Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/3134332e3230382e38342e302f32322d3234203d3e20323635313235.roa
File:                     3134332e3230382e38342e302f32322d3234203d3e20323635313235.roa (raw, json)
Hash identifier:          /3h8sqBm9Usm1gCbbVSKhySpBSNSTZHlYGCheV7B30Y=
Subject key identifier:   9B:00:74:CE:97:3F:72:37:7D:01:3D:6A:38:31:DA:25:A4:45:C2:F1
Certificate issuer:       /CN=FFD00493880B2D63B9BD26EB4E8A2F258C70FE07
Certificate serial:       7FBFC423EC89B1DA88048784AB7ED436E35A6241
Authority key identifier: FF:D0:04:93:88:0B:2D:63:B9:BD:26:EB:4E:8A:2F:25:8C:70:FE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/3134332e3230382e38342e302f32322d3234203d3e20323635313235.roa
Signing time:             Wed 04 May 2022 14:41:02 +0000
ROA not before:           Wed 04 May 2022 14:36:02 +0000
ROA not after:            Wed 03 May 2023 14:41:02 +0000
asID:                     265125
IP address blocks:        143.208.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bf:c4:23:ec:89:b1:da:88:04:87:84:ab:7e:d4:36:e3:5a:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD00493880B2D63B9BD26EB4E8A2F258C70FE07
        Validity
            Not Before: May  4 14:36:02 2022 GMT
            Not After : May  3 14:41:02 2023 GMT
        Subject: CN=9B0074CE973F72377D013D6A3831DA25A445C2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:8b:70:dd:de:2c:b1:32:e1:7c:f5:e3:f8:
                    2e:25:a7:93:7f:de:f2:15:1f:e5:24:17:bb:a9:83:
                    82:69:c8:5f:48:48:f5:a9:0a:e8:1e:10:db:1d:f6:
                    56:c6:f6:f2:d7:48:27:0e:29:4f:24:bc:d0:24:41:
                    fd:d6:7e:4f:66:28:03:b0:a7:6b:dc:c5:c6:17:ae:
                    92:7a:4a:d0:45:40:92:cc:15:48:b5:3f:99:86:ed:
                    b0:ab:56:05:1c:67:c5:2b:9e:d9:33:ae:fc:86:99:
                    81:15:36:ba:ce:60:3a:15:4e:bc:02:17:9c:b0:34:
                    fe:61:6c:ec:c8:7e:b4:27:b2:54:44:71:b6:51:9b:
                    f5:ad:71:ef:e2:75:4f:8f:e4:a1:d1:d1:7d:e5:8e:
                    29:fe:2d:6c:26:7e:f9:9b:71:3f:67:e3:ef:d6:ef:
                    80:53:ad:c9:c6:29:01:0d:34:4d:a5:e9:ed:68:f8:
                    aa:96:cd:74:70:b1:9a:72:24:01:f1:74:23:d5:f2:
                    a6:a2:30:dd:a2:8d:f3:1c:09:05:32:d1:41:ee:db:
                    f8:d3:ed:da:24:b3:4e:79:8a:91:7c:4b:e8:2c:b3:
                    ed:a0:05:13:3b:c0:46:a8:cf:2a:d6:bf:88:74:33:
                    06:43:20:51:93:6b:37:8a:1d:c0:43:5c:c7:9a:39:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:74:CE:97:3F:72:37:7D:01:3D:6A:38:31:DA:25:A4:45:C2:F1
            X509v3 Authority Key Identifier:
