Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
File:                     3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          WCYTmLQbo3xNVD9upj6FZfeGbHpb/ymh1YhwDgOZZ2o=
Subject key identifier:   21:2C:DA:8E:82:38:36:66:9B:2E:53:6D:50:1E:7E:D7:A9:5A:23:25
Certificate issuer:       /CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
Certificate serial:       6C6A0A91A77A69E28C40199AC1BEB81A5FFCC99A
Authority key identifier: B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
Signing time:             Sun 17 Mar 2024 15:00:01 +0000
ROA not before:           Sun 17 Mar 2024 14:55:01 +0000
ROA not after:            Mon 17 Mar 2025 15:00:01 +0000
asID:                     52863
IP address blocks:        143.255.200.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6a:0a:91:a7:7a:69:e2:8c:40:19:9a:c1:be:b8:1a:5f:fc:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
        Validity
            Not Before: Mar 17 14:55:01 2024 GMT
            Not After : Mar 17 15:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:67:99:9c:5c:4b:0e:81:7c:83:c8:c3:de:
                    49:46:ec:79:c8:53:ef:6e:a2:c1:98:9d:dd:dc:47:
                    ca:df:49:15:7d:18:6c:0b:b0:73:88:bc:53:71:c5:
                    3a:7a:03:5e:e5:8d:a4:95:26:c5:a5:3f:91:e0:8c:
                    cb:f7:1a:4e:43:d3:d2:b1:a4:c0:c6:a2:4e:1c:da:
                    3c:5a:9f:8a:7b:bd:34:1f:f7:b4:ea:bf:29:c1:41:
                    f0:c4:37:46:9c:d2:3e:6e:a4:5c:ba:ca:5b:97:e0:
                    d0:dd:f7:5d:5a:f0:6c:dd:ba:ff:e0:b1:fc:b7:a7:
                    ea:79:5f:ef:4f:f6:23:a5:d2:1b:6a:93:8d:d2:c2:
                    c0:be:e4:b3:60:69:0a:14:a7:f0:87:5e:2a:04:bf:
                    f6:84:25:9b:80:e0:77:ae:73:fd:5c:a5:bf:31:c6:
                    c0:ab:4b:a8:38:5d:d8:39:fa:b2:d3:3b:93:01:1d:
                    84:e5:38:69:eb:fc:14:8c:d1:5b:22:cc:01:e3:7b:
                    95:5e:9d:51:50:83:7c:0f:11:b8:e1:92:9b:17:41:
                    87:7f:1d:e7:ac:09:52:e2:d8:e5:f7:75:4c:67:70:
                    ee:a0:f9:de:87:5b:2e:dc:ab:37:03:a6:7b:1d:3d:
                    6d:9c:84:54:15:c7:d7:cd:47:5c:3d:99:e2:66:11:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2C:DA:8E:82:38:36:66:9B:2E:53:6D:50:1E:7E:D7:A9:5A:23:25
            X509v3 Authority Key Identifier:
                keyid:B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:ff:ef:95:2e:af:75:6c:93:85:54:f3:52:db:4b:93:ed:
         b2:0f:89:fa:d9:dd:2d:15:01:b0:0d:0b:3d:cf:2c:5e:5e:8c:
         28:82:26:cb:e1:6a:13:77:5a:62:b1:b3:8a:dd:0d:c3:f1:c2:
         5e:2d:f8:54:2d:8c:77:58:76:5a:5e:e2:6a:28:33:02:93:d1:
         51:ff:11:37:82:fc:94:14:5b:41:da:31:c9:cf:03:57:b6:ea:
         4a:97:f3:d5:29:68:6e:e9:d0:18:3d:28:ab:1a:73:f7:c8:af:
         f1:f4:96:1e:5e:a0:bb:60:f9:e9:ab:eb:25:8a:58:f1:86:8d:
         77:7e:a8:82:65:7a:bc:ad:20:9a:b4:45:79:73:88:9f:76:7e:
