Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa
File:                     3134332e302e3139362e302f32322d3232203d3e20323634303130.roa (raw, json)
Hash identifier:          h0HghlsgSIp4Em1x81cI6pmPg19ibOtGcH4X0XBdu5U=
Subject key identifier:   8D:59:88:EA:EE:11:D2:0C:21:68:68:9A:9D:D6:E0:43:B3:3A:0A:34
Certificate issuer:       /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial:       795594B089607DF2653111BB0299531A1E9D7182
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa
Signing time:             Wed 10 Jan 2024 20:34:15 +0000
ROA not before:           Wed 10 Jan 2024 20:29:15 +0000
ROA not after:            Wed 08 Jan 2025 20:34:15 +0000
asID:                     264010
IP address blocks:        143.0.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:94:b0:89:60:7d:f2:65:31:11:bb:02:99:53:1a:1e:9d:71:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
        Validity
            Not Before: Jan 10 20:29:15 2024 GMT
            Not After : Jan  8 20:34:15 2025 GMT
        Subject: CN=8D5988EAEE11D20C2168689A9DD6E043B33A0A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:7d:94:54:c8:82:d6:08:f9:5f:41:fa:e8:
                    4b:fe:d7:f9:86:2a:9c:dc:ce:61:7a:5c:b0:4b:08:
                    9c:a2:5f:d9:db:ab:51:e3:5f:32:62:f3:9f:3e:bb:
                    2a:62:4e:69:5e:fb:65:bc:0a:40:8f:fe:af:d3:2f:
                    c9:64:ed:f1:9e:f1:a8:9f:53:08:ed:82:cb:ea:90:
                    22:a3:c4:64:d8:22:01:e3:a9:71:08:93:1f:79:ce:
                    3e:fd:54:cf:34:b9:42:ff:96:4b:81:f9:57:eb:ae:
                    4e:3f:57:73:9b:9b:3c:cf:83:70:ca:c3:84:32:c5:
                    1b:16:0d:a1:dc:54:62:f9:07:c9:fc:4a:50:f8:ff:
                    0a:91:a4:e6:a8:0e:7c:f0:1c:54:d0:6e:ea:fb:69:
                    22:e8:56:a0:51:c6:39:dc:a3:93:78:7e:05:6c:f0:
                    aa:c9:24:65:13:72:c4:a0:97:e5:4a:9a:a3:41:0e:
                    06:07:8d:dd:e9:53:65:82:cb:b0:23:aa:2d:a7:21:
                    4b:53:1a:0e:66:f3:cc:9f:01:11:1a:57:79:11:c6:
                    3a:51:b3:75:1f:2e:3f:4c:e6:21:f0:c5:e4:83:c4:
                    7c:c3:ad:72:d1:f9:e8:ec:ab:15:45:db:3d:de:fa:
                    00:2c:dd:5e:23:1a:45:de:bf:c1:c1:5c:e0:e2:05:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:88:EA:EE:11:D2:0C:21:68:68:9A:9D:D6:E0:43:B3:3A:0A:34
            X509v3 Authority Key Identifier:
                keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32322d3232203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:53:67:95:26:71:a1:3f:f0:a4:51:f6:f7:03:b1:4d:41:
         06:89:6a:f5:c8:0d:d9:ad:0f:b8:28:b6:01:06:f3:3f:1d:a8:
         d1:96:42:20:cd:1d:37:81:98:cf:e2:31:67:80:c3:1e:80:24:
         29:6f:c4:a8:05:dc:45:fd:04:0d:09:4b:f6:05:bc:69:5f:b6:
         55:1d:8b:76:cc:6e:fc:52:14:a2:df:28:53:59:f9:9d:a6:1c:
         0f:f1:90:07:f5:8c:20:7e:ae:0b:a1:87:ef:91:56:d2:f1:73:
         96:4c:ec:56:58:dc:29:3c:35:80:02:b6:f5:41:01:52:f6:2a:
         d6:ba:da:8a:ce:af:11:8a:23:66:1a:e2:96:45:f5:74:b3:2b:
         bc:ea:d1:c5:26:65:a0:a9:1d:1a:f4:ff:be:dc:f2:db:65:89:
         85:42:23:08:29:a5:1a:47:c8:66:32:73:2d:b0:c2:3b:03:42:
         e2:2b:86:8d:ad:1f:a5:66:b2:b2:41:db:4b:6c:0a:c6:4e:21:
         fd:7b:0a:77:71:e0:90:ec:8b:75:a3:7f:6f:8e:0f:49:4d:d1:
         98:a4:70:16:9e:cc:8f:36:4d:ce:df:4e:52:48:eb:17:d6:08:
         4d:7e:d8:84:ce:d4:85:2d:be:cc:0f:93:c0:08:86:81:4a:7f:
         92:ea:91:36
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeVWUsIlgffJlMRG7AplTGh6dcYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RBRThCQTYxMjQ4NUUzODUwRERFMzQ4MDZFMTFCQjg3
MUMwRDY2NzAeFw0yNDAxMTAyMDI5MTVaFw0yNTAxMDgyMDM0MTVaMDMxMTAvBgNV
BAMTKDhENTk4OEVBRUUxMUQyMEMyMTY4Njg5QTlERDZFMDQzQjMzQTBBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSn2UVMiC1gj5X0H66Ev+1/mG
KpzczmF6XLBLCJyiX9nbq1HjXzJi858+uypiTmle+2W8CkCP/q/TL8lk7fGe8aif
UwjtgsvqkCKjxGTYIgHjqXEIkx95zj79VM80uUL/lkuB+Vfrrk4/V3ObmzzPg3DK
w4QyxRsWDaHcVGL5B8n8SlD4/wqRpOaoDnzwHFTQbur7aSLoVqBRxjnco5N4fgVs
8KrJJGUTcsSgl+VKmqNBDgYHjd3pU2WCy7Ajqi2nIUtTGg5m88yfAREaV3kRxjpR
s3UfLj9M5iHwxeSDxHzDrXLR+ejsqxVF2z3e+gAs3V4jGkXev8HBXODiBRMlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjVmI6u4R0gwhaGiandbgQ7M6CjQwHwYDVR0j
BBgwFoAUza6LphJIXjhQ3eNIBuEbuHHA1mcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj
Mk0vMC9DREFFOEJBNjEyNDg1RTM4NTBEREUzNDgwNkUxMUJCODcxQzBENjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEQUU4QkE2MTI0ODVFMzg1
MERERTM0ODA2RTExQkI4NzFDMEQ2NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3dzFDZkZhRnlkWHYzZTM3QWhFVkhGMUV6Y0w5VzYyZ01iMVJqdGVwYzJNLzAv
MzEzNDMzMmUzMDJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwDEMA0GCSqGSIb3DQEBCwUAA4IBAQAdiFNnlSZx
oT/wpFH29wOxTUEGiWr1yA3ZrQ+4KLYBBvM/HajRlkIgzR03gZjP4jFngMMegCQp
b8SoBdxF/QQNCUv2BbxpX7ZVHYt2zG78UhSi3yhTWfmdphwP8ZAH9Ywgfq4LoYfv
kVbS8XOWTOxWWNwpPDWAArb1QQFS9irWutqKzq8RiiNmGuKWRfV0syu86tHFJmWg
qR0a9P++3PLbZYmFQiMIKaUaR8hmMnMtsMI7A0LiK4aNrR+lZrKyQdtLbArGTiH9
ewp3ceCQ7It1o39vjg9JTdGYpHAWnsyPNk3O305SSOsX1ghNftiEztSFLb7MD5PA
CIaBSn+S6pE2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org