Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3332203d3e203533313831.roa
File:                     3134332e302e32342e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          4GrxXLQ3bOV2W6PhvjtOBN+tsBjTYGwbCOsJQGFFpNM=
Subject key identifier:   D8:6E:D1:87:FF:10:DA:DB:4A:A7:56:5B:92:2A:20:F5:77:E4:62:22
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       071C784494651938E24836356B4F751C1CCFC849
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3332203d3e203533313831.roa
Signing time:             Wed 08 Mar 2023 13:23:28 +0000
ROA not before:           Wed 08 Mar 2023 13:18:28 +0000
ROA not after:            Wed 06 Mar 2024 13:23:28 +0000
asID:                     53181
IP address blocks:        143.0.24.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1c:78:44:94:65:19:38:e2:48:36:35:6b:4f:75:1c:1c:cf:c8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Mar  8 13:18:28 2023 GMT
            Not After : Mar  6 13:23:28 2024 GMT
        Subject: CN=D86ED187FF10DADB4AA7565B922A20F577E46222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:d3:ea:e3:a6:de:4e:db:5e:f1:f3:1e:b9:
                    71:df:08:7f:88:31:4e:fa:e5:03:14:13:bd:5e:07:
                    f1:4f:9a:08:a3:3f:5d:39:84:9a:09:b5:70:86:84:
                    dd:cc:3e:df:f1:10:ed:29:1c:80:29:3c:ed:92:56:
                    07:40:f2:8d:fc:de:36:0a:29:9e:93:15:16:d4:e1:
                    95:5d:7c:96:73:e6:38:74:b9:27:8a:e7:6d:c3:73:
                    4c:36:ba:0e:b7:56:53:d4:ff:e2:a9:34:32:d0:4e:
                    c8:2c:40:53:dc:ca:02:5b:27:46:d8:4e:f5:bc:8a:
                    46:01:aa:f6:8c:32:5d:f1:bc:02:a2:5c:8b:f4:dc:
                    26:df:0e:5a:05:48:ed:89:fe:f8:ca:5e:32:ce:33:
                    30:be:c6:70:f9:8f:52:f2:ee:67:c3:50:62:d6:98:
                    8f:5a:da:09:b2:10:6e:cc:d7:23:5b:8f:0f:7a:76:
                    3b:9f:b7:cd:c5:85:cf:4a:1e:b2:2c:9a:68:5a:8d:
                    89:86:22:26:7c:3d:02:d4:d6:df:08:3d:23:fc:fb:
                    42:46:28:96:6a:a0:69:76:fc:79:a9:80:e9:c3:83:
                    4c:f2:45:74:44:c6:43:2e:44:38:f9:b7:79:8e:b4:
                    0c:81:60:55:45:16:59:74:16:ff:a3:a4:7e:fb:f3:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:D1:87:FF:10:DA:DB:4A:A7:56:5B:92:2A:20:F5:77:E4:62:22
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:48:2e:63:a3:7e:d5:fb:04:a2:64:34:0a:1f:06:c1:79:37:
         e8:65:0b:d1:22:20:fd:ee:c9:04:33:22:fd:1c:c1:08:2f:d6:
         dc:1a:24:ec:f0:62:70:48:29:2b:64:25:77:a9:cd:30:a8:d5:
         4f:cd:93:7e:5a:b8:78:de:21:6c:f5:d3:c1:0a:50:5d:e2:55:
         54:bc:fe:59:ce:97:fe:b4:55:33:12:65:21:67:bd:a0:f8:e7:
         ff:3b:09:9b:45:03:39:80:56:fb:98:b1:8d:ec:eb:3c:63:7a:
         0a:57:3e:42:81:80:ee:bd:98:f0:6e:49:26:48:98:8b:1b:d5:
         92:ad:55:0a:c0:53:24:c6:cd:41:8a:24:6a:2d:8d:b4:5a:ba:
         a5:b5:72:06:92:4f:6f:36:42:1d:7e:39:82:9b:d1:c3:5a:db:
         a6:ec:f6:17:9f:01:2c:9f:cd:4c:37:d3:b8:c9:7a:f1:e9:b0:
         36:c7:09:c1:9b:8e:d1:60:f4:f0:c6:e5:03:e7:81:1b:1f:ab:
         50:2c:b7:35:41:93:58:d6:0d:99:77:b7:18:a2:7e:64:72:61:
         f8:d8:b7:ac:42:61:e0:d9:09:39:ae:35:55:be:0c:de:53:ef:
         7e:4c:f0:1c:d5:af:f6:64:21:e9:fa:68:40:ed:9b:00:e8:93:
         13:d2:ce:b5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBxx4RJRlGTjiSDY1a091HBzPyEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE2M0MwRUU2OEQ3MTRGRDZFQjVGMTczOUM3RkQwMDQ1
QzRDMTIyODAeFw0yMzAzMDgxMzE4MjhaFw0yNDAzMDYxMzIzMjhaMDMxMTAvBgNV
BAMTKEQ4NkVEMTg3RkYxMERBREI0QUE3NTY1QjkyMkEyMEY1NzdFNDYyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8tPq46beTtte8fMeuXHfCH+I
MU765QMUE71eB/FPmgijP105hJoJtXCGhN3MPt/xEO0pHIApPO2SVgdA8o383jYK
KZ6TFRbU4ZVdfJZz5jh0uSeK523Dc0w2ug63VlPU/+KpNDLQTsgsQFPcygJbJ0bY
TvW8ikYBqvaMMl3xvAKiXIv03CbfDloFSO2J/vjKXjLOMzC+xnD5j1Ly7mfDUGLW
mI9a2gmyEG7M1yNbjw96djuft83Fhc9KHrIsmmhajYmGIiZ8PQLU1t8IPSP8+0JG
KJZqoGl2/HmpgOnDg0zyRXRExkMuRDj5t3mOtAyBYFVFFll0Fv+jpH778xUnAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU2G7Rh/8Q2ttKp1Zbkiog9XfkYiIwHwYDVR0j
BBgwFoAUimPA7mjXFP1utfFznH/QBFxMEigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMC84QTYzQzBFRTY4RDcxNEZENkVCNUYxNzM5QzdGRDAwNDVDNEMxMjI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBNjNDMEVFNjhENzE0RkQ2
RUI1RjE3MzlDN0ZEMDA0NUM0QzEyMjguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuNmcxa1B1RDU4QmVTVmtYN0d1NFNLaTVRV1h5MTlvVHB2cHZpM2Mza2p0LzAv
MzEzNDMzMmUzMDJlMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1MzMzMTM4
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKPABgwDQYJKoZIhvcNAQELBQADggEBABhILmOjftX7BKJk
NAofBsF5N+hlC9EiIP3uyQQzIv0cwQgv1twaJOzwYnBIKStkJXepzTCo1U/Nk35a
uHjeIWz108EKUF3iVVS8/lnOl/60VTMSZSFnvaD45/87CZtFAzmAVvuYsY3s6zxj
egpXPkKBgO69mPBuSSZImIsb1ZKtVQrAUyTGzUGKJGotjbRauqW1cgaST282Qh1+
OYKb0cNa26bs9hefASyfzUw307jJevHpsDbHCcGbjtFg9PDG5QPngRsfq1AstzVB
k1jWDZl3txiifmRyYfjYt6xCYeDZCTmuNVW+DN5T735M8BzVr/ZkIen6aEDtmwDo
kxPSzrU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org