Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132312e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132312e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          Wau8/BUchmdkiTJu/+i7Av5UTGdAM9zE8+cXIsBhzZA=
Subject key identifier:   45:64:F9:6C:A4:AD:1E:6E:66:3C:AA:83:B2:E2:CA:9C:EA:2A:B3:9A
Certificate issuer:       /CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
Certificate serial:       306FF5C8B92F4ACEE4628AF5EBC920F84358D4BA
Authority key identifier: B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132312e302f32342d3234203d3e20323634303336.roa
Signing time:             Thu 29 Jun 2023 14:18:41 +0000
ROA not before:           Thu 29 Jun 2023 14:13:41 +0000
ROA not after:            Thu 27 Jun 2024 14:18:41 +0000
asID:                     264036
IP address blocks:        143.137.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:f5:c8:b9:2f:4a:ce:e4:62:8a:f5:eb:c9:20:f8:43:58:d4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Validity
            Not Before: Jun 29 14:13:41 2023 GMT
            Not After : Jun 27 14:18:41 2024 GMT
        Subject: CN=4564F96CA4AD1E6E663CAA83B2E2CA9CEA2AB39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:13:8a:e6:53:12:04:67:67:c7:6f:67:8a:
                    17:f5:f0:83:96:65:88:37:91:d3:4e:76:96:3b:96:
                    37:f5:fb:7e:3f:8e:92:4f:fd:b6:f8:ea:4b:85:5e:
                    19:de:f7:41:9c:41:13:62:2e:80:2a:01:13:ae:99:
                    64:8a:0f:18:8a:e2:73:ca:30:cb:f0:27:4a:63:de:
                    2d:d8:8b:54:d4:8a:09:85:e6:51:a0:9c:ef:52:8b:
                    c4:35:35:8c:24:6f:e8:61:9c:22:17:f0:ef:c1:b8:
                    49:40:b2:97:0a:bc:f4:1c:ed:cb:d9:58:af:a2:0f:
                    8e:67:fe:bd:56:67:f1:56:a3:25:2d:d3:3a:27:42:
                    63:21:65:14:ec:d8:2d:d9:4f:1e:08:7a:d4:46:be:
                    b1:da:1a:f7:86:31:ea:78:03:c3:7d:cb:25:3c:47:
                    23:c1:59:8c:d0:ab:f9:7f:46:b1:7b:14:f7:45:1e:
                    4f:f0:37:0e:d1:41:0a:1f:5e:59:15:74:e0:3f:44:
                    a7:ad:28:d7:42:00:9f:80:12:b8:63:00:0f:9a:26:
                    2d:b3:1f:fa:17:89:a2:77:d6:64:6c:45:14:da:e7:
                    7e:f4:f4:64:4d:76:24:99:9d:39:a0:63:f9:cc:fb:
                    f4:da:ff:53:f0:65:e2:d3:d7:9f:1c:82:e4:9d:1b:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:F9:6C:A4:AD:1E:6E:66:3C:AA:83:B2:E2:CA:9C:EA:2A:B3:9A
            X509v3 Authority Key Identifier:
                keyid:B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132312e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:22:a0:f2:e2:ce:6a:bc:b5:6e:ec:26:70:d6:5d:f3:28:71:
