Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
File:                     3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa (raw, json)
Hash identifier:          fFobiKhLqb0bmNvWJTuk/dM/0yzSvW6xBCIIwkwkBRw=
Subject key identifier:   E4:50:D6:0C:80:E9:59:34:CE:11:26:2C:29:D6:73:38:94:2F:DB:F2
Certificate issuer:       /CN=9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03
Certificate serial:       3CBA007163F0CD6E363531655D33AC60D8E21477
Authority key identifier: 96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
Signing time:             Tue 10 Oct 2023 03:30:14 +0000
ROA not before:           Tue 10 Oct 2023 03:25:14 +0000
ROA not after:            Tue 08 Oct 2024 03:30:14 +0000
asID:                     262342
IP address blocks:        143.208.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ba:00:71:63:f0:cd:6e:36:35:31:65:5d:33:ac:60:d8:e2:14:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03
        Validity
            Not Before: Oct 10 03:25:14 2023 GMT
            Not After : Oct  8 03:30:14 2024 GMT
        Subject: CN=E450D60C80E95934CE11262C29D67338942FDBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:3d:43:0d:82:94:23:69:98:31:12:5f:51:
                    4b:60:8f:7f:eb:37:f4:38:0d:40:12:d7:f4:3f:47:
                    dc:62:66:00:5e:5f:ec:12:e9:10:b5:17:81:e8:3d:
                    02:03:8b:f1:d4:aa:29:31:f4:c8:5e:c8:5e:01:59:
                    05:4c:d8:54:d9:05:8a:44:19:2b:08:a7:9d:fb:90:
                    7a:bd:ac:a6:7c:b7:03:63:cb:31:db:ef:1f:a2:2a:
                    f5:f9:56:65:08:9a:9c:cd:be:b9:15:70:3c:37:7f:
                    fd:e2:ef:77:82:a1:12:2a:53:a5:f5:1e:3a:26:9c:
                    d7:cf:90:07:39:2a:90:c2:97:aa:fd:aa:0c:6b:e6:
                    a2:bc:6c:a8:f1:22:55:f9:b2:b2:68:73:d6:5a:7b:
                    6c:04:7b:44:93:08:4b:e7:c2:60:77:a3:fa:55:59:
                    0f:8f:cf:a3:54:81:34:86:65:3f:d9:d8:4c:d4:88:
                    d0:c6:e2:20:2e:ab:81:d5:c9:0f:11:77:e8:f7:a4:
                    be:50:48:3a:ac:2a:2d:39:8a:c2:a4:a2:1c:a3:4c:
                    58:33:2b:9f:51:a7:fc:34:86:94:a8:97:fd:0e:f2:
                    31:2f:7e:0d:9a:42:d0:ac:ad:13:45:62:0c:ea:81:
                    f8:22:28:51:26:f6:97:ba:f4:1f:e4:c1:1f:25:d3:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:D6:0C:80:E9:59:34:CE:11:26:2C:29:D6:73:38:94:2F:DB:F2
            X509v3 Authority Key Identifier:
                keyid:96:16:A9:68:23:A2:E0:0E:4A:5E:1F:65:F4:EE:1D:33:91:FC:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9616A96823A2E00E4A5E1F65F4EE1D3391FC6D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/0/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:cf:4a:05:d4:ed:06:90:d8:36:d3:cf:7d:96:a0:3e:02:8c:
