Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32332d3233203d3e20323634303437.roa
File:                     3134332e3133372e3232322e302f32332d3233203d3e20323634303437.roa (raw, json)
Hash identifier:          SX2d+N/othiXXZbtqhyA+Kja2rVGM2ULEFrBjwy6+5g=
Subject key identifier:   6E:48:3E:11:51:41:FF:AD:49:EE:12:51:96:1B:92:DB:0C:28:7F:A0
Certificate issuer:       /CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
Certificate serial:       3C13702B5290EF45AF077F7AAC1B45293D67CF4E
Authority key identifier: A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32332d3233203d3e20323634303437.roa
Signing time:             Thu 18 Jul 2024 19:26:11 +0000
ROA not before:           Thu 18 Jul 2024 19:21:11 +0000
ROA not after:            Thu 17 Jul 2025 19:26:11 +0000
asID:                     264047
IP address blocks:        143.137.222.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:70:2b:52:90:ef:45:af:07:7f:7a:ac:1b:45:29:3d:67:cf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Validity
            Not Before: Jul 18 19:21:11 2024 GMT
            Not After : Jul 17 19:26:11 2025 GMT
        Subject: CN=6E483E115141FFAD49EE1251961B92DB0C287FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:c0:e8:54:1f:d3:60:d9:5f:30:c3:fb:c3:
                    6d:77:38:62:86:3f:75:cb:ae:3d:35:f5:28:7b:c1:
                    eb:8d:df:74:14:3a:cf:a6:e9:63:2a:fb:a2:6b:c4:
                    a7:cb:0f:d8:5a:14:7a:c1:e6:b3:e5:3b:6a:cf:22:
                    d4:6e:24:4f:5f:c8:ea:42:ab:55:6b:d9:0a:7a:18:
                    63:8f:70:2d:6d:03:1e:67:23:52:66:05:7f:9d:76:
                    a9:d8:51:73:7c:6e:29:c8:1b:ce:95:59:3b:29:de:
                    37:4b:fe:7d:40:da:89:38:f6:ee:3c:5e:d6:85:6a:
                    80:ae:9c:6d:94:28:aa:84:3c:39:c4:bb:37:4c:cb:
                    73:1c:97:8f:bb:50:d6:09:92:84:e4:ae:0e:fc:8f:
                    b0:0b:85:f1:75:29:00:66:af:ba:e2:55:1a:38:3b:
                    ca:dc:db:53:a4:59:12:a1:5e:47:6b:fa:4a:66:f0:
                    f2:5f:27:21:28:ca:86:4d:d0:f3:c7:85:86:38:ca:
                    60:0c:11:66:fc:0a:ad:4b:ad:10:c0:30:a6:6c:3e:
                    d2:e4:f9:4a:fd:d2:12:7b:f2:84:6b:70:46:c5:18:
                    f1:3e:9d:37:6c:81:66:aa:c4:eb:3e:39:a7:8d:68:
                    29:05:fe:3b:3e:7d:a2:9a:f2:87:c0:53:89:42:67:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:48:3E:11:51:41:FF:AD:49:EE:12:51:96:1B:92:DB:0C:28:7F:A0
            X509v3 Authority Key Identifier:
                keyid:A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32332d3233203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:5d:74:73:c8:25:bc:6c:ff:c5:95:09:74:fd:02:88:e5:
