Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3233203d3e20323634303931.roa
File:                     3134332e3230382e3132382e302f32332d3233203d3e20323634303931.roa (raw, json)
Hash identifier:          NbONa4m5TXFp+Mxyzytk3UjKFjFjjPyPRIdIm4vh00U=
Subject key identifier:   C7:30:A3:D2:A5:43:9C:DF:4C:0E:BC:EF:77:BC:1A:A0:19:53:41:F8
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       4F4C53CEFE5E15690DC0CE3E57449D12CCD58386
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3233203d3e20323634303931.roa
Signing time:             Wed 18 Jan 2023 04:07:00 +0000
ROA not before:           Wed 18 Jan 2023 04:02:00 +0000
ROA not after:            Wed 17 Jan 2024 04:07:00 +0000
asID:                     264091
IP address blocks:        143.208.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4c:53:ce:fe:5e:15:69:0d:c0:ce:3e:57:44:9d:12:cc:d5:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Jan 18 04:02:00 2023 GMT
            Not After : Jan 17 04:07:00 2024 GMT
        Subject: CN=C730A3D2A5439CDF4C0EBCEF77BC1AA0195341F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:2a:07:f8:26:09:f6:6f:95:be:72:ec:0c:
                    ea:f0:c1:d7:30:ef:d6:6f:18:41:b6:59:72:0d:30:
                    a9:fc:c3:47:48:6d:73:c2:67:ec:af:95:1d:1f:aa:
                    2e:1f:a5:4a:4f:d4:5e:56:d3:74:4e:01:95:09:14:
                    57:44:34:b1:89:a3:2b:d7:b3:65:ae:a6:2b:80:60:
                    d3:85:dd:90:4b:c9:50:1c:cb:45:3d:60:10:92:c7:
                    4f:45:ec:58:3d:4e:73:15:d0:e3:1e:ad:22:8e:23:
                    95:6f:b6:88:82:7f:1b:78:a9:73:55:5e:bf:bb:89:
                    36:71:a0:0d:30:07:70:5b:6c:44:f5:98:24:b2:ab:
                    d1:58:e2:f7:b6:ef:25:da:7a:16:db:95:dd:59:d9:
                    ac:5e:c0:15:6b:45:ef:71:06:a7:20:b6:b8:00:aa:
                    25:3a:cf:8c:99:9f:1e:5a:9a:96:30:64:2f:34:8c:
                    a2:dc:9f:d2:cb:88:31:02:99:e4:52:c1:cf:83:e6:
                    77:fa:11:8c:90:68:13:80:eb:2b:ed:85:f2:b0:6a:
                    e7:fd:9c:dc:3f:9d:ec:2b:14:c5:2c:d0:ff:7d:8a:
                    d5:a8:85:5b:41:c8:a3:b5:c3:8d:26:f2:ae:2f:38:
                    e3:b3:6a:35:14:b2:c0:37:67:48:d2:11:f9:eb:5f:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:A3:D2:A5:43:9C:DF:4C:0E:BC:EF:77:BC:1A:A0:19:53:41:F8
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3233203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6a:ae:1f:d6:77:27:b7:b4:ad:02:ee:0c:10:2f:35:3d:ac:
         89:ff:4c:b3:d8:5a:e5:6c:70:6f:5a:8c:cd:4d:28:0b:32:13:
         7d:26:73:c4:31:6d:33:d6:5f:ba:b0:d8:a1:bc:19:4a:07:b2:
         8b:b1:51:ea:69:09:0f:c5:3c:c0:b7:1e:aa:71:28:4f:0e:6d:
         f0:bf:b9:1a:9a:5a:11:e4:83:e0:9f:36:da:c2:56:71:3b:0d:
         f2:4d:c5:cb:ef:f4:c7:c1:ec:d3:1e:21:23:16:77:d3:91:e6:
         5a:29:30:bd:4c:4a:11:b5:ff:5e:f9:0e:10:4d:2b:96:0d:1f:
         34:4d:2f:cf:28:56:5c:66:4c:b6:fb:e6:13:30:3d:c7:c8:7c:
         4d:b2:00:9e:35:3c:1b:e7:be:8a:13:5c:17:f9:70:47:f3:d0:
         7c:93:0f:7e:8e:7e:fb:6f:fc:c3:22:54:16:91:00:dc:cc:9b:
         ee:82:1c:7a:a7:1f:f7:67:c3:81:50:59:47:78:14:31:b9:9f:
         bc:f4:9d:12:6a:b7:24:bb:58:5d:ca:b7:6c:d1:55:a2:70:09:
         11:2a:72:24:37:95:ec:d4:8d:84:35:a3:4e:5b:43:80:90:48:
         2f:b0:4a:60:e2:ef:9e:bc:0f:0f:72:e0:ba:2b:78:19:ad:a9:
         5b:1c:91:40
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUT0xTzv5eFWkNwM4+V0SdEszVg4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY3NjhBNkIxNDgyNDg4NDREOEUwNDU1MUIxOTk4RDAz
QUI4NkQzRDAeFw0yMzAxMTgwNDAyMDBaFw0yNDAxMTcwNDA3MDBaMDMxMTAvBgNV
BAMTKEM3MzBBM0QyQTU0MzlDREY0QzBFQkNFRjc3QkMxQUEwMTk1MzQxRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UyoH+CYJ9m+VvnLsDOrwwdcw
79ZvGEG2WXINMKn8w0dIbXPCZ+yvlR0fqi4fpUpP1F5W03ROAZUJFFdENLGJoyvX
s2WupiuAYNOF3ZBLyVAcy0U9YBCSx09F7Fg9TnMV0OMerSKOI5VvtoiCfxt4qXNV
Xr+7iTZxoA0wB3BbbET1mCSyq9FY4ve27yXaehbbld1Z2axewBVrRe9xBqcgtrgA
qiU6z4yZnx5ampYwZC80jKLcn9LLiDECmeRSwc+D5nf6EYyQaBOA6yvthfKwauf9
nNw/newrFMUs0P99itWohVtByKO1w40m8q4vOOOzajUUssA3Z0jSEfnrXw+jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxzCj0qVDnN9MDrzvd7waoBlTQfgwHwYDVR0j
BBgwFoAUpnaKaxSCSIRNjgRVGxmY0Dq4bT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw
YTUvMC9BNjc2OEE2QjE0ODI0ODg0NEQ4RTA0NTUxQjE5OThEMDNBQjg2RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2NzY4QTZCMTQ4MjQ4ODQ0
RDhFMDQ1NTFCMTk5OEQwM0FCODZEM0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLSEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY/QgDANBgkqhkiG9w0BAQsFAAOCAQEAX2qu
H9Z3J7e0rQLuDBAvNT2sif9Ms9ha5Wxwb1qMzU0oCzITfSZzxDFtM9ZfurDYobwZ
Sgeyi7FR6mkJD8U8wLceqnEoTw5t8L+5GppaEeSD4J822sJWcTsN8k3Fy+/0x8Hs
0x4hIxZ305HmWikwvUxKEbX/XvkOEE0rlg0fNE0vzyhWXGZMtvvmEzA9x8h8TbIA
njU8G+e+ihNcF/lwR/PQfJMPfo5++2/8wyJUFpEA3Myb7oIceqcf92fDgVBZR3gU
MbmfvPSdEmq3JLtYXcq3bNFVonAJESpyJDeV7NSNhDWjTltDgJBIL7BKYOLvnrwP
D3Lguit4Ga2pWxyRQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org