Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32342d3234203d3e20323634303436.roa
File:                     3134332e3133372e3231382e302f32342d3234203d3e20323634303436.roa (raw, json)
Hash identifier:          wCb8hkwJHgH795G+eTWaEz57t92Z/wytbR7trWmezwg=
Subject key identifier:   92:8C:2B:14:1B:B0:E9:4D:59:F1:DC:27:92:38:C9:C8:3C:F6:47:43
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       3F10C93DC9F8D7C43CB73F2ED3DD7E89473175C4
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32342d3234203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        143.137.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:c9:3d:c9:f8:d7:c4:3c:b7:3f:2e:d3:dd:7e:89:47:31:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:2a:af:da:2b:fb:e7:6a:8c:1e:03:97:8c:
                    3e:c7:3c:62:03:44:b3:a7:de:2f:78:7c:fe:1a:47:
                    84:8d:f0:4f:64:1d:f9:f1:89:98:bb:33:3c:bf:86:
                    f8:2d:fe:f3:ac:7e:e4:c0:cb:23:9c:45:aa:a7:9d:
                    ae:d7:0c:23:fd:73:1f:f8:a6:bc:3b:c9:29:69:84:
                    39:3b:ce:05:d7:b2:f8:bc:00:78:94:36:a1:4d:24:
                    ec:5c:1c:4e:5b:96:47:29:8f:5c:95:30:42:67:61:
                    3d:47:e9:c4:c7:1c:a5:56:c7:ee:49:4a:c6:e8:6f:
                    d0:bf:69:0d:1d:c7:4d:01:4d:e8:43:df:64:c8:f1:
                    66:08:41:28:2b:b2:d3:91:e6:cb:00:d5:85:50:22:
                    20:9d:4c:23:22:12:a0:0e:f8:bc:ea:78:2f:21:15:
                    4a:95:e6:58:7a:e4:58:3d:2b:ec:06:75:b7:fe:a4:
                    7d:78:52:86:ba:1f:31:b4:ff:1b:9c:c7:46:33:6e:
                    45:a1:8d:4f:50:50:bc:44:58:b0:c7:1f:ea:1c:c3:
                    67:a2:41:73:d0:27:50:ab:f1:41:05:a4:b0:eb:99:
                    a1:27:5b:2b:5c:b5:11:f1:89:d3:11:68:fa:0d:f7:
                    6d:c2:18:ce:23:16:62:fb:dd:cb:d3:8a:96:7c:3c:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:2B:14:1B:B0:E9:4D:59:F1:DC:27:92:38:C9:C8:3C:F6:47:43
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32342d3234203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:cf:ff:16:7e:eb:2b:89:bd:ec:27:77:96:4d:f8:3f:f6:
         ab:3a:65:fd:db:6e:7b:ea:73:79:29:db:8e:11:ae:b3:99:2f:
         d6:ba:97:03:de:75:1a:00:f1:ea:b9:87:f8:f8:cc:47:3b:f1:
         99:11:29:fc:2f:99:8d:ed:7e:50:1d:e8:2a:6f:5c:37:02:3b:
         b6:89:c5:f0:fd:bf:52:e6:dc:f9:7b:6a:17:a6:b1:4e:1f:50:
         5f:28:0c:12:41:91:f0:35:9e:40:05:41:9b:a7:98:d7:69:c3:
         7c:76:51:e9:ff:29:9d:e6:22:45:a2:81:03:e7:9f:2d:69:7e:
         e9:33:f2:5f:4e:b7:ba:07:b1:f5:a0:69:fe:23:16:0f:d2:ff:
         bf:ba:cd:c0:1f:cf:62:c2:1c:ae:86:8e:01:42:b2:05:93:99:
         d3:c8:99:a2:d1:96:17:82:e3:45:84:80:44:bc:2e:8b:ed:59:
