Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32332d3233203d3e203532393136.roa (raw, json)
Hash identifier:          95fLGrNZX360BwV/sCW5V/sQg6FbmIJZo70fNepo8ds=
Subject key identifier:   F8:6F:9D:E7:43:15:18:EF:1C:63:17:DB:D3:81:E2:8F:9B:F4:13:4D
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       685729CB4CB829CD86994FA04885916F8D695F5C
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
Signing time:             Sat 09 Dec 2023 14:36:53 +0000
ROA not before:           Sat 09 Dec 2023 14:31:53 +0000
ROA not after:            Sat 07 Dec 2024 14:36:53 +0000
asID:                     52916
IP address blocks:        143.255.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:57:29:cb:4c:b8:29:cd:86:99:4f:a0:48:85:91:6f:8d:69:5f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Dec  9 14:31:53 2023 GMT
            Not After : Dec  7 14:36:53 2024 GMT
        Subject: CN=F86F9DE7431518EF1C6317DBD381E28F9BF4134D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:eb:85:ed:63:52:d3:ef:6b:42:36:59:ad:
                    90:1b:d0:d8:8d:b2:7d:d2:06:26:9a:2c:88:47:91:
                    c5:18:af:a2:44:92:c4:bd:69:a8:8d:8d:ce:67:2c:
                    f3:47:64:16:9c:c9:fd:fb:fe:6c:7f:5b:d5:8e:e6:
                    32:3c:a1:7b:59:c6:5c:eb:1b:a7:df:9e:ae:80:e7:
                    77:d2:26:6f:70:3f:76:10:4c:b5:85:59:21:4b:98:
                    c3:18:a8:dc:f8:ed:a9:5a:51:dc:f9:29:9f:ae:c2:
                    64:1f:99:35:dd:aa:e4:69:68:6c:bb:96:2c:c8:e2:
                    22:98:bf:48:b3:81:11:66:cc:59:52:39:97:77:cd:
                    5f:9e:54:4a:ed:8a:89:ef:31:56:58:6a:93:4e:5d:
                    18:cd:a0:cd:8c:07:35:7d:4a:66:05:16:ed:6b:5c:
                    65:54:fe:28:e9:84:a5:69:39:42:b3:1e:9b:34:ed:
                    82:1e:32:85:7f:cf:78:79:16:69:fd:3c:9f:e9:1f:
                    54:4e:0b:43:56:e7:e3:19:2d:5e:88:3b:76:6e:13:
                    f0:b2:45:75:8a:38:aa:ae:ee:cf:44:56:0c:6a:98:
                    8c:2d:e3:f4:3b:95:fd:6e:ba:42:09:54:ca:8a:88:
                    10:de:a7:3e:d7:be:7e:eb:ac:f4:e7:fa:07:61:5d:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:9D:E7:43:15:18:EF:1C:63:17:DB:D3:81:E2:8F:9B:F4:13:4D
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:ac:2f:11:35:96:e1:45:8b:b3:11:1c:f2:6c:e7:2f:84:
         1e:33:71:d4:af:a9:39:e3:43:df:63:10:74:98:d7:7f:17:b2:
         f5:40:53:36:18:2c:fc:21:49:be:b3:2d:87:e5:62:80:65:46:
         9f:75:48:0d:43:a4:67:fb:9b:82:c3:2b:34:92:38:ea:c4:5c:
         30:47:8e:0c:37:9e:11:00:63:c2:99:77:f0:3c:f3:6c:f8:c9:
         06:63:1d:df:87:dc:fc:71:52:d8:e7:ce:23:e7:38:b8:ba:96:
         dd:ba:be:d9:b8:ad:42:26:72:b5:2b:20:41:3f:e1:56:70:9b:
         f9:2c:9a:0f:7c:81:91:2b:73:7c:36:61:4c:08:44:b3:26:e3:
         d8:8d:2e:ca:da:f2:ae:54:68:66:9d:5a:48:2c:84:59:fa:e9:
         6e:8f:18:d0:1a:51:0f:91:de:5c:56:87:8e:28:61:5b:fc:81:
         2e:d8:c9:7e:59:9d:37:d4:4d:da:64:a5:ae:85:e4:74:28:eb:
         a1:6f:a7:fa:1a:c1:24:6f:97:d9:ed:f3:fb:52:6e:16:42:ae:
         86:c1:2f:61:fd:28:ca:25:59:32:d0:2f:37:bb:ac:9c:56:2c:
         42:e1:29:b3:0b:98:6b:77:da:b5:c9:f6:c3:f4:cb:75:3a:fb:
         a3:a3:22:4b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaFcpy0y4Kc2GmU+gSIWRb41pX1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwMzRDNEI3MUM4RkQ1Q0YzQ0M3RTNDMDJFQ0Y4MjJB
MUEyMTczRDAeFw0yMzEyMDkxNDMxNTNaFw0yNDEyMDcxNDM2NTNaMDMxMTAvBgNV
BAMTKEY4NkY5REU3NDMxNTE4RUYxQzYzMTdEQkQzODFFMjhGOUJGNDEzNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81OuF7WNS0+9rQjZZrZAb0NiN
sn3SBiaaLIhHkcUYr6JEksS9aaiNjc5nLPNHZBacyf37/mx/W9WO5jI8oXtZxlzr
G6ffnq6A53fSJm9wP3YQTLWFWSFLmMMYqNz47alaUdz5KZ+uwmQfmTXdquRpaGy7
lizI4iKYv0izgRFmzFlSOZd3zV+eVErtionvMVZYapNOXRjNoM2MBzV9SmYFFu1r
XGVU/ijphKVpOUKzHps07YIeMoV/z3h5Fmn9PJ/pH1ROC0NW5+MZLV6IO3ZuE/Cy
RXWKOKqu7s9EVgxqmIwt4/Q7lf1uukIJVMqKiBDepz7Xvn7rrPTn+gdhXccvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+G+d50MVGO8cYxfb04Hij5v0E00wHwYDVR0j
BBgwFoAU0QNMS3HI/VzzzH48Auz4IqGiFz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMC9EMTAzNEM0QjcxQzhGRDVDRjNDQzdFM0MwMkVDRjgyMkExQTIxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QxMDM0QzRCNzFDOEZENUNG
M0NDN0UzQzAyRUNGODIyQTFBMjE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBj/8QMA0GCSqGSIb3DQEBCwUAA4IBAQAi+KwvETWW
4UWLsxEc8mznL4QeM3HUr6k540PfYxB0mNd/F7L1QFM2GCz8IUm+sy2H5WKAZUaf
dUgNQ6Rn+5uCwys0kjjqxFwwR44MN54RAGPCmXfwPPNs+MkGYx3fh9z8cVLY584j
5zi4upbdur7ZuK1CJnK1KyBBP+FWcJv5LJoPfIGRK3N8NmFMCESzJuPYjS7K2vKu
VGhmnVpILIRZ+ulujxjQGlEPkd5cVoeOKGFb/IEu2Ml+WZ031E3aZKWuheR0KOuh
b6f6GsEkb5fZ7fP7Um4WQq6GwS9h/SjKJVky0C83u6ycVixC4SmzC5hrd9q1yfbD
9Mt1OvujoyJL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org