                keyid:FF:D0:04:93:88:0B:2D:63:B9:BD:26:EB:4E:8A:2F:25:8C:70:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFD00493880B2D63B9BD26EB4E8A2F258C70FE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9Nx1mUtzQg5khEqY4eiwLbxhbpVndjkQnxZ8wD65zjB/0/3134332e3230382e38342e302f32322d3234203d3e20323635313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:68:8e:45:ec:70:04:08:6c:13:1c:90:6f:36:d8:96:2b:
         d3:93:8f:b0:4c:7a:3f:ea:f1:2d:23:e0:aa:6c:0d:0a:43:66:
         1a:7b:df:b5:47:1f:3a:4d:3b:c8:64:c8:13:47:42:c0:6a:df:
         47:78:bc:4d:94:03:b0:10:8f:d4:24:6c:54:e2:b9:5e:06:70:
         9c:2e:cf:7e:3b:8c:88:d9:fc:81:c8:61:1a:dd:aa:8b:a3:2f:
         e6:51:5a:f4:a1:a0:ff:a8:b1:48:4b:f8:35:2c:9c:06:bb:bf:
         1b:bf:76:0d:3b:c7:73:d9:f8:23:83:c1:07:3b:05:7a:77:32:
         64:54:64:55:2e:b8:c1:12:e4:fc:37:8e:5d:ca:69:a9:00:d2:
         a2:e3:43:35:cb:ab:af:e6:6a:7c:2c:7f:b9:f0:57:78:24:f9:
         0a:44:f5:6a:d3:99:c6:fa:59:77:cc:c8:09:1a:b5:d0:ab:0f:
         96:b6:eb:7c:dc:ef:41:f7:f7:e4:bf:e3:2c:8c:f7:56:dd:96:
         b1:4c:33:bf:d4:16:1c:ef:d9:28:46:cb:e3:28:12:b3:8a:59:
         c9:71:8c:4d:f3:95:a3:bf:85:b8:2c:60:37:04:41:bd:eb:40:
         c8:5c:a8:b3:62:54:04:48:65:0d:49:db:dc:09:fa:79:01:a5:
         bf:ed:6c:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf7/EI+yJsdqIBIeEq37UNuNaYkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEMDA0OTM4ODBCMkQ2M0I5QkQyNkVCNEU4QTJGMjU4
QzcwRkUwNzAeFw0yMjA1MDQxNDM2MDJaFw0yMzA1MDMxNDQxMDJaMDMxMTAvBgNV
BAMTKDlCMDA3NENFOTczRjcyMzc3RDAxM0Q2QTM4MzFEQTI1QTQ0NUMyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDYtw3d4ssTLhfPXj+C4lp5N/
3vIVH+UkF7upg4JpyF9ISPWpCugeENsd9lbG9vLXSCcOKU8kvNAkQf3Wfk9mKAOw
p2vcxcYXrpJ6StBFQJLMFUi1P5mG7bCrVgUcZ8UrntkzrvyGmYEVNrrOYDoVTrwC
F5ywNP5hbOzIfrQnslREcbZRm/Wtce/idU+P5KHR0X3ljin+LWwmfvmbcT9n4+/W
74BTrcnGKQENNE2l6e1o+KqWzXRwsZpyJAHxdCPV8qaiMN2ijfMcCQUy0UHu2/jT
7doks055ipF8S+gss+2gBRM7wEaozyrWv4h0MwZDIFGTazeKHcBDXMeaOcntAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmwB0zpc/cjd9AT1qODHaJaRFwvEwHwYDVR0j
BBgwFoAU/9AEk4gLLWO5vSbrToovJYxw/gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlOeDFtVXR6UWc1a2hFcVk0ZWl3TGJ4aGJwVm5kamtRbnhaOHdENjV6
akIvMC9GRkQwMDQ5Mzg4MEIyRDYzQjlCRDI2RUI0RThBMkYyNThDNzBGRTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGRDAwNDkzODgwQjJENjNC
OUJEMjZFQjRFOEEyRjI1OEM3MEZFMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5TngxbVV0elFnNWtoRXFZNGVpd0xieGhicFZuZGprUW54Wjh3RDY1empCLzAv
MzEzNDMzMmUzMjMwMzgyZTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP0FQwDQYJKoZIhvcNAQELBQADggEBABb4aI5F
7HAECGwTHJBvNtiWK9OTj7BMej/q8S0j4KpsDQpDZhp737VHHzpNO8hkyBNHQsBq
30d4vE2UA7AQj9QkbFTiuV4GcJwuz347jIjZ/IHIYRrdqoujL+ZRWvShoP+osUhL
+DUsnAa7vxu/dg07x3PZ+CODwQc7BXp3MmRUZFUuuMES5Pw3jl3KaakA0qLjQzXL
q6/manwsf7nwV3gk+QpE9WrTmcb6WXfMyAkatdCrD5a263zc70H39+S/4yyM91bd
lrFMM7/UFhzv2ShGy+MoErOKWclxjE3zlaO/hbgsYDcEQb3rQMhcqLNiVARIZQ1J
29wJ+nkBpb/tbPY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org