         2d:48:63:25:60:4e:54:6d:2e:51:77:fb:71:f8:65:5e:6f:8a:
         fa:11:f4:f8:7a:ac:3f:d3:d7:ef:09:e8:83:26:1a:e6:3a:30:
         fb:4f:d1:14:f2:bb:3e:fe:af:96:b0:ef:65:03:9f:c5:58:27:
         29:b0:95:f8:c2:ad:e4:66:19:f8:8d:fb:b3:38:56:c3:1e:68:
         7f:4c:96:ce:70:6b:22:6c:73:eb:50:2a:e7:ea:b2:04:0c:14:
         76:97:03:f1:cb:0c:75:d9:96:0b:50:21:6f:30:7a:bb:93:20:
         bd:67:62:eb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbGoKkad6aeKMQBmawb64Gl/8yZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExMEZDOUEwQzhFMjY0Mzc1RTg1QzMxNEIxRkM5NEM1
NzQ2NjAzRDAeFw0yNDAzMTcxNDU1MDFaFw0yNTAzMTcxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUNGOTY3OTk5QzVDNEIwRTgx
N0M4M0M4QzNERTQ5NDZFQzc5Qzg1M0VGNkVBMkMxOTg5REREREM0N0NBREY0OTE1
N0QxODZDMEJCMDczODhCQzUzNzFDNTNBN0EwMzVFRTU4REE0OTUyNkM1QTUzRjkx
RTA4Q0NCRjcxQTRFNDNEM0QyQjFBNEMwQzZBMjRFMUNEQTNDNUE5RjhBN0JCRDM0
MUZGN0I0RUFCRjI5QzE0MUYwQzQzNzQ2OUNEMjNFNkVBNDVDQkFDQTVCOTdFMEQw
RERGNzVENUFGMDZDRERCQUZGRTBCMUZDQjdBN0VBNzk1RkVGNEZGNjIzQTVEMjFC
NkE5MzhERDJDMkMwQkVFNEIzNjA2OTBBMTRBN0YwODc1RTJBMDRCRkY2ODQyNTlC
ODBFMDc3QUU3M0ZENUNBNUJGMzFDNkMwQUI0QkE4Mzg1REQ4MzlGQUIyRDMzQjkz
MDExRDg0RTUzODY5RUJGQzE0OENEMTVCMjJDQzAxRTM3Qjk1NUU5RDUxNTA4MzdD
MEYxMUI4RTE5MjlCMTc0MTg3N0YxREU3QUMwOTUyRTJEOEU1Rjc3NTRDNjc3MEVF
QTBGOURFODc1QjJFRENBQjM3MDNBNjdCMUQzRDZEOUM4NDU0MTVDN0Q3Q0Q0NzVD
M0Q5OUUyNjYxMTZFQTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArPlnmZxcSw6BfIPIw95JRux5yFPvbqLBmJ3d3EfK30kVfRhsC7Bz
iLxTccU6egNe5Y2klSbFpT+R4IzL9xpOQ9PSsaTAxqJOHNo8Wp+Ke700H/e06r8p
wUHwxDdGnNI+bqRcuspbl+DQ3fddWvBs3br/4LH8t6fqeV/vT/YjpdIbapON0sLA
vuSzYGkKFKfwh14qBL/2hCWbgOB3rnP9XKW/McbAq0uoOF3YOfqy0zuTAR2E5Thp
6/wUjNFbIswB43uVXp1RUIN8DxG44ZKbF0GHfx3nrAlS4tjl93VMZ3DuoPneh1su
3Ks3A6Z7HT1tnIRUFcfXzUdcPZniZhFupQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCEs2o6CODZmmy5TbVAeftepWiMlMB8GA1UdIwQYMBaAFLEQ/JoMjiZDdehcMUsf
yUxXRmA9MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZWd2hoa0M5cXI5Ym5B
NmthYmtNZFpIRlBvU01rRG12SlJWMmUxRGtDaUwzLzAvQjExMEZDOUEwQzhFMjY0
Mzc1RTg1QzMxNEIxRkM5NEM1NzQ2NjAzRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CMTEwRkM5QTBDOEUyNjQzNzVFODVDMzE0QjFGQzk0QzU3NDY2
MDNELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GVndoaGtDOXFyOWJuQTZrYWJr
TWRaSEZQb1NNa0RtdkpSVjJlMURrQ2lMMy8wLzMxMzQzMzJlMzIzNTM1MmUzMjMw
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzgzNjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
j//IMA0GCSqGSIb3DQEBCwUAA4IBAQATav/vlS6vdWyThVTzUttLk+2yD4n62d0t
FQGwDQs9zyxeXowogibL4WoTd1pisbOK3Q3D8cJeLfhULYx3WHZaXuJqKDMCk9FR
/xE3gvyUFFtB2jHJzwNXtupKl/PVKWhu6dAYPSirGnP3yK/x9JYeXqC7YPnpq+sl
iljxho13fqiCZXq8rSCatEV5c4ifdn4tSGMlYE5UbS5Rd/tx+GVeb4r6EfT4eqw/
09fvCeiDJhrmOjD7T9EU8rs+/q+WsO9lA5/FWCcpsJX4wq3kZhn4jfuzOFbDHmh/
TJbOcGsibHPrUCrn6rIEDBR2lwPxywx12ZYLUCFvMHq7kyC9Z2Lr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org