Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139372e302f32342d3234203d3e20323634303130.roa
File:                     3134332e302e3139372e302f32342d3234203d3e20323634303130.roa (raw, json)
Hash identifier:          EYNEQdfOMzS8gXh76z8/Gn6ShmXUCmt5WZcWr/5uZAQ=
Subject key identifier:   B1:8C:D6:BB:BB:15:61:1A:61:61:0B:2D:3D:F7:AB:37:64:CE:6B:FB
Certificate issuer:       /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial:       30926260C1FF550BF6829D181686BF39EA3E4509
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139372e302f32342d3234203d3e20323634303130.roa
Signing time:             Wed 10 Jan 2024 20:34:21 +0000
ROA not before:           Wed 10 Jan 2024 20:29:21 +0000
ROA not after:            Wed 08 Jan 2025 20:34:21 +0000
asID:                     264010
IP address blocks:        143.0.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:92:62:60:c1:ff:55:0b:f6:82:9d:18:16:86:bf:39:ea:3e:45:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
        Validity
            Not Before: Jan 10 20:29:21 2024 GMT
            Not After : Jan  8 20:34:21 2025 GMT
        Subject: CN=B18CD6BBBB15611A61610B2D3DF7AB3764CE6BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:e7:2d:25:71:32:8d:78:ab:77:a8:de:f4:
                    00:5f:33:60:8e:a0:77:d5:b1:89:19:e4:a7:f4:78:
                    21:de:b5:3b:e3:82:94:0b:d4:04:f8:55:31:23:ed:
                    d4:ab:eb:96:1c:64:fb:a5:ca:33:b7:56:47:24:2b:
                    0d:70:5d:d7:a0:d3:83:df:d0:78:5a:47:c9:0d:92:
                    70:94:93:91:22:d7:34:9c:57:8c:af:34:ac:55:c6:
                    46:3a:bd:50:ad:fe:a3:b9:34:51:a8:e5:f3:e8:a7:
                    8e:8e:48:03:9f:42:47:fb:18:19:ce:91:5a:a9:ab:
                    e8:8e:6a:b2:49:09:0a:44:b2:f3:22:ec:2f:1d:fe:
                    c1:f4:31:bb:cd:a6:3b:02:dd:1c:28:b0:42:74:4c:
                    a8:e2:17:15:31:f5:91:67:7d:94:9a:c0:33:26:95:
                    95:bc:a5:30:21:3c:ed:40:78:7d:dc:28:8c:44:aa:
                    1d:ee:be:3e:2f:50:68:b0:70:71:04:6a:dc:9f:38:
                    42:96:09:73:93:e6:9a:ab:03:b7:2e:be:20:5e:dd:
                    02:0d:17:90:fa:40:30:25:bd:c5:63:8f:4e:db:c9:
                    e0:75:5e:30:9f:72:e0:ad:bc:95:00:c9:6f:44:34:
                    35:ec:5c:20:54:75:ec:6e:3d:b2:52:55:a2:51:24:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:D6:BB:BB:15:61:1A:61:61:0B:2D:3D:F7:AB:37:64:CE:6B:FB
            X509v3 Authority Key Identifier:
                keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139372e302f32342d3234203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:66:dd:60:35:ed:2f:64:2c:2d:2e:56:7c:81:e2:51:c6:
