Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133312e302f32342d3234203d3e20323634303931.roa
File:                     3134332e3230382e3133312e302f32342d3234203d3e20323634303931.roa (raw, json)
Hash identifier:          5m/kE+lYMcg4wVnze11FU3WcEdC7wJt5TNTajMh4bTo=
Subject key identifier:   DF:A1:AB:3D:FE:8B:3B:B0:D7:FF:0F:7B:D0:2D:B0:F9:C9:34:90:30
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       2D2D3EAB18D1C91B55F9C7F735943C1D63BB4AAB
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133312e302f32342d3234203d3e20323634303931.roa
Signing time:             Wed 18 Jan 2023 04:07:09 +0000
ROA not before:           Wed 18 Jan 2023 04:02:09 +0000
ROA not after:            Wed 17 Jan 2024 04:07:09 +0000
asID:                     264091
IP address blocks:        143.208.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2d:3e:ab:18:d1:c9:1b:55:f9:c7:f7:35:94:3c:1d:63:bb:4a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Jan 18 04:02:09 2023 GMT
            Not After : Jan 17 04:07:09 2024 GMT
        Subject: CN=DFA1AB3DFE8B3BB0D7FF0F7BD02DB0F9C9349030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:6d:53:c4:ef:95:2c:42:3c:1d:84:5c:c1:
                    43:d4:02:5e:c3:b8:ae:f3:40:65:74:25:62:cf:5e:
                    87:ab:db:50:18:b3:a9:01:f4:06:80:0c:21:81:34:
                    6b:04:17:53:ff:e8:4e:39:3b:01:e4:19:fe:42:d0:
                    de:4c:36:02:f0:a9:f4:2a:81:24:39:32:7c:aa:b1:
                    01:6a:63:9a:bf:86:01:6e:d2:8a:66:fd:67:9a:1c:
                    77:71:0a:bf:7b:ad:a7:cf:6e:d3:8f:eb:3a:87:c3:
                    8b:2e:25:8b:8f:88:af:c5:1b:3b:db:17:10:ca:1e:
                    2b:e4:d7:4b:d4:fc:cc:01:7c:ad:9e:b0:8f:3e:7e:
                    3e:1d:8f:54:a0:62:82:71:f1:9e:a2:af:1e:f5:56:
                    26:36:06:af:c4:25:3c:17:68:5d:de:e5:dd:a3:fc:
                    0f:1a:fe:38:6d:ed:44:04:4b:54:30:7a:10:ef:0e:
                    7d:84:70:ab:ec:2d:a2:39:75:70:d0:fa:08:bd:74:
                    94:36:cf:88:f4:74:9d:2b:e8:29:26:0f:16:7f:15:
                    33:a0:63:8e:73:40:9a:ea:8c:0a:7e:ca:73:20:ab:
                    e1:9e:14:bc:84:12:25:5e:d5:1f:8e:d5:82:7d:93:
                    b2:b1:24:24:66:27:7e:6c:ce:c2:b7:b1:23:59:eb:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:AB:3D:FE:8B:3B:B0:D7:FF:0F:7B:D0:2D:B0:F9:C9:34:90:30
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133312e302f32342d3234203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e5:02:9f:5b:6a:9a:02:a0:ff:32:78:84:fb:36:b5:30:99:
