Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          dPjMwytYCHzZY4dsmEOW7ucpCUA8l5g+eC3tQMRi0Lo=
Subject key identifier:   33:58:EF:62:4D:01:81:06:16:6B:D4:AE:1F:62:4C:17:A2:4E:79:27
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       7573CF52F605B04B8794843F51FA669D89D69437
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:13 +0000
ROA not before:           Wed 13 Sep 2023 20:19:13 +0000
ROA not after:            Wed 11 Sep 2024 20:24:13 +0000
asID:                     263604
IP address blocks:        143.202.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:73:cf:52:f6:05:b0:4b:87:94:84:3f:51:fa:66:9d:89:d6:94:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:13 2023 GMT
            Not After : Sep 11 20:24:13 2024 GMT
        Subject: CN=3358EF624D018106166BD4AE1F624C17A24E7927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:54:57:67:25:c1:b7:67:ba:4d:4a:04:68:
                    29:d1:86:44:d0:6d:91:19:2c:ef:24:6e:d5:ca:a1:
                    e9:3b:0a:a0:2e:1d:1c:1d:53:c9:de:bf:2e:58:16:
                    5f:10:59:fc:58:48:02:d9:e9:82:8f:c1:85:7d:82:
                    f8:88:47:74:9e:94:ef:02:99:64:10:02:5b:58:cf:
                    20:ed:80:10:d4:7e:59:8a:bf:2f:76:1d:82:bc:9a:
                    e3:c1:c1:db:d0:95:86:3b:aa:b7:d3:9c:72:8c:99:
                    14:9b:41:fb:3f:8c:8b:1a:1c:6c:29:9f:45:e9:26:
                    0f:3a:d7:16:2a:a4:7e:50:a6:8f:b4:91:07:7b:4e:
                    f3:c2:4b:29:a9:46:32:e3:c6:ae:61:42:c6:b6:8f:
                    27:1c:b6:18:38:d3:e0:e6:67:d0:12:d2:27:b3:b9:
                    a1:58:38:7a:30:18:e3:38:aa:5c:8c:f7:67:2f:09:
                    e5:0f:b5:8f:11:ed:e0:01:ee:ef:48:7c:43:78:03:
                    0b:2d:c1:5f:1d:d2:fb:74:5e:17:5b:be:6b:59:5e:
                    eb:6e:62:b9:98:76:b5:8f:87:8c:3b:e7:c6:45:98:
                    60:1f:ef:70:2c:5b:3f:9e:05:c9:c1:82:50:4d:1d:
                    ad:68:0d:81:0c:21:f2:f2:c5:5a:95:4f:eb:3a:cc:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:58:EF:62:4D:01:81:06:16:6B:D4:AE:1F:62:4C:17:A2:4E:79:27
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:66:27:2e:a7:65:37:d6:57:bd:79:1d:42:1d:96:1c:74:a4:
         c4:ed:c6:35:2f:00:d8:29:27:f3:cf:b5:41:37:ce:20:dc:c4:
         8e:86:2e:be:68:0f:56:5a:be:7c:88:97:c2:18:e9:47:45:0b:
         19:95:28:94:c8:fc:a9:df:b6:76:9e:4c:aa:b5:e5:f0:5a:78:
         45:f4:c3:f2:c6:2c:93:59:39:8e:5e:ec:40:5a:09:44:91:2e:
         d6:ea:a0:32:33:e8:fa:f2:5f:9b:ed:09:f1:a9:85:3d:86:44:
         35:7f:cb:3b:5c:c1:6d:3b:ce:44:c1:38:f5:54:9c:93:70:bd:
         01:d0:36:99:e7:cb:69:85:d2:86:ed:6e:ed:96:21:b3:bd:a4:
         f2:20:7b:2b:b8:c8:3c:71:00:46:2e:22:bc:ff:4f:b2:50:e7:
         50:5c:19:6b:3f:bd:bc:b8:50:4c:ac:7e:1e:ef:e6:8e:56:15:
         8e:12:36:2d:75:4a:22:69:e6:1e:49:a0:af:3a:9a:b7:b5:6e:
         2d:a4:97:21:1e:d0:e5:3e:f9:e0:14:d1:4d:fd:6c:e0:44:e7:
         6f:fc:b6:19:5f:55:14:73:41:c2:94:75:a8:c1:b0:6e:72:3a:
         d1:5e:6c:50:61:41:fa:41:91:f0:6d:0c:8f:75:7b:71:e7:ec:
         32:a0:8f:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdXPPUvYFsEuHlIQ/UfpmnYnWlDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3OTI5MTMxNTk2RUI2NUFGMDQ2NTI0NjE1MTA0QkRG
MEVEQzc0RDAeFw0yMzA5MTMyMDE5MTNaFw0yNDA5MTEyMDI0MTNaMDMxMTAvBgNV
BAMTKDMzNThFRjYyNEQwMTgxMDYxNjZCRDRBRTFGNjI0QzE3QTI0RTc5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXVRXZyXBt2e6TUoEaCnRhkTQ
bZEZLO8kbtXKoek7CqAuHRwdU8nevy5YFl8QWfxYSALZ6YKPwYV9gviIR3SelO8C
mWQQAltYzyDtgBDUflmKvy92HYK8muPBwdvQlYY7qrfTnHKMmRSbQfs/jIsaHGwp
n0XpJg861xYqpH5Qpo+0kQd7TvPCSympRjLjxq5hQsa2jyccthg40+DmZ9AS0iez
uaFYOHowGOM4qlyM92cvCeUPtY8R7eAB7u9IfEN4AwstwV8d0vt0XhdbvmtZXutu
YrmYdrWPh4w758ZFmGAf73AsWz+eBcnBglBNHa1oDYEMIfLyxVqVT+s6zOX7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUM1jvYk0BgQYWa9SuH2JMF6JOeScwHwYDVR0j
BBgwFoAUxnkpExWW62WvBGUkYVEEvfDtx00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx
Z28vMS9DNjc5MjkxMzE1OTZFQjY1QUYwNDY1MjQ2MTUxMDRCREYwRURDNzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2NzkyOTEzMTU5NkVCNjVB
RjA0NjUyNDYxNTEwNEJERjBFREM3NEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMcmVqUzVqQnVhdmJGNXJFV3pvMlJhTUZ1YTU4WFNpVnVlZXJuTlU4cWdvLzEv
MzEzNDMzMmUzMjMwMzIyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/KcDANBgkqhkiG9w0BAQsFAAOCAQEAamYn
LqdlN9ZXvXkdQh2WHHSkxO3GNS8A2Ckn88+1QTfOINzEjoYuvmgPVlq+fIiXwhjp
R0ULGZUolMj8qd+2dp5MqrXl8Fp4RfTD8sYsk1k5jl7sQFoJRJEu1uqgMjPo+vJf
m+0J8amFPYZENX/LO1zBbTvORME49VSck3C9AdA2mefLaYXShu1u7ZYhs72k8iB7
K7jIPHEARi4ivP9PslDnUFwZaz+9vLhQTKx+Hu/mjlYVjhI2LXVKImnmHkmgrzqa
t7VuLaSXIR7Q5T754BTRTf1s4ETnb/y2GV9VFHNBwpR1qMGwbnI60V5sUGFB+kGR
8G0Mj3V7cefsMqCPFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org