Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa
File:                     3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          RVYz/HNsEPbr8/n8hQv3qef41LtwR8qDpugll0DnAo4=
Subject key identifier:   EA:91:B1:76:7D:92:C9:53:0F:78:60:EB:FE:06:1A:25:68:EE:7E:42
Certificate issuer:       /CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Certificate serial:       57D0D0F39357D66F264D6AFB2CA793898ADC35E3
Authority key identifier: 47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 16 May 2023 14:59:46 +0000
ROA not before:           Tue 16 May 2023 14:54:46 +0000
ROA not after:            Tue 14 May 2024 14:59:46 +0000
asID:                     263569
IP address blocks:        143.202.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d0:d0:f3:93:57:d6:6f:26:4d:6a:fb:2c:a7:93:89:8a:dc:35:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
        Validity
            Not Before: May 16 14:54:46 2023 GMT
            Not After : May 14 14:59:46 2024 GMT
        Subject: CN=EA91B1767D92C9530F7860EBFE061A2568EE7E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:63:5d:5f:63:4b:6a:df:0f:7c:bd:76:83:
                    04:a6:ab:e7:03:ea:8b:93:b5:eb:43:74:96:81:ad:
                    f0:32:96:89:6b:7e:fe:da:b6:e9:48:20:9c:bd:ff:
                    0e:a1:f2:b8:ab:6d:9d:cc:90:91:56:79:02:bd:57:
                    da:0d:98:ee:4c:de:a9:31:c4:c9:5f:b8:e6:15:a1:
                    bf:f6:3c:13:c4:b5:21:f4:ab:df:35:60:de:df:8f:
                    47:df:ea:ff:08:40:0e:73:df:25:83:c6:21:79:cb:
                    a2:d3:2a:96:44:09:73:b3:dc:a2:e2:ed:75:af:37:
                    c0:81:1a:5f:a5:bc:45:e3:9c:76:69:25:f3:cd:45:
                    2e:83:9d:89:65:c9:95:70:d8:fa:59:b8:3e:76:22:
                    7f:75:b2:68:63:d9:84:23:af:d6:7d:23:e9:37:86:
                    5c:87:b2:16:64:d5:15:0d:2d:27:fc:24:fb:85:54:
                    fe:0d:f9:09:78:8a:1b:2c:c1:82:b1:69:c3:c8:69:
                    82:c5:fd:57:d9:00:39:60:76:37:c9:21:5b:d9:a2:
                    66:88:a0:2d:cc:81:76:1c:1d:2f:27:b0:ad:0b:0e:
                    b5:e2:db:35:65:06:95:12:51:52:a1:f7:5d:b3:a4:
                    62:ae:aa:b7:79:a1:93:cb:96:2c:7f:55:d4:f1:b2:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:B1:76:7D:92:C9:53:0F:78:60:EB:FE:06:1A:25:68:EE:7E:42
            X509v3 Authority Key Identifier:
                keyid:47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/47598FC43095FBBAC65DD11244210ED67DD9A40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3134332e3230322e3234342e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:83:24:4f:4c:c7:f8:23:e0:b7:23:4d:f7:8c:fd:d5:b7:62:
         8c:f1:e9:38:a0:a0:8f:33:58:68:74:60:43:51:a3:04:fb:01:
         28:da:18:3f:32:cf:55:ab:bf:c1:ce:13:30:03:41:84:29:b8:
         f2:c6:ba:5b:93:d4:64:d0:5c:cd:1d:5e:93:19:ea:7c:a0:de:
         fe:36:e4:db:88:e5:2c:9c:5a:00:ee:d4:97:aa:a7:7c:0b:5d:
         a7:7c:8d:53:7c:04:7f:87:40:3c:e2:2d:99:ea:82:0f:08:d3:
         5c:33:ba:ce:c8:1f:1b:54:2e:58:d6:e2:8d:62:ab:50:f6:ba:
         93:31:f6:dc:1d:e5:21:b2:db:ad:66:f1:a9:49:ca:96:64:7b:
         ff:72:71:9f:d4:c7:b6:fd:b9:4e:68:0b:b5:89:a4:e4:06:07:
         1e:28:e8:0a:f7:08:a7:6d:bb:32:90:ce:b9:a5:55:9f:22:02:
         f4:40:ca:a5:c7:1c:28:6e:af:2c:b4:65:fb:fe:47:72:f9:8d:
         34:68:27:3b:24:30:07:95:ba:29:9f:48:9b:a8:c1:d7:2a:91:
         11:de:1b:27:bc:32:7d:cb:85:01:9c:25:b2:9d:c4:c1:43:ee:
         52:b7:48:6d:6e:87:8d:d2:6e:0d:57:d5:95:a7:e3:9d:15:78:
         10:31:5f:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUV9DQ85NX1m8mTWr7LKeTiYrcNeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1OThGQzQzMDk1RkJCQUM2NUREMTEyNDQyMTBFRDY3
REQ5QTQwRTAeFw0yMzA1MTYxNDU0NDZaFw0yNDA1MTQxNDU5NDZaMDMxMTAvBgNV
BAMTKEVBOTFCMTc2N0Q5MkM5NTMwRjc4NjBFQkZFMDYxQTI1NjhFRTdFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fGNdX2NLat8PfL12gwSmq+cD
6ouTtetDdJaBrfAylolrfv7atulIIJy9/w6h8rirbZ3MkJFWeQK9V9oNmO5M3qkx
xMlfuOYVob/2PBPEtSH0q981YN7fj0ff6v8IQA5z3yWDxiF5y6LTKpZECXOz3KLi
7XWvN8CBGl+lvEXjnHZpJfPNRS6DnYllyZVw2PpZuD52In91smhj2YQjr9Z9I+k3
hlyHshZk1RUNLSf8JPuFVP4N+Ql4ihsswYKxacPIaYLF/VfZADlgdjfJIVvZomaI
oC3MgXYcHS8nsK0LDrXi2zVlBpUSUVKh912zpGKuqrd5oZPLlix/VdTxskAdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6pGxdn2SyVMPeGDr/gYaJWjufkIwHwYDVR0j
BBgwFoAUR1mPxDCV+7rGXdESRCEO1n3ZpA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM
WHgvMi80NzU5OEZDNDMwOTVGQkJBQzY1REQxMTI0NDIxMEVENjdERDlBNDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3NTk4RkM0MzA5NUZCQkFD
NjVERDExMjQ0MjEwRUQ2N0REOUE0MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzIv
MzEzNDMzMmUzMjMwMzIyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/K9DANBgkqhkiG9w0BAQsFAAOCAQEAvYMk
T0zH+CPgtyNN94z91bdijPHpOKCgjzNYaHRgQ1GjBPsBKNoYPzLPVau/wc4TMANB
hCm48sa6W5PUZNBczR1ekxnqfKDe/jbk24jlLJxaAO7Ul6qnfAtdp3yNU3wEf4dA
POItmeqCDwjTXDO6zsgfG1QuWNbijWKrUPa6kzH23B3lIbLbrWbxqUnKlmR7/3Jx
n9THtv25TmgLtYmk5AYHHijoCvcIp227MpDOuaVVnyIC9EDKpcccKG6vLLRl+/5H
cvmNNGgnOyQwB5W6KZ9Im6jB1yqREd4bJ7wyfcuFAZwlsp3EwUPuUrdIbW6HjdJu
DVfVlafjnRV4EDFfHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org