Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa
File:                     3230312e37362e3136302e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          53fpu6m/qPJEXOD+Gg/80ft4NmuUJ6xj+4Ac4V+gTHY=
Subject key identifier:   D4:AE:B6:38:46:96:B5:28:8A:C2:46:DC:CF:AE:89:14:AE:92:E0:1B
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       61355F14957C737EA4F89589336AAF807507905E
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        201.76.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:35:5f:14:95:7c:73:7e:a4:f8:95:89:33:6a:af:80:75:07:90:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=D4AEB6384696B5288AC246DCCFAE8914AE92E01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:5c:94:a5:67:ae:02:b9:d7:f4:dd:75:d1:
                    3c:ab:90:0f:2b:97:8a:b5:62:e3:e4:22:07:fc:6d:
                    48:42:20:96:b0:b2:38:95:70:c9:36:e9:50:f1:7b:
                    90:8f:13:82:ae:1a:7c:cb:14:f6:96:64:80:cd:9a:
                    fb:3c:d2:dd:54:a1:d3:ce:a3:83:88:52:4c:b2:c3:
                    a9:93:ca:89:8c:9b:c3:24:d4:18:c9:f4:0b:d3:4d:
                    df:ca:42:87:e2:12:a0:97:16:eb:11:71:84:b3:cd:
                    94:37:c4:1c:43:a3:21:90:bf:70:6f:85:a8:28:17:
                    90:5e:f5:a1:67:af:7e:61:42:74:4d:f8:3d:f9:fe:
                    58:99:fb:5f:ad:ce:90:89:5c:26:35:fb:a8:38:5c:
                    3a:26:85:53:ce:76:72:ac:2c:95:de:be:d2:03:10:
                    77:95:ce:b1:e1:40:bd:ac:79:92:56:93:0b:09:59:
                    e6:dd:5c:87:55:a8:35:c4:97:1c:98:f0:89:25:1e:
                    c2:74:27:ee:e3:e0:91:9d:7a:44:2c:e8:d5:01:f3:
                    78:b7:b2:5b:b1:25:a6:96:b6:71:9c:ae:85:13:1e:
                    4c:2a:15:d2:b4:57:f5:4f:ca:18:bc:ce:38:3c:1c:
                    c4:2b:9e:0e:93:d4:53:76:5c:f4:5e:38:14:bc:24:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:B6:38:46:96:B5:28:8A:C2:46:DC:CF:AE:89:14:AE:92:E0:1B
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3230312e37362e3136302e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:fa:91:a2:5c:de:d2:50:7e:be:ef:94:09:0e:58:9c:24:f3:
         ad:91:e5:2f:80:e4:db:7b:3b:e3:24:6e:37:44:0d:41:8e:1b:
         dd:e3:29:ee:e3:a7:8b:5a:d6:69:0f:e6:5f:75:1c:cb:84:3a:
         20:5c:34:00:ae:ab:b1:e3:28:de:2d:fe:06:f0:05:05:91:51:
         76:a2:e6:a9:dc:8b:e0:43:19:9f:02:f5:83:01:06:92:6e:1c:
         8f:78:8e:f8:6d:ae:e4:9c:b6:dd:6f:3b:a9:8a:83:1f:80:eb:
         fa:27:41:a4:71:d5:fb:1c:d8:8b:a2:cf:17:59:3a:dc:ac:6a:
         fc:12:d8:0e:4d:f2:3f:77:b9:04:82:ef:a0:5d:65:0c:01:e2:
         cd:cc:1b:cb:e3:4c:a4:06:2b:94:ca:1a:a8:32:60:3e:30:99:
         c0:e5:c2:ce:87:61:5a:a1:53:98:19:bf:74:10:df:02:36:18:
         1f:d4:8e:be:35:36:c7:d2:05:2c:83:de:a8:f2:0c:bd:ec:98:
         a2:12:32:b0:3c:de:08:ef:0d:80:c0:11:3b:13:87:ab:41:b0:
         34:48:af:0b:fd:77:37:86:e0:41:ab:43:dc:42:32:e4:5f:04:
         0c:55:76:cb:cf:bf:ce:56:dc:7e:76:a5:68:8d:a9:35:42:b0:
         46:7d:9d:ff
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYTVfFJV8c36k+JWJM2qvgHUHkF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGOUJGQkY1M0NCNjY2QUFGNzZGRTczMjc2QjcwMUM3
RTIzN0E2RTAeFw0yNDAzMjUyMjUwNDBaFw0yNTAzMjQyMjU1NDBaMDMxMTAvBgNV
BAMTKEQ0QUVCNjM4NDY5NkI1Mjg4QUMyNDZEQ0NGQUU4OTE0QUU5MkUwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC621yUpWeuArnX9N110TyrkA8r
l4q1YuPkIgf8bUhCIJawsjiVcMk26VDxe5CPE4KuGnzLFPaWZIDNmvs80t1UodPO
o4OIUkyyw6mTyomMm8Mk1BjJ9AvTTd/KQofiEqCXFusRcYSzzZQ3xBxDoyGQv3Bv
hagoF5Be9aFnr35hQnRN+D35/liZ+1+tzpCJXCY1+6g4XDomhVPOdnKsLJXevtID
EHeVzrHhQL2seZJWkwsJWebdXIdVqDXElxyY8IklHsJ0J+7j4JGdekQs6NUB83i3
sluxJaaWtnGcroUTHkwqFdK0V/VPyhi8zjg8HMQrng6T1FN2XPReOBS8JLpxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1K62OEaWtSiKwkbcz66JFK6S4BswHwYDVR0j
BBgwFoAUQ/m/v1PLZmqvdv5zJ2twHH4jem4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURNQWVjU0ZGN0RqVEdxZTh4TFdwUDJIa2dZVVRHTWdtTWE1UTd3Tlg0
WjQvMC80M0Y5QkZCRjUzQ0I2NjZBQUY3NkZFNzMyNzZCNzAxQzdFMjM3QTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQzRjlCRkJGNTNDQjY2NkFB
Rjc2RkU3MzI3NkI3MDFDN0UyMzdBNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VETUFlY1NGRjdEalRHcWU4eExXcFAySGtnWVVUR01nbU1hNVE3d05YNFo0LzAv
MzIzMDMxMmUzNzM2MmUzMTM2MzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyUygMA0GCSqGSIb3DQEBCwUAA4IBAQDF+pGiXN7S
UH6+75QJDlicJPOtkeUvgOTbezvjJG43RA1Bjhvd4ynu46eLWtZpD+ZfdRzLhDog
XDQArqux4yjeLf4G8AUFkVF2ouap3IvgQxmfAvWDAQaSbhyPeI74ba7knLbdbzup
ioMfgOv6J0GkcdX7HNiLos8XWTrcrGr8EtgOTfI/d7kEgu+gXWUMAeLNzBvL40yk
BiuUyhqoMmA+MJnA5cLOh2FaoVOYGb90EN8CNhgf1I6+NTbH0gUsg96o8gy97Jii
EjKwPN4I7w2AwBE7E4erQbA0SK8L/Xc3huBBq0PcQjLkXwQMVXbLz7/OVtx+dqVo
jak1QrBGfZ3/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org