Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
File:                     3134332e302e3134342e302f32322d3234203d3e20323634303230.roa (raw, json)
Hash identifier:          kfRKYw3ojSdeI4iCQ0t0uip0emCD/VmG6OyOgutnjb0=
Subject key identifier:   20:8D:CE:D5:E1:17:34:92:4F:7B:34:46:D6:D5:A3:A9:A4:D9:0A:1A
Certificate issuer:       /CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
Certificate serial:       6523761DDB876F858336563FD9F6E3D359A02E7A
Authority key identifier: 67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
Signing time:             Wed 28 Sep 2022 21:34:03 +0000
ROA not before:           Wed 28 Sep 2022 21:29:03 +0000
ROA not after:            Wed 27 Sep 2023 21:34:03 +0000
asID:                     264020
IP address blocks:        143.0.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:23:76:1d:db:87:6f:85:83:36:56:3f:d9:f6:e3:d3:59:a0:2e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Validity
            Not Before: Sep 28 21:29:03 2022 GMT
            Not After : Sep 27 21:34:03 2023 GMT
        Subject: CN=208DCED5E11734924F7B3446D6D5A3A9A4D90A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:6d:26:28:1a:20:77:38:89:e4:bb:8d:d6:
                    ae:ad:ed:ea:f4:47:2d:f7:9d:d4:c4:27:4e:9d:54:
                    f1:1e:12:3c:b5:a8:0e:aa:7d:f3:f5:9a:23:85:c7:
                    91:7a:1b:18:98:2c:f0:a1:83:bf:da:ae:b3:c7:7a:
                    9a:4d:67:e3:66:df:f0:5f:57:a5:10:50:6c:7b:3d:
                    f1:af:07:5a:5f:c1:ff:cf:45:f5:b1:2a:ec:81:6c:
                    5e:5e:e5:c5:12:77:f7:84:c5:78:f7:93:9b:85:6b:
                    7a:ed:1a:df:0f:fd:b9:62:ea:7b:8d:9e:d1:de:45:
                    ba:78:fd:c2:bd:cb:9f:6a:3e:be:1a:09:df:24:3e:
                    5f:83:61:93:89:2f:e4:75:2f:72:d4:11:0c:38:73:
                    0f:c9:96:6c:28:5e:43:fd:a5:9e:06:63:10:5f:87:
                    a3:09:46:ff:73:72:a7:03:34:4a:97:4b:61:f7:2a:
                    15:a1:99:98:bf:00:ee:10:9c:f5:a2:ce:0f:2d:77:
                    ec:cd:8d:4f:18:7b:19:ec:59:90:b8:5d:a9:99:78:
                    76:6a:35:0e:ba:28:2c:bb:01:cd:97:27:cb:e0:03:
                    12:e2:36:25:dd:f9:b9:72:8a:15:1a:fb:d5:53:17:
                    0d:25:cc:9e:e4:8c:eb:ca:4e:81:2c:75:ca:9f:4a:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8D:CE:D5:E1:17:34:92:4F:7B:34:46:D6:D5:A3:A9:A4:D9:0A:1A
            X509v3 Authority Key Identifier:
                keyid:67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:91:9c:21:7b:77:58:b7:85:82:d0:7c:e4:e8:aa:bf:e5:41:
