Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa
File:                     3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          ExCseDanMdWZYy9NH/nZd0IR9BxoNG0mGKk95aTDLug=
Subject key identifier:   7E:AD:5B:1B:49:ED:4E:13:E6:80:A7:19:E4:34:54:17:91:2B:8A:32
Certificate issuer:       /CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
Certificate serial:       601B5D344989C50F63B0F0D1154BDC9D914F7993
Authority key identifier: 31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa
Signing time:             Thu 05 Jan 2023 14:20:03 +0000
ROA not before:           Thu 05 Jan 2023 14:15:03 +0000
ROA not after:            Thu 04 Jan 2024 14:20:03 +0000
asID:                     52544
IP address blocks:        143.202.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:5d:34:49:89:c5:0f:63:b0:f0:d1:15:4b:dc:9d:91:4f:79:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
        Validity
            Not Before: Jan  5 14:15:03 2023 GMT
            Not After : Jan  4 14:20:03 2024 GMT
        Subject: CN=7EAD5B1B49ED4E13E680A719E4345417912B8A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:5c:45:80:88:a6:d4:f6:78:c5:38:e8:7e:
                    76:28:f2:ad:b8:fd:96:de:66:7e:c2:d0:f8:6c:ae:
                    f0:52:a0:49:1c:e5:0a:37:ad:89:c0:92:a9:f1:28:
                    4d:2a:55:90:c5:e0:19:7d:64:f0:4a:8e:c2:cd:0e:
                    bc:9f:da:87:68:61:ed:ca:2b:ed:d9:7e:d7:bc:d3:
                    f4:a1:f2:89:ea:1d:83:2f:8b:17:3d:79:09:1a:a4:
                    50:1a:73:b8:e6:49:6d:37:c6:1a:cb:8c:9a:b4:e5:
                    a5:c4:55:9d:2b:e4:68:ac:2f:81:2f:e1:9f:d7:6c:
                    32:ae:77:0b:c1:75:a0:27:d9:a1:86:38:26:6e:90:
                    b3:ad:58:c4:6e:f1:e8:07:da:76:13:5b:6f:7b:a8:
                    43:b4:0d:12:72:c1:19:d7:0e:55:4f:e7:f7:58:e1:
                    c4:2b:f5:da:ed:fe:80:88:85:11:fc:53:31:c1:52:
                    b4:2f:98:92:4a:9c:20:f8:fb:cb:e7:77:a8:07:42:
                    65:a0:c1:68:c6:fc:1f:45:c8:be:4d:45:80:9a:da:
                    26:6b:00:43:16:fe:60:3d:03:5b:da:80:a6:c3:56:
                    1c:ef:db:1a:e3:95:ba:76:78:f8:3c:f8:86:ce:d6:
                    b5:05:b0:8e:95:e6:c2:e4:db:81:ae:6f:51:5a:66:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:5B:1B:49:ED:4E:13:E6:80:A7:19:E4:34:54:17:91:2B:8A:32
            X509v3 Authority Key Identifier:
                keyid:31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:6a:01:c3:0e:24:1e:97:60:68:9f:3c:e4:b3:93:82:18:b7:
         29:a0:44:f0:4d:84:03:cd:c9:93:69:16:f1:eb:31:dd:71:57:
         41:59:2b:ae:e9:14:c2:93:f5:58:96:dc:0f:19:54:30:1f:3a:
         66:72:46:bc:e7:e0:b2:a5:1f:a3:1e:eb:f6:32:a8:fd:db:fc:
         83:c8:59:5f:ca:bf:7f:86:d9:eb:55:6e:ed:be:24:8f:2a:c3:
         7c:48:78:fc:55:51:f8:19:74:78:91:8a:a5:9d:fc:a3:f0:c1:
         d3:2e:6c:9e:90:57:6b:c6:90:9e:40:64:72:b9:85:b9:07:22:
         61:39:a2:fb:15:f0:79:f8:50:2f:07:1e:31:d7:ff:aa:94:9d:
         bb:82:69:c0:38:9d:c5:8d:fe:02:c5:dc:83:02:a6:09:dd:95:
         c0:ca:de:ba:21:e9:62:ce:00:b9:92:65:d8:1c:e2:ca:68:d4:
         2a:99:cf:da:15:96:1f:f6:a7:86:e7:88:ab:16:9f:8f:2d:6d:
         71:51:8c:5b:94:7f:f4:4a:52:0e:5a:7c:23:fe:27:fd:8a:93:
         c5:88:5e:83:60:09:88:b1:c2:e6:cd:31:dd:77:70:54:a3:c0:
         cd:28:ef:cb:88:d8:2f:b0:bd:db:2d:50:ec:18:98:d8:90:8a:
         9c:b2:2e:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYBtdNEmJxQ9jsPDRFUvcnZFPeZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2MzBBN0E0MkM1NjkwOTU2ODJFRThGMzJGMTlEQkZF
NEJEODFGQzAeFw0yMzAxMDUxNDE1MDNaFw0yNDAxMDQxNDIwMDNaMDMxMTAvBgNV
BAMTKDdFQUQ1QjFCNDlFRDRFMTNFNjgwQTcxOUU0MzQ1NDE3OTEyQjhBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnlxFgIim1PZ4xTjofnYo8q24
/ZbeZn7C0PhsrvBSoEkc5Qo3rYnAkqnxKE0qVZDF4Bl9ZPBKjsLNDryf2odoYe3K
K+3Zfte80/Sh8onqHYMvixc9eQkapFAac7jmSW03xhrLjJq05aXEVZ0r5GisL4Ev
4Z/XbDKudwvBdaAn2aGGOCZukLOtWMRu8egH2nYTW297qEO0DRJywRnXDlVP5/dY
4cQr9drt/oCIhRH8UzHBUrQvmJJKnCD4+8vnd6gHQmWgwWjG/B9FyL5NRYCa2iZr
AEMW/mA9A1vagKbDVhzv2xrjlbp2ePg8+IbO1rUFsI6V5sLk24Gub1FaZu3FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfq1bG0ntThPmgKcZ5DRUF5ErijIwHwYDVR0j
BBgwFoAUMWMKekLFaQlWgu6PMvGdv+S9gfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1
YzkvMC8zMTYzMEE3QTQyQzU2OTA5NTY4MkVFOEYzMkYxOURCRkU0QkQ4MUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxNjMwQTdBNDJDNTY5MDk1
NjgyRUU4RjMyRjE5REJGRTRCRDgxRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFY05Ibkd0Zml3eDZFeDRXMzRIUWpxSnkyajQxcEZQZ29idVpVYzRINWM5LzAv
MzEzNDMzMmUzMjMwMzIyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPytwwDQYJKoZIhvcNAQELBQADggEBADFqAcMO
JB6XYGifPOSzk4IYtymgRPBNhAPNyZNpFvHrMd1xV0FZK67pFMKT9ViW3A8ZVDAf
OmZyRrzn4LKlH6Me6/YyqP3b/IPIWV/Kv3+G2etVbu2+JI8qw3xIePxVUfgZdHiR
iqWd/KPwwdMubJ6QV2vGkJ5AZHK5hbkHImE5ovsV8Hn4UC8HHjHX/6qUnbuCacA4
ncWN/gLF3IMCpgndlcDK3roh6WLOALmSZdgc4spo1CqZz9oVlh/2p4bniKsWn48t
bXFRjFuUf/RKUg5afCP+J/2Kk8WIXoNgCYixwubNMd13cFSjwM0o78uI2C+wvdst
UOwYmNiQipyyLiY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org