Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa
File:                     3134332e3235352e312e302f32342d3234203d3e20323635313430.roa (raw, json)
Hash identifier:          MqB2hjzW+NIlrobDnlLcEC0MKCmZLEyLoq0wBxm9ARk=
Subject key identifier:   8C:22:14:B3:8B:47:5A:C2:78:AD:4B:51:1E:49:B1:55:1C:E5:35:11
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       733CA56B1E06D3D599BD503100C114F377738328
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:51 +0000
ROA not before:           Thu 04 Apr 2024 15:15:51 +0000
ROA not after:            Thu 03 Apr 2025 15:20:51 +0000
asID:                     265140
IP address blocks:        143.255.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3c:a5:6b:1e:06:d3:d5:99:bd:50:31:00:c1:14:f3:77:73:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:51 2024 GMT
            Not After : Apr  3 15:20:51 2025 GMT
        Subject: CN=8C2214B38B475AC278AD4B511E49B1551CE53511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:7e:f9:a2:8b:1d:90:53:68:f9:44:66:6d:
                    0a:b8:1d:5d:54:6f:8e:a8:26:0d:37:ee:a0:7d:f5:
                    55:21:d4:47:9c:97:c5:13:d7:d3:49:2d:43:43:47:
                    d8:df:58:b4:36:e0:db:ac:82:52:69:7f:5b:09:d3:
                    01:9b:77:71:1d:c8:a1:79:6d:89:91:c0:b7:f5:a3:
                    c4:de:57:cd:fe:ad:2d:23:c6:45:83:8f:5c:9f:4b:
                    53:df:98:6e:77:86:d9:ff:81:31:3b:31:0a:bc:82:
                    07:e5:7b:b0:be:56:19:4e:35:cc:7f:0b:82:0e:51:
                    98:0d:06:b4:56:23:7c:d3:2f:c4:de:58:7e:28:75:
                    8a:9e:ef:d8:98:06:2f:08:21:e1:4f:39:63:4f:bf:
                    bf:a9:28:ac:d0:9c:40:da:d6:cb:2e:4f:9e:59:48:
                    ab:da:2e:da:09:cc:8e:d4:a9:f0:c0:ff:a6:13:ec:
                    02:ab:b3:f5:79:73:66:f7:71:24:55:da:81:20:da:
                    7d:06:e2:53:a9:62:c9:9f:8a:37:ff:27:70:9e:19:
                    ee:bd:77:c2:b5:2f:dc:07:aa:01:78:60:9f:da:5c:
                    b1:7b:37:b4:3c:43:31:f5:39:b7:e0:fd:17:80:3d:
                    32:ed:da:ef:a9:75:46:aa:db:14:4e:04:73:df:30:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:14:B3:8B:47:5A:C2:78:AD:4B:51:1E:49:B1:55:1C:E5:35:11
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e312e302f32342d3234203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:66:fa:60:e8:40:9e:46:4f:0b:90:33:64:b9:56:23:65:
         76:b8:1d:0a:8f:bd:cb:d3:aa:50:d3:75:a8:41:eb:88:bb:9f:
         15:eb:6d:4a:e0:18:47:25:05:3f:f1:71:ba:fb:f7:51:39:20:
         8c:1b:f3:e3:a4:bb:1a:f3:fd:c4:ca:e9:43:95:1d:db:86:00:
         69:b1:eb:1e:e1:db:33:1e:b8:09:9f:d8:3f:eb:0b:09:38:4f:
         4a:55:aa:6d:65:fd:61:74:6d:33:39:a9:f5:63:7b:e8:6c:f9:
         fa:ab:1b:d8:ec:87:c5:ce:e3:7d:bc:32:af:14:b9:e0:c2:ce:
         8f:53:c6:00:65:a8:01:26:c8:66:56:95:7c:94:a6:46:44:7d:
         91:4b:a8:18:66:05:26:3a:30:3f:d2:91:df:0b:c5:01:67:fd:
         3b:8c:ea:44:73:a9:25:18:cd:d9:36:e3:8d:91:09:02:fc:a3:
         e3:95:1c:fd:11:76:da:6a:da:09:4b:0a:47:7e:78:9d:c3:9a:
         91:43:17:73:f6:2e:69:c1:2c:55:68:5a:fa:23:b5:4f:79:47:
         00:94:c2:dd:da:81:45:25:75:68:d5:24:5d:f1:73:b2:4d:4d:
         3a:14:81:4d:b8:46:90:63:31:1d:5c:c0:2c:e2:2a:fe:fc:77:
         cf:85:4b:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUczylax4G09WZvVAxAMEU83dzgygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI3NEQxNDA5RTAyMEU5RkM0NEFDRDI4MjFERTkxMzhG
OTRERDQxNTAeFw0yNDA0MDQxNTE1NTFaFw0yNTA0MDMxNTIwNTFaMDMxMTAvBgNV
BAMTKDhDMjIxNEIzOEI0NzVBQzI3OEFENEI1MTFFNDlCMTU1MUNFNTM1MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoH75oosdkFNo+URmbQq4HV1U
b46oJg037qB99VUh1Eecl8UT19NJLUNDR9jfWLQ24NusglJpf1sJ0wGbd3EdyKF5
bYmRwLf1o8TeV83+rS0jxkWDj1yfS1PfmG53htn/gTE7MQq8ggfle7C+VhlONcx/
C4IOUZgNBrRWI3zTL8TeWH4odYqe79iYBi8IIeFPOWNPv7+pKKzQnEDa1ssuT55Z
SKvaLtoJzI7UqfDA/6YT7AKrs/V5c2b3cSRV2oEg2n0G4lOpYsmfijf/J3CeGe69
d8K1L9wHqgF4YJ/aXLF7N7Q8QzH1Obfg/ReAPTLt2u+pdUaq2xROBHPfMF43AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjCIUs4tHWsJ4rUtRHkmxVRzlNREwHwYDVR0j
BBgwFoAUq3TRQJ4CDp/ESs0oId6ROPlN1BUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE
Z24vMS9BQjc0RDE0MDlFMDIwRTlGQzQ0QUNEMjgyMURFOTEzOEY5NERENDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNzREMTQwOUUwMjBFOUZD
NDRBQ0QyODIxREU5MTM4Rjk0REQ0MTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuTTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj/8BMA0GCSqGSIb3DQEBCwUAA4IBAQCOOmb6YOhA
nkZPC5AzZLlWI2V2uB0Kj73L06pQ03WoQeuIu58V621K4BhHJQU/8XG6+/dROSCM
G/PjpLsa8/3EyulDlR3bhgBpsese4dszHrgJn9g/6wsJOE9KVaptZf1hdG0zOan1
Y3vobPn6qxvY7IfFzuN9vDKvFLngws6PU8YAZagBJshmVpV8lKZGRH2RS6gYZgUm
OjA/0pHfC8UBZ/07jOpEc6klGM3ZNuONkQkC/KPjlRz9EXbaatoJSwpHfnidw5qR
Qxdz9i5pwSxVaFr6I7VPeUcAlMLd2oFFJXVo1SRd8XOyTU06FIFNuEaQYzEdXMAs
4ir+/HfPhUs7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org