Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3234203d3e20323634303233.roa
File:                     3134332e302e3235322e302f32322d3234203d3e20323634303233.roa (raw, json)
Hash identifier:          2J+3v24jrjnGG/k94VLw5+KoqHF0utA8A57ISagYLe8=
Subject key identifier:   45:9E:46:01:29:BD:C1:2E:75:22:C6:DD:1C:92:61:24:63:F2:DD:6C
Certificate issuer:       /CN=1F8EA56D0372D7921494C12386D333D8E95C252D
Certificate serial:       7DFDEC2B9E232DFB78C875818C577FC406737962
Authority key identifier: 1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3234203d3e20323634303233.roa
Signing time:             Fri 14 Oct 2022 14:36:30 +0000
ROA not before:           Fri 14 Oct 2022 14:31:30 +0000
ROA not after:            Fri 13 Oct 2023 14:36:30 +0000
asID:                     264023
IP address blocks:        143.0.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fd:ec:2b:9e:23:2d:fb:78:c8:75:81:8c:57:7f:c4:06:73:79:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8EA56D0372D7921494C12386D333D8E95C252D
        Validity
            Not Before: Oct 14 14:31:30 2022 GMT
            Not After : Oct 13 14:36:30 2023 GMT
        Subject: CN=459E460129BDC12E7522C6DD1C92612463F2DD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:be:c3:db:62:fc:4d:e1:42:93:c8:4e:b5:
                    a6:30:6f:e4:75:34:38:e4:52:6f:be:94:3a:e6:a6:
                    03:e2:f3:6b:b7:27:07:75:79:21:6a:57:db:78:f9:
                    be:ac:79:0d:4b:1d:6a:14:9f:43:eb:31:04:cd:6e:
                    28:62:e6:cd:f4:9c:c8:6f:95:26:e1:58:d5:3d:1f:
                    54:af:bd:0f:63:27:e6:c1:cc:6b:d0:e8:2b:1f:fe:
                    79:c6:8c:54:e8:e8:4e:26:4a:d8:3b:4d:fb:3a:44:
                    32:7a:45:b8:8e:08:16:d1:6e:89:00:2f:ed:4f:fc:
                    e3:86:f9:7a:5a:19:5a:ca:ff:0e:66:f2:d2:2b:61:
                    c5:22:21:75:d3:21:4d:93:26:1c:4f:2c:70:30:8f:
                    8d:3e:5d:6c:68:b4:25:ca:40:28:1b:70:b7:ec:e9:
                    e0:93:cb:03:b8:ea:fd:69:88:c3:df:75:69:8b:76:
                    fd:b0:2c:c1:0f:19:09:c4:ec:79:5c:be:68:9f:91:
                    51:d2:11:ea:08:06:bd:e9:0c:a4:00:ab:bb:23:5f:
                    70:32:11:03:e8:c7:a4:4b:3f:0e:d2:17:a6:a6:2d:
                    02:cd:38:f2:be:16:0a:0a:f2:b4:f7:f5:cc:dd:10:
                    a5:7d:79:73:66:b8:a2:e1:a7:73:33:02:1f:6a:7d:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:46:01:29:BD:C1:2E:75:22:C6:DD:1C:92:61:24:63:F2:DD:6C
            X509v3 Authority Key Identifier:
                keyid:1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3234203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:24:9a:a3:a6:11:85:ba:75:29:a9:8e:ed:03:d2:82:f1:
         44:0e:86:45:60:f8:10:56:17:dd:a5:bb:e7:62:49:2a:93:4c:
         16:dd:71:1a:a1:50:d1:f8:41:16:77:3f:bf:d4:43:5c:9d:47:
         a6:23:c5:eb:d5:c8:0c:be:86:98:4a:99:10:c8:88:73:5a:ac:
         8b:1e:9c:34:ce:13:0c:45:eb:be:d8:5a:ff:22:01:fb:f5:1e:
         1f:0b:43:1d:46:33:14:82:00:f2:a2:d8:8a:55:58:cd:35:2b:
         69:c5:61:cc:9b:40:02:0d:8f:57:4f:2c:38:be:af:73:b2:7d:
         6c:2c:87:cd:7a:e3:ef:96:ac:5e:bb:a2:82:a3:fc:78:25:e1:
         da:a0:47:ec:26:a7:7d:ea:9f:81:33:38:0e:ac:96:88:b5:cb:
         89:9e:19:15:28:87:1a:61:37:7d:38:d9:5a:95:b9:76:7c:8e:
         c7:31:71:cc:41:fd:d3:3f:b0:69:ea:51:bc:d8:9f:29:e3:cd:
         1c:e4:40:57:37:3a:62:4b:b9:2c:be:d7:42:f0:a1:4f:4b:f3:
         96:38:71:1e:e7:f0:c5:a9:3f:1f:e6:33:1a:91:5b:93:f4:62:
         cd:b1:f0:01:7c:20:cd:a7:90:88:99:e9:db:3b:5e:7a:4f:a1:
         ac:73:7b:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUff3sK54jLft4yHWBjFd/xAZzeWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4RUE1NkQwMzcyRDc5MjE0OTRDMTIzODZEMzMzRDhF
OTVDMjUyRDAeFw0yMjEwMTQxNDMxMzBaFw0yMzEwMTMxNDM2MzBaMDMxMTAvBgNV
BAMTKDQ1OUU0NjAxMjlCREMxMkU3NTIyQzZERDFDOTI2MTI0NjNGMkRENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/r7D22L8TeFCk8hOtaYwb+R1
NDjkUm++lDrmpgPi82u3Jwd1eSFqV9t4+b6seQ1LHWoUn0PrMQTNbihi5s30nMhv
lSbhWNU9H1SvvQ9jJ+bBzGvQ6Csf/nnGjFTo6E4mStg7Tfs6RDJ6RbiOCBbRbokA
L+1P/OOG+XpaGVrK/w5m8tIrYcUiIXXTIU2TJhxPLHAwj40+XWxotCXKQCgbcLfs
6eCTywO46v1piMPfdWmLdv2wLMEPGQnE7HlcvmifkVHSEeoIBr3pDKQAq7sjX3Ay
EQPox6RLPw7SF6amLQLNOPK+FgoK8rT39czdEKV9eXNmuKLhp3MzAh9qfU2BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURZ5GASm9wS51IsbdHJJhJGPy3WwwHwYDVR0j
BBgwFoAUH46lbQNy15IUlMEjhtMz2OlcJS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJmdlJidUFZa1dmVVY4RjRjVGQ0VkJmYjRIZnhYS3pXTlhoaUFBQUs3
aDcvMC8xRjhFQTU2RDAzNzJENzkyMTQ5NEMxMjM4NkQzMzNEOEU5NUMyNTJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFGOEVBNTZEMDM3MkQ3OTIx
NDk0QzEyMzg2RDMzM0Q4RTk1QzI1MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyZnZSYnVBWWtXZlVWOEY0Y1RkNFZCZmI0SGZ4WEt6V05YaGlBQUFLN2g3LzAv
MzEzNDMzMmUzMDJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwD8MA0GCSqGSIb3DQEBCwUAA4IBAQC5YCSao6YR
hbp1KamO7QPSgvFEDoZFYPgQVhfdpbvnYkkqk0wW3XEaoVDR+EEWdz+/1ENcnUem
I8Xr1cgMvoaYSpkQyIhzWqyLHpw0zhMMReu+2Fr/IgH79R4fC0MdRjMUggDyotiK
VVjNNStpxWHMm0ACDY9XTyw4vq9zsn1sLIfNeuPvlqxeu6KCo/x4JeHaoEfsJqd9
6p+BMzgOrJaItcuJnhkVKIcaYTd9ONlalbl2fI7HMXHMQf3TP7Bp6lG82J8p480c
5EBXNzpiS7ksvtdC8KFPS/OWOHEe5/DFqT8f5jMakVuT9GLNsfABfCDNp5CImenb
O156T6Gsc3t+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org