Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3134332e302e35362e302f32332d3233203d3e203532363133.roa
File:                     3134332e302e35362e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          hqmgrRNTBYdq1f4DdS2ZiHwzLcPxqbGuySWTdDgHX1E=
Subject key identifier:   50:E9:40:FD:60:B8:6B:B2:20:BA:CB:40:30:24:95:86:B0:0C:16:E1
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       7939542EEE949B0E2555D29698C3ABEE17A09213
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3134332e302e35362e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:59 +0000
ROA not before:           Wed 06 Mar 2024 14:46:59 +0000
ROA not after:            Wed 05 Mar 2025 14:51:59 +0000
asID:                     52613
IP address blocks:        143.0.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:39:54:2e:ee:94:9b:0e:25:55:d2:96:98:c3:ab:ee:17:a0:92:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:59 2024 GMT
            Not After : Mar  5 14:51:59 2025 GMT
        Subject: CN=50E940FD60B86BB220BACB4030249586B00C16E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:5e:85:59:55:a7:30:48:29:4a:e6:73:1f:
                    4b:de:4d:c7:5e:7e:13:f7:c8:1d:d5:6c:48:2b:28:
                    56:c1:0d:d1:8f:50:b6:a7:81:e3:29:a3:76:0b:2c:
                    16:36:c8:d3:92:a1:70:79:26:15:c3:10:86:ec:d3:
                    17:55:4a:14:c6:07:38:c8:5c:1e:ec:3a:99:c6:74:
                    d6:37:91:16:82:94:53:03:df:b2:22:4b:2e:9f:9e:
                    d8:0d:54:70:ce:f5:08:ba:8b:9f:ce:36:4c:87:19:
                    ad:62:5a:b8:e0:83:79:01:f6:9c:ad:32:68:99:99:
                    3a:0b:0c:5d:e3:90:0c:cd:ea:6f:dc:b4:7a:e7:3c:
                    a7:b7:f5:23:ed:9f:16:35:0c:6d:1f:9d:44:8b:77:
                    80:28:72:2d:08:d2:29:9b:7a:75:f6:79:1d:5f:d3:
                    78:78:67:ae:25:2e:14:c4:b1:86:e1:c7:11:72:11:
                    4f:aa:74:03:32:17:6f:8f:bd:dc:f0:5c:a1:f2:12:
                    16:ad:4c:09:0f:fb:19:77:c2:43:67:53:e3:72:e3:
                    b8:58:28:4e:5c:6e:60:e6:eb:1b:11:b6:0b:ea:d5:
                    85:02:e2:6a:db:5b:b6:03:60:ce:d6:e7:18:d1:bb:
                    4f:19:7f:23:91:78:78:e2:0b:83:68:82:01:ab:60:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:40:FD:60:B8:6B:B2:20:BA:CB:40:30:24:95:86:B0:0C:16:E1
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3134332e302e35362e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:81:f8:8e:74:43:b3:2c:9e:45:3e:9a:29:9f:90:7f:d0:
         04:c4:fe:30:1e:42:dd:e7:26:00:b5:7d:49:c8:55:3b:d2:0a:
         68:57:26:b9:5f:96:83:54:ee:4c:d6:48:cf:66:66:6b:b9:7f:
         04:ec:80:b3:65:a9:d5:61:2d:b2:d1:f9:f8:ec:32:29:06:90:
         7a:99:ba:f4:06:c5:50:fa:46:7f:f1:7c:9f:c2:b9:92:00:8a:
         ec:86:b8:d5:0e:64:e3:2c:0c:80:b2:17:95:3c:46:31:a9:32:
         31:19:97:11:cc:b7:bd:95:80:8a:91:0a:0d:df:6a:66:63:3b:
         bc:1b:74:07:dc:fe:9f:6a:9e:02:86:6c:74:fb:5c:02:00:21:
         9b:03:ad:eb:19:7c:fd:42:43:4b:14:de:b8:d4:2c:d4:1f:d4:
         e8:c1:96:28:7c:ae:32:c5:b3:1b:f7:6f:06:c3:fc:b4:56:05:
         bb:0b:ce:77:b9:10:72:21:87:39:3d:df:74:aa:8b:ad:0a:a1:
         21:b2:4f:b7:6b:a2:77:aa:2f:38:71:f2:7d:30:52:82:3e:43:
         a0:4b:8a:41:46:aa:d4:8b:0f:60:e7:35:40:45:8d:ea:3b:0a:
         b7:5a:b9:9a:10:ec:f0:f7:76:49:1c:13:cd:be:d6:b0:15:0a:
         46:4b:72:b0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUeTlULu6Umw4lVdKWmMOr7hegkhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU0MTk5NjExMUEwNzBFNUQxODVCMjhFQzc0MUUwQTYw
OEIyNEVEQzAeFw0yNDAzMDYxNDQ2NTlaFw0yNTAzMDUxNDUxNTlaMDMxMTAvBgNV
BAMTKDUwRTk0MEZENjBCODZCQjIyMEJBQ0I0MDMwMjQ5NTg2QjAwQzE2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDe16FWVWnMEgpSuZzH0veTcde
fhP3yB3VbEgrKFbBDdGPULangeMpo3YLLBY2yNOSoXB5JhXDEIbs0xdVShTGBzjI
XB7sOpnGdNY3kRaClFMD37IiSy6fntgNVHDO9Qi6i5/ONkyHGa1iWrjgg3kB9pyt
MmiZmToLDF3jkAzN6m/ctHrnPKe39SPtnxY1DG0fnUSLd4Aoci0I0imbenX2eR1f
03h4Z64lLhTEsYbhxxFyEU+qdAMyF2+PvdzwXKHyEhatTAkP+xl3wkNnU+Ny47hY
KE5cbmDm6xsRtgvq1YUC4mrbW7YDYM7W5xjRu08ZfyOReHjiC4NoggGrYCufAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUUOlA/WC4a7IgustAMCSVhrAMFuEwHwYDVR0j
BBgwFoAU7kGZYRGgcOXRhbKOx0HgpgiyTtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMC9FRTQxOTk2MTExQTA3MEU1RDE4NUIyOEVDNzQxRTBBNjA4QjI0RURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VFNDE5OTYxMTFBMDcwRTVE
MTg1QjI4RUM3NDFFMEE2MDhCMjRFREMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzAv
MzEzNDMzMmUzMDJlMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1MzIzNjMx
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGPADgwDQYJKoZIhvcNAQELBQADggEBAFFcgfiOdEOzLJ5F
Ppopn5B/0ATE/jAeQt3nJgC1fUnIVTvSCmhXJrlfloNU7kzWSM9mZmu5fwTsgLNl
qdVhLbLR+fjsMikGkHqZuvQGxVD6Rn/xfJ/CuZIAiuyGuNUOZOMsDICyF5U8RjGp
MjEZlxHMt72VgIqRCg3famZjO7wbdAfc/p9qngKGbHT7XAIAIZsDresZfP1CQ0sU
3rjULNQf1OjBlih8rjLFsxv3bwbD/LRWBbsLzne5EHIhhzk933Sqi60KoSGyT7dr
oneqLzhx8n0wUoI+Q6BLikFGqtSLD2DnNUBFjeo7CrdauZoQ7PD3dkkcE82+1rAV
CkZLcrA=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org