         df:3b:d6:2c:a4:c5:e9:7b:57:b1:7f:df:24:2f:24:62:a4:4f:
         cc:35:4d:6c:61:92:ae:aa:dd:6f:c4:e7:b9:2b:d0:53:66:b0:
         6e:9f:78:5f:9d:cc:01:3b:21:b1:95:68:28:11:5e:e7:59:97:
         ec:a5:be:ed:a3:b6:f0:4c:5e:a4:08:8c:df:9f:ae:6e:82:ac:
         75:89:ae:31:57:89:ce:98:a6:50:ad:38:98:cd:0c:17:16:e2:
         bf:8d:b2:6a:c7:a1:69:71:9a:ed:d1:99:5b:ce:fd:07:30:ed:
         33:78:e1:cc:c1:08:6f:01:f1:e9:59:c5:ce:4d:e7:81:2d:e4:
         41:28:8b:61:49:38:b0:04:9d:19:b8:04:0d:2b:8e:07:1b:e1:
         d1:fc:b2:0f:db:fb:e2:5f:f0:62:f8:4a:74:b7:2b:ed:e1:b8:
         32:37:c2:ba:8f:ab:0b:58:8d:db:40:93:21:7f:78:cf:c2:b3:
         94:20:b0:b4:5b:2f:6d:fd:e8:ca:5e:91:de:fc:04:f3:9c:e4:
         3a:bd:27:eb:9f:bb:15:7d:4b:94:36:86:8c:9e:ae:3e:f7:b3:
         d5:66:fc:15:ab:d5:c7:3a:4b:93:ab:6b:9a:09:08:aa:0b:51:
         be:10:00:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPLoAcWPwzW42NTFlXTOsYNjiFHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxNkE5NjgyM0EyRTAwRTRBNUUxRjY1RjRFRTFEMzM5
MUZDNkQwMzAeFw0yMzEwMTAwMzI1MTRaFw0yNDEwMDgwMzMwMTRaMDMxMTAvBgNV
BAMTKEU0NTBENjBDODBFOTU5MzRDRTExMjYyQzI5RDY3MzM4OTQyRkRCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGz1DDYKUI2mYMRJfUUtgj3/r
N/Q4DUAS1/Q/R9xiZgBeX+wS6RC1F4HoPQIDi/HUqikx9MheyF4BWQVM2FTZBYpE
GSsIp537kHq9rKZ8twNjyzHb7x+iKvX5VmUImpzNvrkVcDw3f/3i73eCoRIqU6X1
HjomnNfPkAc5KpDCl6r9qgxr5qK8bKjxIlX5srJoc9Zae2wEe0STCEvnwmB3o/pV
WQ+Pz6NUgTSGZT/Z2EzUiNDG4iAuq4HVyQ8Rd+j3pL5QSDqsKi05isKkohyjTFgz
K59Rp/w0hpSol/0O8jEvfg2aQtCsrRNFYgzqgfgiKFEm9pe69B/kwR8l05d7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5FDWDIDpWTTOESYsKdZzOJQv2/IwHwYDVR0j
BBgwFoAUlhapaCOi4A5KXh9l9O4dM5H8bQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpTNGdnUmRmTENNWHVoTVFnQjVVdWEyNHB3REh4aFFUQzlWQ2hKR0d2
MzEvMC85NjE2QTk2ODIzQTJFMDBFNEE1RTFGNjVGNEVFMUQzMzkxRkM2RDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2MTZBOTY4MjNBMkUwMEU0
QTVFMUY2NUY0RUUxRDMzOTFGQzZEMDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqUzRnZ1JkZkxDTVh1aE1RZ0I1VXVhMjRwd0RIeGhRVEM5VkNoSkdHdjMxLzAv
MzEzNDMzMmUzMjMwMzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/Q0DANBgkqhkiG9w0BAQsFAAOCAQEAEs9K
BdTtBpDYNtPPfZagPgKM3zvWLKTF6XtXsX/fJC8kYqRPzDVNbGGSrqrdb8TnuSvQ
U2awbp94X53MATshsZVoKBFe51mX7KW+7aO28ExepAiM35+uboKsdYmuMVeJzpim
UK04mM0MFxbiv42yasehaXGa7dGZW879BzDtM3jhzMEIbwHx6VnFzk3ngS3kQSiL
YUk4sASdGbgEDSuOBxvh0fyyD9v74l/wYvhKdLcr7eG4MjfCuo+rC1iN20CTIX94
z8KzlCCwtFsvbf3oyl6R3vwE85zkOr0n65+7FX1LlDaGjJ6uPvez1Wb8FavVxzpL
k6trmgkIqgtRvhAAYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org