         29:4a:f2:60:73:6b:43:45:0e:be:68:8b:fc:96:a4:c6:73:c0:
         d1:d1:be:12:57:ec:2d:ed:8f:98:b4:b1:ca:cd:17:8d:88:af:
         c1:f2:fd:a4:a7:c5:38:75:e0:d3:72:18:3a:b5:8e:76:85:0d:
         fc:44:04:12:4c:96:0d:33:9a:c5:c4:49:de:63:8e:29:3a:df:
         fa:71:9e:7e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUPxDJPcn418Q8tz8u091+iUcxdcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBCMEJBMjcyNUE4NDA5RkIzQTUwMzA3M0RBRUE0NDc0
Q0YyQzU0RjAeFw0yMjA3MTQxMTU1MDFaFw0yMzA3MTQxMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUYxRjJBQUZEQTJCRkJFNzZB
OEMxRTAzOTc4QzNFQzczQzYyMDM0NEIzQTdERTJGNzg3Q0ZFMUE0Nzg0OERGMDRG
NjQxREY5RjE4OTk4QkIzMzNDQkY4NkY4MkRGRUYzQUM3RUU0QzBDQjIzOUM0NUFB
QTc5REFFRDcwQzIzRkQ3MzFGRjhBNkJDM0JDOTI5Njk4NDM5M0JDRTA1RDdCMkY4
QkMwMDc4OTQzNkExNEQyNEVDNUMxQzRFNUI5NjQ3Mjk4RjVDOTUzMDQyNjc2MTNE
NDdFOUM0QzcxQ0E1NTZDN0VFNDk0QUM2RTg2RkQwQkY2OTBEMURDNzREMDE0REU4
NDNERjY0QzhGMTY2MDg0MTI4MkJCMkQzOTFFNkNCMDBENTg1NTAyMjIwOUQ0QzIz
MjIxMkEwMEVGOEJDRUE3ODJGMjExNTRBOTVFNjU4N0FFNDU4M0QyQkVDMDY3NUI3
RkVBNDdENzg1Mjg2QkExRjMxQjRGRjFCOUNDNzQ2MzM2RTQ1QTE4RDRGNTA1MEJD
NDQ1OEIwQzcxRkVBMUNDMzY3QTI0MTczRDAyNzUwQUJGMTQxMDVBNEIwRUI5OUEx
Mjc1QjJCNUNCNTExRjE4OUQzMTE2OEZBMERGNzZEQzIxOENFMjMxNjYyRkJERENC
RDM4QTk2N0MzQ0E0QzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArx8qr9or++dqjB4Dl4w+xzxiA0Szp94veHz+GkeEjfBPZB358YmY
uzM8v4b4Lf7zrH7kwMsjnEWqp52u1wwj/XMf+Ka8O8kpaYQ5O84F17L4vAB4lDah
TSTsXBxOW5ZHKY9clTBCZ2E9R+nExxylVsfuSUrG6G/Qv2kNHcdNAU3oQ99kyPFm
CEEoK7LTkebLANWFUCIgnUwjIhKgDvi86ngvIRVKleZYeuRYPSvsBnW3/qR9eFKG
uh8xtP8bnMdGM25FoY1PUFC8RFiwxx/qHMNnokFz0CdQq/FBBaSw65mhJ1srXLUR
8YnTEWj6DfdtwhjOIxZi+93L04qWfDykwQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJKMKxQbsOlNWfHcJ5I4ycg89kdDMB8GA1UdIwQYMBaAFPCwuiclqECfs6UDBz2u
pEdM8sVPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlKNnZBdEd2VDV0THlo
Tjl0SHB0dFlGN2lpUXc5ckxRaUNZWmV2Znd6cDhiLzAvRjBCMEJBMjcyNUE4NDA5
RkIzQTUwMzA3M0RBRUE0NDc0Q0YyQzU0Ri5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GMEIwQkEyNzI1QTg0MDlGQjNBNTAzMDczREFFQTQ0NzRDRjJD
NTRGLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SjZ2QXRHdlQ1dEx5aE45dEhw
dHRZRjdpaVF3OXJMUWlDWVpldmZ3enA4Yi8wLzMxMzQzMzJlMzEzMzM3MmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzMDM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACPidowDQYJKoZIhvcNAQELBQADggEBAFGhz/8Wfusrib3sJ3eWTfg/9qs6Zf3b
bnvqc3kp244RrrOZL9a6lwPedRoA8eq5h/j4zEc78ZkRKfwvmY3tflAd6CpvXDcC
O7aJxfD9v1Lm3Pl7ahemsU4fUF8oDBJBkfA1nkAFQZunmNdpw3x2Uen/KZ3mIkWi
gQPnny1pfukz8l9Ot7oHsfWgaf4jFg/S/7+6zcAfz2LCHK6GjgFCsgWTmdPImaLR
lheC40WEgES8LovtWSlK8mBza0NFDr5oi/yWpMZzwNHRvhJX7C3tj5i0scrNF42I
r8Hy/aSnxTh14NNyGDq1jnaFDfxEBBJMlg0zmsXESd5jjik63/pxnn4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org