         fe:ac:4b:6b:40:f9:ab:c4:0e:ff:5e:15:72:d5:d3:0f:4b:28:
         03:17:8d:92:90:ff:94:9a:3c:4e:17:bf:0b:d5:0e:4a:60:cd:
         67:90:30:6b:72:f8:5e:05:87:4e:8e:f2:97:5a:9c:53:55:d0:
         e8:bb:88:b8:66:1a:56:b1:d6:76:43:d3:ce:e9:31:36:6a:ee:
         5f:94:18:f7:3f:32:7b:52:f5:67:d8:e7:34:2c:2f:9e:47:16:
         bd:5b:45:88:1a:70:a6:bd:44:73:77:8a:20:fe:92:19:29:c7:
         bc:03:e0:55:0c:f4:17:1b:c0:2b:43:f6:aa:1b:b4:25:fa:fc:
         8c:c6:8b:be:1d:72:45:28:84:5b:5f:97:4a:a3:7e:a9:48:75:
         1e:85:ca:6e:dc:6a:13:b3:f3:e0:5d:9d:a8:37:c6:79:5c:d4:
         2a:09:6f:eb:f1:8e:70:4b:eb:16:d8:4c:c2:39:14:41:d3:d7:
         61:60:0a:0b:f4:75:ff:9d:46:0f:4f:58:ac:07:71:b1:26:81:
         a1:0a:12:34:9c:4c:9d:95:9e:35:d8:89:74:3f:9e:e6:a4:cd:
         f9:82:4b:94:12:45:99:3c:d1:95:27:0c:0f:48:b7:17:c1:b0:
         3b:7c:74:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZSN2HduHb4WDNlY/2fbj01mgLnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc0OTFFREE3NkUzOThBQjAxRjBDQzZDRDc0NzRGMzNG
NUQ5OUE1QjAeFw0yMjA5MjgyMTI5MDNaFw0yMzA5MjcyMTM0MDNaMDMxMTAvBgNV
BAMTKDIwOERDRUQ1RTExNzM0OTI0RjdCMzQ0NkQ2RDVBM0E5QTREOTBBMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VG0mKBogdziJ5LuN1q6t7er0
Ry33ndTEJ06dVPEeEjy1qA6qffP1miOFx5F6GxiYLPChg7/arrPHeppNZ+Nm3/Bf
V6UQUGx7PfGvB1pfwf/PRfWxKuyBbF5e5cUSd/eExXj3k5uFa3rtGt8P/bli6nuN
ntHeRbp4/cK9y59qPr4aCd8kPl+DYZOJL+R1L3LUEQw4cw/JlmwoXkP9pZ4GYxBf
h6MJRv9zcqcDNEqXS2H3KhWhmZi/AO4QnPWizg8td+zNjU8YexnsWZC4XamZeHZq
NQ66KCy7Ac2XJ8vgAxLiNiXd+blyihUa+9VTFw0lzJ7kjOvKToEsdcqfSiWzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUII3O1eEXNJJPezRG1tWjqaTZChowHwYDVR0j
BBgwFoAUZ0ke2nbjmKsB8Mxs10dPM/XZmlswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFVIek0zeERMUThrODJtN1puUTlycXFUR1NENFNqdjFjYTRkQzFyaVZl
elYvMC82NzQ5MUVEQTc2RTM5OEFCMDFGMENDNkNENzQ3NEYzM0Y1RDk5QTVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NDkxRURBNzZFMzk4QUIw
MUYwQ0M2Q0Q3NDc0RjMzRjVEOTlBNUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hVSHpNM3hETFE4azgybTdablE5cnFxVEdTRDRTanYxY2E0ZEMxcmlWZXpWLzAv
MzEzNDMzMmUzMDJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwCQMA0GCSqGSIb3DQEBCwUAA4IBAQAUkZwhe3dY
t4WC0Hzk6Kq/5UH+rEtrQPmrxA7/XhVy1dMPSygDF42SkP+UmjxOF78L1Q5KYM1n
kDBrcvheBYdOjvKXWpxTVdDou4i4ZhpWsdZ2Q9PO6TE2au5flBj3PzJ7UvVn2Oc0
LC+eRxa9W0WIGnCmvURzd4og/pIZKce8A+BVDPQXG8ArQ/aqG7Ql+vyMxou+HXJF
KIRbX5dKo36pSHUehcpu3GoTs/PgXZ2oN8Z5XNQqCW/r8Y5wS+sW2EzCORRB09dh
YAoL9HX/nUYPT1isB3GxJoGhChI0nEydlZ412Il0P57mpM35gkuUEkWZPNGVJwwP
SLcXwbA7fHRP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org