Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32322d3232203d3e20323634303336.roa
File:                     3134332e3133372e3132302e302f32322d3232203d3e20323634303336.roa (raw, json)
Hash identifier:          JlTPy5iK3MOrQ1diZVV8DecvGC6npIL41rzgCcYu1Es=
Subject key identifier:   F3:CB:54:44:A5:DD:50:EC:8C:A9:D5:30:83:C9:5D:93:D0:CC:3B:6E
Certificate issuer:       /CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
Certificate serial:       4823BAD84113E42450C23CC7DF486B5B312A1CE7
Authority key identifier: B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32322d3232203d3e20323634303336.roa
Signing time:             Thu 29 Jun 2023 14:18:41 +0000
ROA not before:           Thu 29 Jun 2023 14:13:41 +0000
ROA not after:            Thu 27 Jun 2024 14:18:41 +0000
asID:                     264036
IP address blocks:        143.137.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:ba:d8:41:13:e4:24:50:c2:3c:c7:df:48:6b:5b:31:2a:1c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Validity
            Not Before: Jun 29 14:13:41 2023 GMT
            Not After : Jun 27 14:18:41 2024 GMT
        Subject: CN=F3CB5444A5DD50EC8CA9D53083C95D93D0CC3B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:80:d1:36:6b:b7:e5:7d:90:de:8b:d2:b7:
                    e8:dc:a0:a3:67:f9:e5:12:cc:2c:7f:37:ab:a7:9e:
                    8d:86:ce:f7:84:28:75:35:d8:62:df:7f:47:89:80:
                    c6:0a:b3:14:0d:87:65:0f:32:a5:31:01:d2:61:a6:
                    8e:2e:bf:01:b4:64:65:db:8b:37:e4:41:43:b1:f6:
                    5e:ad:f5:52:4d:ae:3e:5d:ed:12:24:75:5c:d1:7b:
                    01:18:23:9c:da:d4:19:a0:55:70:e8:77:7a:ba:5d:
                    08:ef:60:a7:2f:ff:50:c4:3b:75:e7:0d:3f:18:f8:
                    f0:a7:0c:96:36:b9:c2:43:ca:90:57:77:0b:3d:3b:
                    9e:49:a1:2d:9c:62:32:2c:4f:74:98:42:6d:48:71:
                    9c:70:23:07:70:12:28:f3:9a:50:8a:71:ca:44:d0:
                    7a:d5:25:a2:f6:09:83:be:08:4f:9e:c3:14:73:ae:
                    61:6c:68:0a:2b:85:cc:57:1f:08:cc:c3:74:c7:cd:
                    b6:ae:0b:90:36:a8:c4:b4:46:39:c4:29:26:3a:85:
                    27:21:f0:29:a0:cd:3c:e4:41:66:8f:59:b2:42:f9:
                    90:2a:22:39:29:1d:d5:3f:cd:b5:a8:26:32:63:bb:
                    6d:b2:eb:2c:87:21:11:4e:96:d2:c1:4e:ac:b9:30:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:54:44:A5:DD:50:EC:8C:A9:D5:30:83:C9:5D:93:D0:CC:3B:6E
            X509v3 Authority Key Identifier:
                keyid:B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32322d3232203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:79:85:ac:3a:e5:78:36:96:71:f2:2c:ff:82:4b:67:9a:fc:
