Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa
File:                     3134332e3235352e312e302f32342d3234203d3e20323635313430.roa (raw, json)
Hash identifier:          NOhwBa8bYlodWm1PYT7PUS6PaunnxYQIjhifWCbhlC4=
Subject key identifier:   B2:A0:14:E9:4C:86:2E:14:09:06:A9:77:5B:56:52:21:51:B3:A8:C5
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       544A7991935F591BDFB4861AEB46938C2F5C0EE2
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:40:47 +0000
ROA not before:           Thu 22 Feb 2024 13:35:47 +0000
ROA not after:            Thu 20 Feb 2025 13:40:47 +0000
asID:                     265140
IP address blocks:        143.255.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4a:79:91:93:5f:59:1b:df:b4:86:1a:eb:46:93:8c:2f:5c:0e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:35:47 2024 GMT
            Not After : Feb 20 13:40:47 2025 GMT
        Subject: CN=B2A014E94C862E140906A9775B56522151B3A8C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:6b:7f:8b:c8:59:3d:1f:4f:59:e8:9c:6a:
                    9c:a2:a5:15:57:01:6e:2f:bd:41:04:43:13:9d:8e:
                    43:03:6e:0a:35:ab:de:12:e8:4f:f6:40:56:c2:08:
                    af:06:f9:5c:bf:ad:83:29:f5:69:3c:1f:9f:1a:a1:
                    52:b4:e8:2d:dd:46:1a:a0:67:3c:97:f7:68:cd:2b:
                    f8:d1:4f:bc:19:ad:82:a2:27:66:4c:7e:c5:9d:1f:
                    94:b9:52:dc:85:dd:25:40:7e:81:2e:32:d4:c9:4d:
                    6e:28:ac:8b:30:ed:fa:fc:db:40:ed:62:b7:1a:f9:
                    c0:12:75:d1:4a:b4:ac:db:42:8c:8d:7b:16:17:fe:
                    7d:67:d3:87:5f:25:27:ac:04:47:44:db:27:db:9c:
                    6f:63:a8:bd:70:04:38:5e:55:ef:ee:b7:f0:58:94:
                    9d:1c:9f:af:94:52:6b:80:29:2e:75:6c:e3:73:ec:
                    02:fc:db:7e:1d:a0:6e:1a:2c:f1:73:1c:9f:e0:93:
                    6a:48:b4:16:a2:36:5b:76:a1:a8:c6:93:7c:f9:59:
                    a6:50:13:4f:cb:4b:b5:18:71:32:96:cc:3b:1a:af:
                    b3:6b:95:20:02:9d:23:3b:44:b9:47:33:6d:41:ce:
                    25:8c:0d:22:6c:92:d7:94:3d:24:17:da:7a:4c:29:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:14:E9:4C:86:2E:14:09:06:A9:77:5B:56:52:21:51:B3:A8:C5
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:37:33:f2:5f:fe:3f:c7:88:f9:04:1a:6a:59:09:b0:ce:
         2c:b7:e9:7c:b9:18:f0:68:8f:85:6e:fd:5e:a8:9b:58:81:73:
         4b:f3:df:0b:a8:e0:d2:13:d2:dd:57:ed:d7:d7:08:79:32:e5:
         d0:71:bf:39:47:b0:57:cf:9c:f7:dc:c3:d6:c3:0e:4b:81:f1:
         17:2d:a0:3a:9d:d5:c6:c9:4b:17:7a:88:61:06:70:83:ab:ec:
         72:fb:e6:47:65:a1:50:bd:5a:51:1e:e9:99:b3:7b:39:3b:f1:
         75:24:18:88:d7:c6:6a:a5:05:7a:ed:09:7b:99:dc:98:12:33:
         0d:cc:d0:c3:62:0b:c9:39:3b:60:07:b2:e8:b5:ef:c5:96:33:
         0d:c4:2f:de:0b:b5:5a:e8:f1:c2:d7:fc:21:40:a5:b9:94:38:
         b4:68:89:e5:eb:65:d1:32:e4:29:1f:d3:8e:b9:b0:d8:f1:31:
         10:b2:6b:d1:d1:ce:15:4a:bf:28:b7:63:47:fa:e0:2e:74:67:
         60:e6:08:80:0e:ab:05:7b:7b:a8:99:c0:cc:ac:bb:00:31:9f:
         65:df:52:2d:0f:26:d7:3b:c1:fc:28:09:cb:d5:af:31:88:3d:
         6e:47:de:fa:5c:9c:64:b5:38:35:09:5a:21:bb:5c:b4:f7:68:
         11:2d:6a:9c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVEp5kZNfWRvftIYa60aTjC9cDuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNkVCODU1Q0QyMzlEQ0Q0RkU2NDFDRTUzQjYxQkE0
MDZBNkFCODAeFw0yNDAyMjIxMzM1NDdaFw0yNTAyMjAxMzQwNDdaMDMxMTAvBgNV
BAMTKEIyQTAxNEU5NEM4NjJFMTQwOTA2QTk3NzVCNTY1MjIxNTFCM0E4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGGt/i8hZPR9PWeicapyipRVX
AW4vvUEEQxOdjkMDbgo1q94S6E/2QFbCCK8G+Vy/rYMp9Wk8H58aoVK06C3dRhqg
ZzyX92jNK/jRT7wZrYKiJ2ZMfsWdH5S5UtyF3SVAfoEuMtTJTW4orIsw7fr820Dt
Yrca+cASddFKtKzbQoyNexYX/n1n04dfJSesBEdE2yfbnG9jqL1wBDheVe/ut/BY
lJ0cn6+UUmuAKS51bONz7AL8234doG4aLPFzHJ/gk2pItBaiNlt2oajGk3z5WaZQ
E0/LS7UYcTKWzDsar7NrlSACnSM7RLlHM21BziWMDSJskteUPSQX2npMKfhpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsqAU6UyGLhQJBql3W1ZSIVGzqMUwHwYDVR0j
BBgwFoAUURbrhVzSOdzU/mQc5TthukBqargwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE
Z24vMC81MTE2RUI4NTVDRDIzOURDRDRGRTY0MUNFNTNCNjFCQTQwNkE2QUI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxMTZFQjg1NUNEMjM5RENE
NEZFNjQxQ0U1M0I2MUJBNDA2QTZBQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuTTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj/8BMA0GCSqGSIb3DQEBCwUAA4IBAQCcIDcz8l/+
P8eI+QQaalkJsM4st+l8uRjwaI+Fbv1eqJtYgXNL898LqODSE9LdV+3X1wh5MuXQ
cb85R7BXz5z33MPWww5LgfEXLaA6ndXGyUsXeohhBnCDq+xy++ZHZaFQvVpRHumZ
s3s5O/F1JBiI18ZqpQV67Ql7mdyYEjMNzNDDYgvJOTtgB7Lote/FljMNxC/eC7Va
6PHC1/whQKW5lDi0aInl62XRMuQpH9OOubDY8TEQsmvR0c4VSr8ot2NH+uAudGdg
5giADqsFe3uomcDMrLsAMZ9l31ItDybXO8H8KAnL1a8xiD1uR976XJxktTg1CVoh
u1y092gRLWqc
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:10 2024 by rpki-client on console-ams.rpki-client.org