         ec:0f:fc:32:65:fe:22:9a:1d:31:29:4f:a9:29:eb:a3:71:e2:
         1a:d4:43:1d:a1:cd:58:2f:5b:fb:df:7c:51:8e:47:94:e1:f9:
         70:6e:6d:7e:8b:3f:cb:2f:02:9e:24:84:6f:ec:95:b3:71:32:
         f5:dd:36:6a:06:59:28:de:b4:62:ec:ee:c6:9d:dd:4b:8f:b3:
         57:c1:83:3e:e5:0c:c8:9d:c5:c7:61:3f:6d:b1:c6:45:35:05:
         11:9b:b9:32:07:7c:17:f9:cf:a4:c7:36:00:44:ac:3e:68:c3:
         29:b4:6b:58:03:77:4a:d7:5b:b0:74:cc:89:d2:c2:33:c8:57:
         45:a3:5c:20:38:87:dc:2c:fb:25:c4:a9:e4:07:e1:0d:24:7e:
         92:6f:fb:7b:cc:80:79:d0:c7:b4:2e:fe:5d:c0:6d:4c:1f:05:
         4c:7f:ea:ed:35:94:42:9e:65:14:f6:f9:03:07:37:59:1a:5a:
         ee:5b:3e:d2:98:e9:c3:49:21:32:4f:1a:fd:7d:18:55:f5:bf:
         59:db:37:82:c3:d5:70:5b:d8:72:ae:ed:4d:49:7b:cd:97:6e:
         20:f2:b3:7f:0d:08:0c:09:49:7e:65:76:59:24:8d:8a:c9:a1:
         69:87:d3:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULS0+qxjRyRtV+cf3NZQ8HWO7SqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY3NjhBNkIxNDgyNDg4NDREOEUwNDU1MUIxOTk4RDAz
QUI4NkQzRDAeFw0yMzAxMTgwNDAyMDlaFw0yNDAxMTcwNDA3MDlaMDMxMTAvBgNV
BAMTKERGQTFBQjNERkU4QjNCQjBEN0ZGMEY3QkQwMkRCMEY5QzkzNDkwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVW1TxO+VLEI8HYRcwUPUAl7D
uK7zQGV0JWLPXoer21AYs6kB9AaADCGBNGsEF1P/6E45OwHkGf5C0N5MNgLwqfQq
gSQ5MnyqsQFqY5q/hgFu0opm/WeaHHdxCr97rafPbtOP6zqHw4suJYuPiK/FGzvb
FxDKHivk10vU/MwBfK2esI8+fj4dj1SgYoJx8Z6irx71ViY2Bq/EJTwXaF3e5d2j
/A8a/jht7UQES1QwehDvDn2EcKvsLaI5dXDQ+gi9dJQ2z4j0dJ0r6CkmDxZ/FTOg
Y45zQJrqjAp+ynMgq+GeFLyEEiVe1R+O1YJ9k7KxJCRmJ35szsK3sSNZ6w53AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU36GrPf6LO7DX/w970C2w+ck0kDAwHwYDVR0j
BBgwFoAUpnaKaxSCSIRNjgRVGxmY0Dq4bT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktIRnEzM0VqdFVwRXJHTlBYWXhaV1RYQWp5QmFlNk1VVG5zaTdVbjdw
YTUvMC9BNjc2OEE2QjE0ODI0ODg0NEQ4RTA0NTUxQjE5OThEMDNBQjg2RDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E2NzY4QTZCMTQ4MjQ4ODQ0
RDhFMDQ1NTFCMTk5OEQwM0FCODZEM0QuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLSEZxMzNFanRVcEVyR05QWFl4WldUWEFqeUJhZTZNVVRuc2k3VW43cGE1LzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/QgzANBgkqhkiG9w0BAQsFAAOCAQEAs+UC
n1tqmgKg/zJ4hPs2tTCZ7A/8MmX+IpodMSlPqSnro3HiGtRDHaHNWC9b+998UY5H
lOH5cG5tfos/yy8CniSEb+yVs3Ey9d02agZZKN60Yuzuxp3dS4+zV8GDPuUMyJ3F
x2E/bbHGRTUFEZu5Mgd8F/nPpMc2AESsPmjDKbRrWAN3StdbsHTMidLCM8hXRaNc
IDiH3Cz7JcSp5AfhDSR+km/7e8yAedDHtC7+XcBtTB8FTH/q7TWUQp5lFPb5Awc3
WRpa7ls+0pjpw0khMk8a/X0YVfW/Wds3gsPVcFvYcq7tTUl7zZduIPKzfw0IDAlJ
fmV2WSSNismhaYfTDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org