Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3232203d3e20323634303235.roa
File:                     3134332e3133372e33322e302f32322d3232203d3e20323634303235.roa (raw, json)
Hash identifier:          GYF4koxQtDUGS3lz+XGOtfUc1ex0+2+qIwwh5epPcBY=
Subject key identifier:   67:93:A2:7F:25:BE:7A:2D:E2:C0:DA:6D:A5:FA:A2:9D:6C:76:6E:14
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       7D4EA3AAA6D6774B9A2727C16342716725749071
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3232203d3e20323634303235.roa
Signing time:             Fri 08 Mar 2024 20:55:38 +0000
ROA not before:           Fri 08 Mar 2024 20:50:38 +0000
ROA not after:            Fri 07 Mar 2025 20:55:38 +0000
asID:                     264025
IP address blocks:        143.137.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4e:a3:aa:a6:d6:77:4b:9a:27:27:c1:63:42:71:67:25:74:90:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar  8 20:50:38 2024 GMT
            Not After : Mar  7 20:55:38 2025 GMT
        Subject: CN=6793A27F25BE7A2DE2C0DA6DA5FAA29D6C766E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:2e:b0:e0:25:5c:7a:21:5a:3e:7f:41:9e:
                    71:4e:9e:1d:8c:00:af:f0:b0:36:89:9f:75:09:50:
                    8b:13:c9:be:ae:c0:5c:6a:b8:e9:63:12:d3:7a:a1:
                    24:fc:30:94:34:aa:46:ce:1f:34:fb:de:db:18:98:
                    88:6a:cb:4b:cd:61:12:2a:02:d8:aa:71:e3:e4:aa:
                    24:e9:07:f6:4e:cb:c4:d1:5e:24:7e:97:b3:8b:35:
                    ab:e5:10:55:6f:7a:5f:17:61:ef:85:d4:21:c7:cc:
                    0b:64:47:cd:b7:db:1d:cd:7f:a5:a7:5c:d4:f9:87:
                    57:30:99:b7:e9:2f:12:9e:24:75:4d:f8:5c:f3:e5:
                    ed:4f:7b:87:91:cb:b1:82:15:87:9f:95:3d:74:78:
                    e1:a9:c2:c5:a9:06:9f:4b:fc:85:cb:b7:f2:01:2d:
                    87:5a:48:cc:e5:b5:ce:1d:2b:10:b4:e6:ce:88:33:
                    3a:d2:11:30:3f:ad:10:b9:f0:68:f0:51:c9:ab:35:
                    e1:e2:8d:81:ba:4b:75:ed:78:ff:20:28:12:5b:ef:
                    66:e0:82:bb:f2:ff:81:4b:ae:95:a1:31:30:2a:58:
                    67:64:80:b2:7e:01:cf:80:96:5d:4a:0e:2f:94:e6:
                    61:84:9b:28:6b:a5:49:3f:86:f0:ee:40:fe:c2:4b:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:A2:7F:25:BE:7A:2D:E2:C0:DA:6D:A5:FA:A2:9D:6C:76:6E:14
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3232203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:05:de:32:5b:f4:f9:86:bf:f9:fa:2f:f1:6b:bc:dc:10:
         1b:2b:f2:db:0f:fe:da:11:a5:39:9a:f9:45:33:47:2f:03:cb:
         17:33:e8:c5:61:2e:db:8e:8c:73:e3:c9:a7:47:0c:34:0b:11:
         e5:ff:11:24:94:a9:69:97:ba:fa:87:82:11:9f:f8:0f:18:01:
         86:19:cb:e3:1d:64:26:5e:ce:04:ce:a8:0a:11:e9:90:8c:13:
         49:b1:8f:4a:6a:11:fe:2c:be:4f:33:f1:b1:af:a6:53:23:0e:
         e5:ac:a0:2e:80:2d:ee:47:ce:a8:18:22:c8:c7:6f:3f:f4:ca:
         20:62:71:57:82:8e:1d:17:bf:e9:ef:56:60:80:fa:7e:ed:2b:
         a2:a1:33:8a:68:6e:bf:4d:78:0c:fa:49:e7:4e:0a:6a:b4:49:
         35:ac:8d:bb:95:68:88:fa:de:f6:d7:9b:0f:61:db:d0:47:47:
         2a:ad:2c:bc:46:be:81:7e:6b:b9:c4:58:08:ad:b8:e9:6c:57:
         18:47:85:96:aa:b5:83:ef:bb:ec:84:4c:78:51:b0:a4:f5:73:
         d1:ce:51:67:2b:f4:e7:05:de:22:d3:4f:d7:e5:25:42:09:0b:
         65:23:8f:42:b6:67:83:93:f0:44:22:2e:d0:b6:ab:93:d6:8e:
         cc:17:c2:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfU6jqqbWd0uaJyfBY0JxZyV0kHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI3Q0EyRUE0RjczOEYwMTM3RTUwQjIyQkFEOTU3QzVF
NkY1QUEwNDAeFw0yNDAzMDgyMDUwMzhaFw0yNTAzMDcyMDU1MzhaMDMxMTAvBgNV
BAMTKDY3OTNBMjdGMjVCRTdBMkRFMkMwREE2REE1RkFBMjlENkM3NjZFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84i6w4CVceiFaPn9BnnFOnh2M
AK/wsDaJn3UJUIsTyb6uwFxquOljEtN6oST8MJQ0qkbOHzT73tsYmIhqy0vNYRIq
AtiqcePkqiTpB/ZOy8TRXiR+l7OLNavlEFVvel8XYe+F1CHHzAtkR8232x3Nf6Wn
XNT5h1cwmbfpLxKeJHVN+Fzz5e1Pe4eRy7GCFYeflT10eOGpwsWpBp9L/IXLt/IB
LYdaSMzltc4dKxC05s6IMzrSETA/rRC58GjwUcmrNeHijYG6S3XteP8gKBJb72bg
grvy/4FLrpWhMTAqWGdkgLJ+Ac+All1KDi+U5mGEmyhrpUk/hvDuQP7CSztnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ5OifyW+ei3iwNptpfqinWx2bhQwHwYDVR0j
BBgwFoAUEnyi6k9zjwE35QsiutlXxeb1qgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC8xMjdDQTJFQTRGNzM4RjAxMzdFNTBCMjJCQUQ5NTdDNUU2RjVBQTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyN0NBMkVBNEY3MzhGMDEz
N0U1MEIyMkJBRDk1N0M1RTZGNUFBMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzEzNDMzMmUzMTMzMzcyZTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPiSAwDQYJKoZIhvcNAQELBQADggEBAJ0vBd4y
W/T5hr/5+i/xa7zcEBsr8tsP/toRpTma+UUzRy8Dyxcz6MVhLtuOjHPjyadHDDQL
EeX/ESSUqWmXuvqHghGf+A8YAYYZy+MdZCZezgTOqAoR6ZCME0mxj0pqEf4svk8z
8bGvplMjDuWsoC6ALe5HzqgYIsjHbz/0yiBicVeCjh0Xv+nvVmCA+n7tK6KhM4po
br9NeAz6SedOCmq0STWsjbuVaIj63vbXmw9h29BHRyqtLLxGvoF+a7nEWAituOls
VxhHhZaqtYPvu+yETHhRsKT1c9HOUWcr9OcF3iLTT9flJUIJC2Ujj0K2Z4OT8EQi
LtC2q5PWjswXwlo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org