         95:1f:4b:2f:30:b3:a5:01:fa:be:00:1f:5f:51:a0:0b:24:f7:
         e7:70:14:a6:c0:c8:be:29:d3:a8:64:1a:80:e9:1d:b5:3c:95:
         32:86:9e:d9:fe:92:a1:3d:dd:8d:d2:e0:0b:fe:2b:f0:b1:7c:
         25:be:b7:f2:eb:e3:01:00:a9:bb:c0:b5:45:07:a6:b7:23:25:
         53:3b:31:8f:b9:62:12:15:fe:c1:04:d3:7a:b4:56:cd:5f:ce:
         6d:e7:aa:b9:8a:38:57:f3:12:0e:1d:22:00:30:3f:27:1b:a6:
         8e:31:c2:9f:d6:f2:1b:9f:ec:d2:f1:9b:98:1f:04:87:7c:d5:
         92:d3:8b:7c:bb:e5:78:6d:64:09:dd:21:3e:ba:5b:cc:0e:bf:
         97:90:b0:dd:b7:71:ab:6b:98:ad:de:46:e8:10:d5:b0:76:0d:
         dc:6e:d6:47:7c:50:a7:ac:3b:5b:a3:9e:c4:51:f8:30:71:f9:
         6d:4e:f8:b8:a6:d2:6a:b3:26:6a:81:bb:82:6e:06:a9:00:f9:
         70:80:54:23:a8:5c:d5:ea:d3:bf:32:33:ab:86:d4:67:2d:fc:
         63:dc:5e:81:15:d3:09:72:85:69:3b:7b:7d:5d:40:ba:29:e6:
         57:ea:af:82
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPBNwK1KQ70WvB396rBtFKT1nz04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNzU1NTY2QjRCREZBMEU3NThCNDJEM0Q1Rjk5QTZG
MDc1QTNDNTAeFw0yNDA3MTgxOTIxMTFaFw0yNTA3MTcxOTI2MTFaMDMxMTAvBgNV
BAMTKDZFNDgzRTExNTE0MUZGQUQ0OUVFMTI1MTk2MUI5MkRCMEMyODdGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNX8DoVB/TYNlfMMP7w213OGKG
P3XLrj019Sh7weuN33QUOs+m6WMq+6JrxKfLD9haFHrB5rPlO2rPItRuJE9fyOpC
q1Vr2Qp6GGOPcC1tAx5nI1JmBX+ddqnYUXN8binIG86VWTsp3jdL/n1A2ok49u48
XtaFaoCunG2UKKqEPDnEuzdMy3Mcl4+7UNYJkoTkrg78j7ALhfF1KQBmr7riVRo4
O8rc21OkWRKhXkdr+kpm8PJfJyEoyoZN0PPHhYY4ymAMEWb8Cq1LrRDAMKZsPtLk
+Ur90hJ78oRrcEbFGPE+nTdsgWaqxOs+OaeNaCkF/js+faKa8ofAU4lCZ09pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbkg+EVFB/61J7hJRlhuS2wwof6AwHwYDVR0j
BBgwFoAUoudVVmtL36DnWLQtPV+ZpvB1o8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdFakF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hW
b2UvMi9BMkU3NTU1NjZCNEJERkEwRTc1OEI0MkQzRDVGOTlBNkYwNzVBM0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyRTc1NTU2NkI0QkRGQTBF
NzU4QjQyRDNENUY5OUE2RjA3NUEzQzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3RWpBd1VmOUtQblg0RVJ5MUJYRUJVc2VjZDN1WTNqSDVCMkNxM1d4Vm9lLzIv
MzEzNDMzMmUzMTMzMzcyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY+J3jANBgkqhkiG9w0BAQsFAAOCAQEAFp1d
dHPIJbxs/8WVCXT9AojllR9LLzCzpQH6vgAfX1GgCyT353AUpsDIvinTqGQagOkd
tTyVMoae2f6SoT3djdLgC/4r8LF8Jb638uvjAQCpu8C1RQemtyMlUzsxj7liEhX+
wQTTerRWzV/ObeequYo4V/MSDh0iADA/JxumjjHCn9byG5/s0vGbmB8Eh3zVktOL
fLvleG1kCd0hPrpbzA6/l5Cw3bdxq2uYrd5G6BDVsHYN3G7WR3xQp6w7W6OexFH4
MHH5bU74uKbSarMmaoG7gm4GqQD5cIBUI6hc1erTvzIzq4bUZy38Y9xegRXTCXKF
aTt7fV1AuinmV+qvgg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:14 2025 by rpki-client