Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32332d3233203d3e20323632383139.roa
File:                     3134332e3230322e36382e302f32332d3233203d3e20323632383139.roa (raw, json)
Hash identifier:          Z73wdyY6Q8yFRnKrD6k6y++tmKr2R3c85GzgnpRi2fA=
Subject key identifier:   40:2B:C8:B6:3A:76:19:A4:04:85:75:1B:EF:B5:2F:83:A7:C1:99:38
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       3DF705AAFE6771E827E525249E2FFA0239E50771
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32332d3233203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:11:01 +0000
ROA not before:           Wed 09 Nov 2022 20:06:01 +0000
ROA not after:            Wed 08 Nov 2023 20:11:01 +0000
asID:                     262819
IP address blocks:        143.202.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f7:05:aa:fe:67:71:e8:27:e5:25:24:9e:2f:fa:02:39:e5:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:06:01 2022 GMT
            Not After : Nov  8 20:11:01 2023 GMT
        Subject: CN=402BC8B63A7619A40485751BEFB52F83A7C19938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:5d:46:2e:2d:80:ab:24:13:38:31:9c:d3:
                    87:f8:9d:a1:68:ef:58:56:b7:30:7e:b9:08:57:1b:
                    82:df:c3:ba:b0:25:ab:d1:2b:b3:6a:f7:73:b7:25:
                    fa:36:76:ce:cb:1a:9c:eb:7d:b6:cc:d9:0a:86:00:
                    42:5e:31:73:2f:f8:df:58:01:96:3d:c8:a9:7a:00:
                    e3:24:4d:0e:0e:b6:24:8b:93:ec:2d:47:ea:8c:7b:
                    95:23:10:10:6d:07:b1:33:d2:bb:8a:f0:c5:90:50:
                    42:17:57:97:68:f8:f8:81:bf:53:24:ce:ed:49:de:
                    d3:cb:09:2a:3c:6b:f2:c9:4c:85:d4:d8:32:3c:a9:
                    67:37:e1:3c:ee:d2:f1:52:80:71:ad:8d:b6:aa:51:
                    ce:e2:9b:87:14:aa:02:b9:60:e3:10:26:e8:6f:a7:
                    89:91:dc:5c:88:0f:c9:36:e1:aa:20:b5:7d:d0:3a:
                    d6:86:2f:71:b1:51:c0:06:4a:96:eb:ba:aa:74:15:
                    40:88:7b:f9:ff:bd:78:bb:4a:4e:59:ec:08:52:f5:
                    e7:f4:3c:98:95:4e:60:cd:0e:50:8e:0f:82:f1:82:
                    89:09:e2:6c:4c:12:19:ce:17:e0:37:65:9b:4f:31:
                    f7:6d:e0:1a:5c:21:86:2c:1e:3a:60:6e:39:49:e3:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2B:C8:B6:3A:76:19:A4:04:85:75:1B:EF:B5:2F:83:A7:C1:99:38
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32332d3233203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:a9:1e:09:71:a5:1c:d7:c1:2b:6b:f9:68:60:0c:81:db:
         e9:73:fa:06:95:ec:55:20:ba:ab:55:84:a3:65:16:23:1d:6f:
         60:a1:a5:3d:d2:b3:46:39:bd:91:3a:01:4a:a0:7c:b7:35:76:
         12:52:6a:d8:ec:c8:99:fc:e8:bc:2e:c5:12:1d:5b:14:12:11:
         c4:48:17:cc:8b:d0:d4:43:ff:ba:d0:ed:d1:5d:3d:8d:38:41:
         2e:5f:9f:62:a7:8a:79:08:b9:85:02:7e:d8:09:93:bf:71:e9:
         3c:34:4c:ee:59:aa:1c:41:11:5a:7c:47:49:da:2c:4d:33:2a:
         38:78:3e:f9:58:7c:09:d1:e0:f6:c5:9d:74:4c:87:53:20:88:
         ae:a3:ec:24:e6:18:80:29:d1:b2:e2:bc:4c:d1:bc:ca:3f:b2:
         6d:25:7c:63:3b:b6:0e:b6:32:8d:1a:14:09:9d:d3:b1:5f:c5:
         68:fa:9b:68:11:c6:b6:8e:39:c1:2b:a9:67:b9:04:b5:05:08:
         ae:92:46:4b:d1:39:68:42:68:ad:3e:95:e2:13:d4:87:8a:02:
         dc:c2:6b:d4:dc:4f:04:5a:aa:62:45:b4:5e:c6:de:04:9a:a1:
         af:7b:b2:e8:bb:cb:cc:4d:c8:52:39:0b:d4:42:6b:0e:31:51:
         e5:de:08:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPfcFqv5ncegn5SUkni/6AjnlB3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MDg5OTI5NjVEQzdERTA4ODIwQjkzRkMyNzBEQ0VE
MTUxMjRCQzAeFw0yMjExMDkyMDA2MDFaFw0yMzExMDgyMDExMDFaMDMxMTAvBgNV
BAMTKDQwMkJDOEI2M0E3NjE5QTQwNDg1NzUxQkVGQjUyRjgzQTdDMTk5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2l1GLi2AqyQTODGc04f4naFo
71hWtzB+uQhXG4Lfw7qwJavRK7Nq93O3Jfo2ds7LGpzrfbbM2QqGAEJeMXMv+N9Y
AZY9yKl6AOMkTQ4OtiSLk+wtR+qMe5UjEBBtB7Ez0ruK8MWQUEIXV5do+PiBv1Mk
zu1J3tPLCSo8a/LJTIXU2DI8qWc34Tzu0vFSgHGtjbaqUc7im4cUqgK5YOMQJuhv
p4mR3FyID8k24aogtX3QOtaGL3GxUcAGSpbruqp0FUCIe/n/vXi7Sk5Z7AhS9ef0
PJiVTmDNDlCOD4LxgokJ4mxMEhnOF+A3ZZtPMfdt4BpcIYYsHjpgbjlJ46FZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQCvItjp2GaQEhXUb77Uvg6fBmTgwHwYDVR0j
BBgwFoAUz2CJkpZdx94IgguT/CcNztFRJLwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWlNS0E1a3JpQzU2eVpia29OWmRuZlVxcW1rTnZrUzlNbVp0Sm53NEYy
V3kvMC9DRjYwODk5Mjk2NURDN0RFMDg4MjBCOTNGQzI3MERDRUQxNTEyNEJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGNjA4OTkyOTY1REM3REUw
ODgyMEI5M0ZDMjcwRENFRDE1MTI0QkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpTUtBNWtyaUM1NnlaYmtvTlpkbmZVcXFta052a1M5TW1adEpudzRGMld5LzAv
MzEzNDMzMmUzMjMwMzIyZTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGPykQwDQYJKoZIhvcNAQELBQADggEBAJ5UqR4J
caUc18Era/loYAyB2+lz+gaV7FUguqtVhKNlFiMdb2ChpT3Ss0Y5vZE6AUqgfLc1
dhJSatjsyJn86LwuxRIdWxQSEcRIF8yL0NRD/7rQ7dFdPY04QS5fn2KninkIuYUC
ftgJk79x6Tw0TO5ZqhxBEVp8R0naLE0zKjh4PvlYfAnR4PbFnXRMh1MgiK6j7CTm
GIAp0bLivEzRvMo/sm0lfGM7tg62Mo0aFAmd07FfxWj6m2gRxraOOcErqWe5BLUF
CK6SRkvROWhCaK0+leIT1IeKAtzCa9TcTwRaqmJFtF7G3gSaoa97sui7y8xNyFI5
C9RCaw4xUeXeCDc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org