMxMTAvBgNV
BAMTKDM2NjhCQjBEQUZDNzNDRjU4QjI5Q0Y2RjI1MjRCQzM1OUYzRTIzNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHvpRFYPq1Hfzmud89B6YGcHm
clkfH75RFGHHS2r96SAgvCmJir0SkFcRJ/ihSSv5f0A0NO60MYDWb6ygmrT3K/X3
Fuj7RxqvP2unjCh2VTK3pDyBNbmvRnEPPPXQp5zIgXNipnQpqwkWmBWKcgqRZTZ8
micbE+SVskptil4D2QyQj/NKiXcfZHlMH/ZVx9ZHDG0JTs6/OrDHAFIN/2cESNFo
drGTbSVUC7ftMG7m5I/zSPnbkDLfTt3OxeuZzwtkNO9BqRNTglnqhhiXkECqCaI/
y4Lc+c3ZQ6dE/ObjfmSnhjCnpmrGSOptS3/AhHFdklS+0I25yhrCOwhWWE9dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNmi7Da/HPPWLKc9vJSS8NZ8+I2YwHwYDVR0j
BBgwFoAUEcSYrIMhmXukyOj95shquMBwRbswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMC8xMUM0OThBQzgzMjE5OTdCQTRDOEU4RkRFNkM4NkFCOEMwNzA0NUJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExQzQ5OEFDODMyMTk5N0JB
NEM4RThGREU2Qzg2QUI4QzA3MDQ1QkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzAv
MzEzNDMzMmUzMjMwMzIyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/KcjANBgkqhkiG9w0BAQsFAAOCAQEAadXg
zPL29jyBfKIr9DOghlt73SO8S34F2VG/sm9GJtYgG9K733KqpBHlKKJbzaG/87EL
c7S28B2uBCiH0VKMuI0JRtoEp4ZZnFfJDGd4sr2yjWI8i25epyIXT6F9FITGb4zg
7g5TNxwTuqXB22rewXSKnRtdxvLbwshaU0PVxNp3lul+m7aQDvE5fh3nOgEQlcnI
Yh/mSVoRRr64j9H9H1QHH5JAr6/RRMjWtg+3mxobJE9tuIanL6ufXStZ4D4aqTxY
EekgZ90LvSeujppi1RBKqcREk34pOyyxI4KDpCZtoYWPF0goXTJ+HNkZLdl+uIeb
xti4ciW+P2xgXFySlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org