         62:c4:89:42:ee:91:d8:51:74:47:9b:ef:34:22:44:28:ba:d7:
         67:e2:0e:9f:34:ea:e3:9a:38:c1:ff:e4:42:c5:13:4f:6c:fc:
         2d:fa:25:2a:f2:4d:53:bf:bb:ab:17:ee:5a:62:2a:cd:f5:f0:
         86:c4:92:aa:ff:6a:98:48:2c:d2:47:80:74:a8:9e:f7:23:65:
         f9:c2:23:6f:da:19:c8:90:b7:2e:5d:9c:bf:cc:0c:cb:77:b8:
         8e:b2:34:b5:f6:aa:10:c0:c1:0f:59:03:db:f0:03:f0:55:5b:
         7c:c9:ff:c5:36:48:db:11:e6:f1:a8:3e:cd:65:1a:a5:58:58:
         11:ba:85:fb:c6:f5:5f:c4:e9:68:a0:43:7c:5e:30:4e:ab:84:
         c2:6f:fd:f6:f1:d4:24:bc:60:8f:9f:3d:dd:08:1c:b7:91:e6:
         ab:16:11:a3:a4:be:c6:20:9b:e6:24:95:86:be:ff:6d:54:f5:
         22:4a:2a:59:60:7d:60:34:24:bb:2e:6a:f6:24:49:d2:f5:e8:
         98:61:db:a9:2c:83:6e:af:6c:15:ab:67:62:0e:9b:12:b5:e5:
         c4:a5:0f:6f:e1:78:f8:d6:80:0a:76:0e:58:fc:af:4d:5f:d0:
         a1:b7:c3:f4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMG/1yLkvSs7kYor168kg+ENY1LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBRDE5QjJFMzRENjAyODZERTcxQjE1RDUzRjRERUEz
NENCRTVFQTAeFw0yMzA2MjkxNDEzNDFaFw0yNDA2MjcxNDE4NDFaMDMxMTAvBgNV
BAMTKDQ1NjRGOTZDQTRBRDFFNkU2NjNDQUE4M0IyRTJDQTlDRUEyQUIzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MhOK5lMSBGdnx29nihf18IOW
ZYg3kdNOdpY7ljf1+34/jpJP/bb46kuFXhne90GcQRNiLoAqAROumWSKDxiK4nPK
MMvwJ0pj3i3Yi1TUigmF5lGgnO9Si8Q1NYwkb+hhnCIX8O/BuElAspcKvPQc7cvZ
WK+iD45n/r1WZ/FWoyUt0zonQmMhZRTs2C3ZTx4IetRGvrHaGveGMep4A8N9yyU8
RyPBWYzQq/l/RrF7FPdFHk/wNw7RQQofXlkVdOA/RKetKNdCAJ+AErhjAA+aJi2z
H/oXiaJ31mRsRRTa53709GRNdiSZnTmgY/nM+/Ta/1PwZeLT158cguSdG25jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURWT5bKStHm5mPKqDsuLKnOoqs5owHwYDVR0j
BBgwFoAUsq0ZsuNNYCht5xsV1T9N6jTL5eowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JmVGhhbmliUDliZTQ1cFhxc3J6VE1KYkRtQmYxeW1ONDVDQkRRcm1u
eGIvMC9CMkFEMTlCMkUzNEQ2MDI4NkRFNzFCMTVENTNGNERFQTM0Q0JFNUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQUQxOUIyRTM0RDYwMjg2
REU3MUIxNUQ1M0Y0REVBMzRDQkU1RUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCZlRoYW5pYlA5YmU0NXBYcXNyelRNSmJEbUJmMXltTjQ1Q0JEUXJtbnhiLzAv
MzEzNDMzMmUzMTMzMzcyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMwMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI+JeTANBgkqhkiG9w0BAQsFAAOCAQEAbSKg
8uLOary1buwmcNZd8yhxYsSJQu6R2FF0R5vvNCJEKLrXZ+IOnzTq45o4wf/kQsUT
T2z8LfolKvJNU7+7qxfuWmIqzfXwhsSSqv9qmEgs0keAdKie9yNl+cIjb9oZyJC3
Ll2cv8wMy3e4jrI0tfaqEMDBD1kD2/AD8FVbfMn/xTZI2xHm8ag+zWUapVhYEbqF
+8b1X8TpaKBDfF4wTquEwm/99vHUJLxgj5893Qgct5HmqxYRo6S+xiCb5iSVhr7/
bVT1IkoqWWB9YDQkuy5q9iRJ0vXomGHbqSyDbq9sFatnYg6bErXlxKUPb+F4+NaA
CnYOWPyvTV/QobfD9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org