Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32332d3233203d3e20323635313532.roa
File:                     3134332e3235352e3133342e302f32332d3233203d3e20323635313532.roa (raw, json)
Hash identifier:          vyp69roB7LZmiC/s5qbqqpPQmhpAbBEu5ybuhl9W7ZQ=
Subject key identifier:   D7:DC:CF:45:72:84:BF:23:6A:77:1B:FF:E6:4F:87:F0:85:F9:67:16
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       4DF26570FB6DA65CD555B33BC30056A75FEC0B02
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32332d3233203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:42 +0000
ROA not before:           Fri 17 Nov 2023 14:33:42 +0000
ROA not after:            Fri 15 Nov 2024 14:38:42 +0000
asID:                     265152
IP address blocks:        143.255.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:65:70:fb:6d:a6:5c:d5:55:b3:3b:c3:00:56:a7:5f:ec:0b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:42 2023 GMT
            Not After : Nov 15 14:38:42 2024 GMT
        Subject: CN=D7DCCF457284BF236A771BFFE64F87F085F96716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:38:6b:59:cd:f0:36:03:db:01:8d:41:01:
                    0b:cf:6b:96:5f:3e:3a:8f:68:f3:66:5d:b3:7b:2a:
                    52:a0:92:df:51:23:1d:2a:41:bd:61:90:07:e7:c0:
                    d6:aa:54:aa:4d:f0:93:13:57:23:45:2c:59:8f:0a:
                    35:b1:e3:d8:2d:f2:a7:52:cd:f3:6f:03:c7:66:0d:
                    a6:bd:be:1d:27:68:8a:38:fb:fb:e5:64:4b:f9:1c:
                    f7:ec:a3:92:03:b9:e9:37:80:f0:d5:e1:56:f8:e3:
                    12:8d:85:ef:cf:6a:b2:9d:9d:13:d5:66:0c:49:36:
                    78:37:5a:c5:c2:5b:2d:4c:b2:d3:38:35:db:96:a6:
                    d8:4c:06:16:89:c0:66:26:b1:e1:32:eb:0c:7d:7a:
                    8a:c0:b1:a9:19:04:eb:b1:53:bd:23:d3:e5:f7:eb:
                    10:12:35:ab:d2:91:46:5b:cc:55:93:2a:42:88:97:
                    14:03:13:9d:80:c6:e6:dc:41:e3:3c:07:de:58:bd:
                    62:c6:12:a5:8e:24:6c:d4:79:ba:ed:cf:40:b3:6b:
                    3d:2b:c9:a0:24:dc:91:b4:58:34:04:02:99:81:5a:
                    1a:6d:5d:f7:30:49:c2:80:40:b6:fe:85:19:24:d7:
                    80:55:53:34:db:8b:a4:bf:48:33:05:7e:13:9c:6f:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:CF:45:72:84:BF:23:6A:77:1B:FF:E6:4F:87:F0:85:F9:67:16
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32332d3233203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:f1:b4:ed:81:ab:de:62:c9:6b:1e:52:f6:ac:15:ea:42:8a:
         4a:be:2c:e9:2e:9a:7e:f5:23:e2:46:00:df:f2:65:34:36:1a:
         e8:83:a3:ca:d3:bf:71:83:7c:0e:13:60:bc:cc:b1:75:f8:54:
         39:62:00:53:5b:9c:37:94:9f:7c:24:86:68:3f:a8:ea:71:91:
         00:10:37:f5:65:7d:2b:b3:c5:1e:46:83:a0:20:f2:45:20:0f:
         78:30:0e:46:71:ea:b6:6b:14:a9:f8:cd:51:ba:9a:a6:a3:14:
         df:8c:04:b0:a7:e9:64:10:3c:e3:bd:70:ca:e0:4b:bf:2c:d8:
         43:f0:b3:82:b9:0a:72:6b:5f:fa:04:52:58:a1:29:73:52:6f:
         44:29:e6:92:60:a3:b5:66:8b:12:d4:8a:9e:14:f2:47:c2:23:
         c6:7a:c2:ac:1c:98:bc:28:1e:5f:ab:83:3d:da:69:e8:4d:28:
         0d:f6:1d:1b:85:1f:34:66:e9:03:bc:e5:d2:36:5b:b3:e9:fb:
         bc:4c:93:7e:6f:b5:e7:ea:52:4a:3c:d0:13:44:11:96:16:10:
         e7:ff:49:0a:62:ff:14:64:4b:14:9d:75:35:53:f8:e3:0d:3c:
         6b:f2:54:7a:c3:9f:46:3e:53:74:71:d9:5d:3c:0a:1d:70:4f:
         13:fb:65:9f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTfJlcPttplzVVbM7wwBWp1/sCwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZDRUE3ODQ1RDNEMUI2MEU0RUFGODFFOTlDREQ5RkYx
RDc2NTVFMjAeFw0yMzExMTcxNDMzNDJaFw0yNDExMTUxNDM4NDJaMDMxMTAvBgNV
BAMTKEQ3RENDRjQ1NzI4NEJGMjM2QTc3MUJGRkU2NEY4N0YwODVGOTY3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyDhrWc3wNgPbAY1BAQvPa5Zf
PjqPaPNmXbN7KlKgkt9RIx0qQb1hkAfnwNaqVKpN8JMTVyNFLFmPCjWx49gt8qdS
zfNvA8dmDaa9vh0naIo4+/vlZEv5HPfso5IDuek3gPDV4Vb44xKNhe/ParKdnRPV
ZgxJNng3WsXCWy1MstM4NduWpthMBhaJwGYmseEy6wx9eorAsakZBOuxU70j0+X3
6xASNavSkUZbzFWTKkKIlxQDE52AxubcQeM8B95YvWLGEqWOJGzUebrtz0Czaz0r
yaAk3JG0WDQEApmBWhptXfcwScKAQLb+hRkk14BVUzTbi6S/SDMFfhOcb8HvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU19zPRXKEvyNqdxv/5k+H8IX5ZxYwHwYDVR0j
BBgwFoAU386nhF09G2Dk6vgemc3Z/x12VeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0h5YmtpOG1BbkZVUHpZQ01xZXRIcmVYTTJZZnFleW81OHFQc1lRQ1VQ
dEIvMC9ERkNFQTc4NDVEM0QxQjYwRTRFQUY4MUU5OUNERDlGRjFENzY1NUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RGQ0VBNzg0NUQzRDFCNjBF
NEVBRjgxRTk5Q0REOUZGMUQ3NjU1RTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIeWJraThtQW5GVVB6WUNNcWV0SHJlWE0yWWZxZXlvNThxUHNZUUNVUHRCLzAv
MzEzNDMzMmUzMjM1MzUyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTMxMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY//hjANBgkqhkiG9w0BAQsFAAOCAQEAwPG0
7YGr3mLJax5S9qwV6kKKSr4s6S6afvUj4kYA3/JlNDYa6IOjytO/cYN8DhNgvMyx
dfhUOWIAU1ucN5SffCSGaD+o6nGRABA39WV9K7PFHkaDoCDyRSAPeDAORnHqtmsU
qfjNUbqapqMU34wEsKfpZBA8471wyuBLvyzYQ/CzgrkKcmtf+gRSWKEpc1JvRCnm
kmCjtWaLEtSKnhTyR8IjxnrCrByYvCgeX6uDPdpp6E0oDfYdG4UfNGbpA7zl0jZb
s+n7vEyTfm+15+pSSjzQE0QRlhYQ5/9JCmL/FGRLFJ11NVP44w08a/JUesOfRj5T
dHHZXTwKHXBPE/tlnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org