Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa
File:                     3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa (raw, json)
Hash identifier:          z91CKfhD7CiOfIiJR6J6AMJmFzXJb+dnAxCOwXXuARQ=
Subject key identifier:   FD:9C:C8:C9:AF:A7:F8:8B:CE:F2:D2:AC:89:98:10:06:FE:E2:E2:9B
Certificate issuer:       /CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
Certificate serial:       30D52C41DA04328D7555E5052115150C161EE87A
Authority key identifier: 9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa
Signing time:             Fri 06 Oct 2023 13:48:40 +0000
ROA not before:           Fri 06 Oct 2023 13:43:40 +0000
ROA not after:            Fri 04 Oct 2024 13:48:40 +0000
asID:                     265127
IP address blocks:        143.208.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:2c:41:da:04:32:8d:75:55:e5:05:21:15:15:0c:16:1e:e8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBE1BBDECAC236DCAEDC2B8681988894070DBE9
        Validity
            Not Before: Oct  6 13:43:40 2023 GMT
            Not After : Oct  4 13:48:40 2024 GMT
        Subject: CN=FD9CC8C9AFA7F88BCEF2D2AC89981006FEE2E29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:ef:d1:63:a7:c5:d7:cd:8e:b4:25:e0:87:
                    18:5f:bb:cd:5d:7f:58:ed:e1:fd:e1:65:2d:ff:56:
                    b5:8e:e8:de:bc:31:bc:9b:f6:61:18:25:c5:f3:ef:
                    a7:47:8c:77:98:9e:3f:67:d6:96:80:a3:7a:0b:07:
                    1d:3f:5f:60:65:86:f5:f9:26:24:75:0f:1e:a0:8b:
                    e4:86:a2:2c:8a:16:c0:87:86:74:6e:e6:50:dc:50:
                    c6:f3:66:45:83:02:7d:13:79:e6:b0:fd:c4:0d:aa:
                    62:fd:8e:5a:6f:d6:73:f4:cd:f6:30:ca:fc:4e:eb:
                    42:25:db:14:89:e5:60:9e:ff:c1:d1:ee:d0:83:18:
                    87:e4:5c:3a:c3:aa:37:85:0f:7e:30:8c:75:75:b2:
                    2c:cf:3a:1f:e3:a5:cd:b0:6e:fc:db:83:76:e7:3f:
                    c4:cf:61:0e:18:49:3b:d0:52:78:fd:1f:7b:d4:67:
                    5e:bf:3a:08:b8:33:bb:ce:5d:cf:c0:56:92:10:fb:
                    cc:bc:03:b4:1c:ea:76:cb:70:f2:1a:ea:61:40:82:
                    c5:79:43:88:95:42:1a:46:e7:99:6f:ce:5d:9b:8b:
                    e5:31:2b:e1:75:8e:1f:d5:56:b3:c2:80:92:0a:a1:
                    83:6a:7c:e7:1d:9d:69:84:68:2b:8a:8c:0d:b2:d9:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:C8:C9:AF:A7:F8:8B:CE:F2:D2:AC:89:98:10:06:FE:E2:E2:9B
            X509v3 Authority Key Identifier:
                keyid:9D:BE:1B:BD:EC:AC:23:6D:CA:ED:C2:B8:68:19:88:89:40:70:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBE1BBDECAC236DCAEDC2B8681988894070DBE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EstCeSggA2m3NQmiYYdxS1XmB6mMaWtKasrpiTcx286A/0/3134332e3230382e3130382e302f32322d3234203d3e20323635313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ee:ed:6a:de:c7:c0:42:44:a5:c3:ff:18:a0:8b:76:0b:2d:0e:
