Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32342d3234203d3e20323635313532.roa
File:                     3134332e3235352e3133322e302f32342d3234203d3e20323635313532.roa (raw, json)
Hash identifier:          EQdiw2kbmRotXsed/EBhEAakGPM3PxgidLLeeVgghz0=
Subject key identifier:   5A:5D:C2:1E:A0:5A:F9:6E:A9:53:E6:21:B4:C9:48:77:E1:56:F1:8E
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       3FC64EB77E5455B70C796C125B907425C366A83B
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32342d3234203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:36 +0000
ROA not before:           Fri 17 Nov 2023 14:33:36 +0000
ROA not after:            Fri 15 Nov 2024 14:38:36 +0000
asID:                     265152
IP address blocks:        143.255.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c6:4e:b7:7e:54:55:b7:0c:79:6c:12:5b:90:74:25:c3:66:a8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:36 2023 GMT
            Not After : Nov 15 14:38:36 2024 GMT
        Subject: CN=5A5DC21EA05AF96EA953E621B4C94877E156F18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:33:30:35:0f:9b:0d:fc:59:2b:60:9e:8a:51:
                    e6:02:b3:86:2a:6c:7a:d7:ab:d8:0a:b0:f1:93:83:
                    04:7b:55:77:a6:12:f4:d7:db:22:1a:18:6b:f6:d9:
                    0b:18:bc:71:7b:c0:e9:e0:a5:68:e6:89:ac:79:14:
                    1d:c3:79:d8:49:47:05:d1:34:27:f4:b1:5c:f8:f7:
                    ec:68:5e:ea:d8:38:36:c0:00:a7:ab:c9:92:32:9d:
                    74:67:d7:90:95:57:e4:01:fd:f7:a9:1c:42:70:e4:
                    2e:2d:e1:f4:ef:77:90:20:8a:59:36:13:9e:04:8d:
                    91:ae:6d:9a:ca:a4:d9:fb:e3:7f:2e:ea:c3:fd:33:
                    df:67:c3:70:8e:0b:b8:d4:6f:61:9c:da:af:43:ed:
                    82:79:63:8f:49:0c:68:11:76:3e:39:37:85:b0:8b:
                    fc:e0:15:2b:3e:62:75:9d:ac:69:d8:67:06:09:1d:
                    c1:24:7d:60:eb:78:73:73:c1:f1:1e:4b:6d:34:1d:
                    a1:51:b6:ea:6a:3d:be:a5:03:fb:47:58:a0:57:fe:
                    24:d2:59:df:83:27:4f:87:c6:e9:f9:e4:61:65:b0:
                    1d:1e:e7:ce:72:ef:24:a2:4c:83:a6:5c:25:b7:ad:
                    c9:c1:98:0d:fd:86:4c:4d:bd:5f:9d:a6:ff:ba:32:
                    f1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5D:C2:1E:A0:5A:F9:6E:A9:53:E6:21:B4:C9:48:77:E1:56:F1:8E
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32342d3234203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:74:0b:f6:08:33:fc:6a:3d:eb:48:85:6e:ed:3a:b2:03:
         03:36:21:5e:06:c8:f2:8e:66:13:48:45:c8:77:53:e6:48:69:
         e8:24:70:d2:c2:9b:3b:9a:ad:88:a6:ba:88:42:be:49:89:41:
         38:99:b4:6c:4d:33:02:f7:ce:92:0d:22:85:43:d4:53:ec:67:
         1c:a3:ba:28:a0:5f:2b:3c:7d:4c:88:1b:bf:4a:d2:46:66:54:
         76:fa:27:35:2f:b6:b5:e8:79:c8:34:31:b8:44:1c:e7:7f:56:
         a3:d9:a8:89:b7:07:b4:1f:3c:4c:36:11:26:a3:a7:0c:24:4d:
         c1:67:71:99:4f:8b:89:39:49:61:f4:94:aa:e8:68:7e:bf:f2:
         11:2b:c1:25:25:af:f7:3f:be:bb:31:6a:d5:67:2f:58:e7:5b:
         11:d1:fb:b4:72:8d:2a:95:fb:c0:c3:be:98:c5:d3:57:6d:a2:
         c2:11:b7:f8:29:e7:21:b4:fb:8c:76:d4:25:3a:e9:b8:12:4f:
         dc:d4:78:bd:ad:2a:f8:95:c1:30:1e:5b:14:48:e3:43:af:d5:
         30:27:54:38:5e:0b:87:95:c1:cc:50:bf:2d:e7:c0:c7:ef:7a:
         a2:1c:bf:d8:ef:a9:07:6a:40:16:d2:fa:65:6c:7d:a7:70:67:
         5e:48:df:e1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP8ZOt35UVbcMeWwSW5B0JcNmqDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZDRUE3ODQ1RDNEMUI2MEU0RUFGODFFOTlDREQ5RkYx
RDc2NTVFMjAeFw0yMzExMTcxNDMzMzZaFw0yNDExMTUxNDM4MzZaMDMxMTAvBgNV
BAMTKDVBNURDMjFFQTA1QUY5NkVBOTUzRTYyMUI0Qzk0ODc3RTE1NkYxOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0MzA1D5sN/FkrYJ6KUeYCs4Yq
bHrXq9gKsPGTgwR7VXemEvTX2yIaGGv22QsYvHF7wOngpWjmiax5FB3DedhJRwXR
NCf0sVz49+xoXurYODbAAKeryZIynXRn15CVV+QB/fepHEJw5C4t4fTvd5Agilk2
E54EjZGubZrKpNn7438u6sP9M99nw3COC7jUb2Gc2q9D7YJ5Y49JDGgRdj45N4Ww
i/zgFSs+YnWdrGnYZwYJHcEkfWDreHNzwfEeS200HaFRtupqPb6lA/tHWKBX/iTS
Wd+DJ0+Hxun55GFlsB0e585y7ySiTIOmXCW3rcnBmA39hkxNvV+dpv+6MvFRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWl3CHqBa+W6pU+YhtMlId+FW8Y4wHwYDVR0j
BBgwFoAU386nhF09G2Dk6vgemc3Z/x12VeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQ
dEIvMC9ERkNFQTc4NDVEM0QxQjYwRTRFQUY4MUU5OUNERDlGRjFENzY1NUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGQ0VBNzg0NUQzRDFCNjBF
NEVBRjgxRTk5Q0REOUZGMUQ3NjU1RTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIeWJraThtQW5GVVB6WUNNcWV0SHJlWE0yWWZxZXlvNThxUHNZUUNVUHRCLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI//hDANBgkqhkiG9w0BAQsFAAOCAQEAjhd0
C/YIM/xqPetIhW7tOrIDAzYhXgbI8o5mE0hFyHdT5khp6CRw0sKbO5qtiKa6iEK+
SYlBOJm0bE0zAvfOkg0ihUPUU+xnHKO6KKBfKzx9TIgbv0rSRmZUdvonNS+2teh5
yDQxuEQc539Wo9moibcHtB88TDYRJqOnDCRNwWdxmU+LiTlJYfSUquhofr/yESvB
JSWv9z++uzFq1WcvWOdbEdH7tHKNKpX7wMO+mMXTV22iwhG3+CnnIbT7jHbUJTrp
uBJP3NR4va0q+JXBMB5bFEjjQ6/VMCdUOF4Lh5XBzFC/LefAx+96ohy/2O+pB2pA
FtL6ZWx9p3BnXkjf4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org