         f5:5a:88:5f:e6:bc:13:1b:39:b8:e8:e7:ef:41:2f:ea:18:66:
         46:fc:b0:c1:14:e0:bd:f1:ea:8c:ec:65:4d:83:b8:1e:80:2a:
         27:3a:b2:ba:ba:85:10:89:99:63:ea:11:98:3d:71:12:e8:3a:
         0e:2f:0f:70:ab:cb:25:bb:3e:cc:c7:0f:61:74:65:e6:49:a0:
         28:8e:8b:d4:fb:ac:06:72:19:0c:e9:82:85:7f:21:f8:0e:e7:
         5b:fa:5d:25:75:d3:9b:3f:b7:f4:7f:2a:80:19:5f:2f:96:2e:
         91:ff:e1:b5:c9:67:cf:8d:0c:a6:5a:49:a3:be:bc:5b:a9:bb:
         d2:0c:bf:90:c5:78:a2:d5:e7:07:7b:38:71:0d:f1:1d:2d:3d:
         e5:9e:fd:ac:ce:3c:64:b2:3c:5d:aa:90:be:59:cf:31:7d:df:
         5e:6d:a1:51:33:b5:f6:9c:2f:42:97:bf:36:54:4b:69:9d:14:
         d6:75:61:c0:6f:0e:f5:f0:69:30:5d:37:45:56:7a:fc:cb:1f:
         2a:02:c1:47:ae:72:be:08:5e:9d:c7:a2:af:f3:5b:97:02:c1:
         47:29:99:b7:b5:df:0f:6d:5e:43:03:c1:12:e8:47:dd:e7:1c:
         34:e5:fb:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMJJiYMH/VQv2gp0YFoa/Oeo+RQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RBRThCQTYxMjQ4NUUzODUwRERFMzQ4MDZFMTFCQjg3
MUMwRDY2NzAeFw0yNDAxMTAyMDI5MjFaFw0yNTAxMDgyMDM0MjFaMDMxMTAvBgNV
BAMTKEIxOENENkJCQkIxNTYxMUE2MTYxMEIyRDNERjdBQjM3NjRDRTZCRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/uctJXEyjXird6je9ABfM2CO
oHfVsYkZ5Kf0eCHetTvjgpQL1AT4VTEj7dSr65YcZPulyjO3VkckKw1wXdeg04Pf
0HhaR8kNknCUk5Ei1zScV4yvNKxVxkY6vVCt/qO5NFGo5fPop46OSAOfQkf7GBnO
kVqpq+iOarJJCQpEsvMi7C8d/sH0MbvNpjsC3RwosEJ0TKjiFxUx9ZFnfZSawDMm
lZW8pTAhPO1AeH3cKIxEqh3uvj4vUGiwcHEEatyfOEKWCXOT5pqrA7cuviBe3QIN
F5D6QDAlvcVjj07byeB1XjCfcuCtvJUAyW9ENDXsXCBUdexuPbJSVaJRJKyBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsYzWu7sVYRphYQstPferN2TOa/swHwYDVR0j
BBgwFoAUza6LphJIXjhQ3eNIBuEbuHHA1mcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj
Mk0vMC9DREFFOEJBNjEyNDg1RTM4NTBEREUzNDgwNkUxMUJCODcxQzBENjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NEQUU4QkE2MTI0ODVFMzg1
MERERTM0ODA2RTExQkI4NzFDMEQ2NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3dzFDZkZhRnlkWHYzZTM3QWhFVkhGMUV6Y0w5VzYyZ01iMVJqdGVwYzJNLzAv
MzEzNDMzMmUzMDJlMzEzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDFMA0GCSqGSIb3DQEBCwUAA4IBAQAesmbdYDXt
L2QsLS5WfIHiUcb1Wohf5rwTGzm46OfvQS/qGGZG/LDBFOC98eqM7GVNg7gegCon
OrK6uoUQiZlj6hGYPXES6DoOLw9wq8sluz7Mxw9hdGXmSaAojovU+6wGchkM6YKF
fyH4Dudb+l0lddObP7f0fyqAGV8vli6R/+G1yWfPjQymWkmjvrxbqbvSDL+QxXii
1ecHezhxDfEdLT3lnv2szjxksjxdqpC+Wc8xfd9ebaFRM7X2nC9Cl782VEtpnRTW
dWHAbw718GkwXTdFVnr8yx8qAsFHrnK+CF6dx6Kv81uXAsFHKZm3td8PbV5DA8ES
6Efd5xw05fvU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org