         d8:12:5c:50:ee:b2:a5:3a:ff:48:ab:74:1f:13:35:6b:2c:4d:
         7e:c5:df:80:0b:0b:28:09:23:e1:93:a4:c6:8f:df:33:e5:a4:
         18:9c:57:8c:53:0b:a9:a5:77:7d:cf:60:e3:d5:cd:81:1e:49:
         e6:d7:62:e7:8d:b2:a9:23:0d:b1:17:d6:26:d7:e9:61:60:95:
         67:7f:58:2a:84:9e:f1:79:6c:c8:8f:4a:1a:d6:9b:e8:13:25:
         42:86:b2:84:a4:46:5a:4c:2e:91:8c:f0:4c:1f:18:19:33:7f:
         3c:13:2b:12:8a:e2:d9:3d:cb:cb:2d:5f:9e:75:a9:8c:28:eb:
         c9:c7:5a:bc:1c:bc:4b:da:06:d4:49:fd:a0:08:bf:63:07:10:
         be:2a:88:32:ab:57:a1:0c:ba:4d:4c:2e:64:ae:4f:79:d4:78:
         8d:c1:6c:ad:14:0f:89:8a:b9:b1:38:6d:e5:eb:03:cb:10:42:
         a8:ca:40:ac:c3:ac:8b:10:aa:80:7a:5f:64:f5:ec:c4:d8:e1:
         ff:02:5c:c8:cc:18:a6:24:58:52:81:34:5a:8b:09:03:d6:9c:
         ed:49:50:fa:7c:c5:bc:7f:d6:8f:33:02:98:c3:90:2b:2c:55:
         aa:d6:f4:c4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMNUsQdoEMo11VeUFIRUVDBYe6HowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCRTFCQkRFQ0FDMjM2RENBRURDMkI4NjgxOTg4ODk0
MDcwREJFOTAeFw0yMzEwMDYxMzQzNDBaFw0yNDEwMDQxMzQ4NDBaMDMxMTAvBgNV
BAMTKEZEOUNDOEM5QUZBN0Y4OEJDRUYyRDJBQzg5OTgxMDA2RkVFMkUyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6+/RY6fF182OtCXghxhfu81d
f1jt4f3hZS3/VrWO6N68Mbyb9mEYJcXz76dHjHeYnj9n1paAo3oLBx0/X2BlhvX5
JiR1Dx6gi+SGoiyKFsCHhnRu5lDcUMbzZkWDAn0Teeaw/cQNqmL9jlpv1nP0zfYw
yvxO60Il2xSJ5WCe/8HR7tCDGIfkXDrDqjeFD34wjHV1sizPOh/jpc2wbvzbg3bn
P8TPYQ4YSTvQUnj9H3vUZ16/Ogi4M7vOXc/AVpIQ+8y8A7Qc6nbLcPIa6mFAgsV5
Q4iVQhpG55lvzl2bi+UxK+F1jh/VVrPCgJIKoYNqfOcdnWmEaCuKjA2y2Vg3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/ZzIya+n+IvO8tKsiZgQBv7i4pswHwYDVR0j
BBgwFoAUnb4bveysI23K7cK4aBmIiUBw2+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXN0Q2VTZ2dBMm0zTlFtaVlZZHhTMVhtQjZtTWFXdEthc3JwaVRjeDI4
NkEvMC85REJFMUJCREVDQUMyMzZEQ0FFREMyQjg2ODE5ODg4OTQwNzBEQkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEQkUxQkJERUNBQzIzNkRD
QUVEQzJCODY4MTk4ODg5NDA3MERCRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VzdENlU2dnQTJtM05RbWlZWWR4UzFYbUI2bU1hV3RLYXNycGlUY3gyODZBLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/QbDANBgkqhkiG9w0BAQsFAAOCAQEA7u1q
3sfAQkSlw/8YoIt2Cy0O2BJcUO6ypTr/SKt0HxM1ayxNfsXfgAsLKAkj4ZOkxo/f
M+WkGJxXjFMLqaV3fc9g49XNgR5J5tdi542yqSMNsRfWJtfpYWCVZ39YKoSe8Xls
yI9KGtab6BMlQoayhKRGWkwukYzwTB8YGTN/PBMrEori2T3Lyy1fnnWpjCjrycda
vBy8S9oG1En9oAi/YwcQviqIMqtXoQy6TUwuZK5PedR4jcFsrRQPiYq5sTht5esD
yxBCqMpArMOsixCqgHpfZPXsxNjh/wJcyMwYpiRYUoE0WosJA9ac7UlQ+nzFvH/W
jzMCmMOQKyxVqtb0xA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:40 2025 by rpki-client