         d6:4d:56:60:91:84:76:39:4b:85:28:8e:97:db:39:3b:48:eb:
         b7:93:6d:7a:1a:81:96:60:80:4a:26:ce:fa:f6:22:e4:12:19:
         18:1b:89:de:5e:0b:ac:8a:6a:38:28:b5:94:47:63:89:c6:97:
         40:40:2b:5c:e8:49:8c:89:32:cc:8c:4e:57:e1:1f:42:fd:3c:
         1d:9b:4e:9b:38:97:36:cb:86:50:14:85:a8:b2:dc:57:17:40:
         b2:35:fd:e0:b1:d4:cb:da:09:46:be:c1:4e:6f:03:75:57:46:
         52:3e:44:bb:65:90:a8:f3:7f:46:95:1b:fa:6f:83:e0:51:ed:
         f9:95:c5:21:b0:8c:cd:31:81:e2:06:77:d1:54:3f:ba:2c:29:
         f8:56:e7:13:0e:4b:77:a6:19:92:7d:94:98:22:15:86:a3:51:
         1c:af:48:ef:f4:51:40:3c:fd:4b:af:8e:5f:d8:49:57:0d:9a:
         36:f6:b6:c4:b9:4b:4d:2d:8a:7d:70:09:82:43:0e:df:91:b5:
         07:c9:aa:d9:23:c4:27:e0:57:72:93:68:37:76:13:77:6c:ac:
         2e:d6:89:3c:c3:1e:23:56:71:08:c9:6f:c4:90:8d:1e:3e:16:
         bb:c2:21:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSCO62EET5CRQwjzH30hrWzEqHOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBRDE5QjJFMzRENjAyODZERTcxQjE1RDUzRjRERUEz
NENCRTVFQTAeFw0yMzA2MjkxNDEzNDFaFw0yNDA2MjcxNDE4NDFaMDMxMTAvBgNV
BAMTKEYzQ0I1NDQ0QTVERDUwRUM4Q0E5RDUzMDgzQzk1RDkzRDBDQzNCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjYDRNmu35X2Q3ovSt+jcoKNn
+eUSzCx/N6unno2GzveEKHU12GLff0eJgMYKsxQNh2UPMqUxAdJhpo4uvwG0ZGXb
izfkQUOx9l6t9VJNrj5d7RIkdVzRewEYI5za1BmgVXDod3q6XQjvYKcv/1DEO3Xn
DT8Y+PCnDJY2ucJDypBXdws9O55JoS2cYjIsT3SYQm1IcZxwIwdwEijzmlCKccpE
0HrVJaL2CYO+CE+ewxRzrmFsaAorhcxXHwjMw3THzbauC5A2qMS0RjnEKSY6hSch
8CmgzTzkQWaPWbJC+ZAqIjkpHdU/zbWoJjJju22y6yyHIRFOltLBTqy5MHURAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU88tURKXdUOyMqdUwg8ldk9DMO24wHwYDVR0j
BBgwFoAUsq0ZsuNNYCht5xsV1T9N6jTL5eowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JmVGhhbmliUDliZTQ1cFhxc3J6VE1KYkRtQmYxeW1ONDVDQkRRcm1u
eGIvMC9CMkFEMTlCMkUzNEQ2MDI4NkRFNzFCMTVENTNGNERFQTM0Q0JFNUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQUQxOUIyRTM0RDYwMjg2
REU3MUIxNUQ1M0Y0REVBMzRDQkU1RUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCZlRoYW5pYlA5YmU0NXBYcXNyelRNSmJEbUJmMXltTjQ1Q0JEUXJtbnhiLzAv
MzEzNDMzMmUzMTMzMzcyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMwMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo+JeDANBgkqhkiG9w0BAQsFAAOCAQEAJ3mF
rDrleDaWcfIs/4JLZ5r81k1WYJGEdjlLhSiOl9s5O0jrt5NtehqBlmCASibO+vYi
5BIZGBuJ3l4LrIpqOCi1lEdjicaXQEArXOhJjIkyzIxOV+EfQv08HZtOmziXNsuG
UBSFqLLcVxdAsjX94LHUy9oJRr7BTm8DdVdGUj5Eu2WQqPN/RpUb+m+D4FHt+ZXF
IbCMzTGB4gZ30VQ/uiwp+FbnEw5Ld6YZkn2UmCIVhqNRHK9I7/RRQDz9S6+OX9hJ
Vw2aNva2xLlLTS2KfXAJgkMO35G1B8mq2SPEJ+BXcpNoN3YTd2ysLtaJPMMeI1Zx
CMlvxJCNHj4Wu8Ihqw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org