Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e20323632373733.roa
File:                     3134332e3230322e3132372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          1WmSYlRmKPYlgwZ9W+kVFAuZKneW+FpS4uImL/sB/JM=
Subject key identifier:   B6:48:3C:79:D7:F7:3C:ED:6C:A3:C4:46:81:64:C4:33:13:55:B5:1E
Certificate issuer:       /CN=13BB29A4B84BDF66EA401987B87048B7484F4888
Certificate serial:       28EF9235A3ABE7AF095BA963410ED6DD69877F3B
Authority key identifier: 13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e20323632373733.roa
Signing time:             Mon 01 Apr 2024 22:06:15 +0000
ROA not before:           Mon 01 Apr 2024 22:01:15 +0000
ROA not after:            Mon 31 Mar 2025 22:06:15 +0000
asID:                     262773
IP address blocks:        143.202.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ef:92:35:a3:ab:e7:af:09:5b:a9:63:41:0e:d6:dd:69:87:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BB29A4B84BDF66EA401987B87048B7484F4888
        Validity
            Not Before: Apr  1 22:01:15 2024 GMT
            Not After : Mar 31 22:06:15 2025 GMT
        Subject: CN=B6483C79D7F73CED6CA3C4468164C4331355B51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:f5:8e:cc:af:ad:3d:90:1e:35:95:52:15:
                    eb:d5:1b:5c:0a:c4:0e:7c:16:fa:d0:ce:57:34:97:
                    40:72:46:42:3c:74:b5:8b:0c:64:7b:37:82:cf:91:
                    20:42:0d:37:06:ef:a6:c7:fb:69:b0:be:c6:b0:6a:
                    a9:0a:cb:4e:1f:30:1f:b1:d0:cd:6f:9e:8a:0c:ca:
                    e7:bd:30:a8:3c:3c:61:b4:c9:03:a9:a6:ec:1c:00:
                    0f:9f:fd:df:4c:cc:be:fa:a7:ec:8e:1a:80:f3:f4:
                    0e:10:f9:22:fb:98:6e:73:0f:a1:a5:0b:d8:78:51:
                    3e:07:45:21:7a:87:74:9a:c1:41:03:c6:dc:16:61:
                    17:ec:db:0b:59:9d:b2:5e:43:6c:dc:ce:fd:b3:70:
                    18:03:51:2f:53:35:fa:0b:2e:83:f8:60:96:4c:4c:
                    bd:cf:78:76:7f:b7:9d:d5:42:86:d0:05:38:ec:ac:
                    a2:d1:dc:7b:8b:d8:56:ca:dd:30:61:aa:06:48:31:
                    ac:f3:04:01:41:cd:b9:f8:10:22:53:2a:16:84:c6:
                    4e:11:65:25:82:b3:1f:2c:77:e5:02:76:d0:74:71:
                    69:2f:fa:4d:84:53:0f:94:40:ac:9c:4a:56:55:44:
                    61:24:97:71:2b:be:5e:67:9a:fe:7c:a4:ed:bb:66:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:3C:79:D7:F7:3C:ED:6C:A3:C4:46:81:64:C4:33:13:55:B5:1E
            X509v3 Authority Key Identifier:
                keyid:13:BB:29:A4:B8:4B:DF:66:EA:40:19:87:B8:70:48:B7:48:4F:48:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/13BB29A4B84BDF66EA401987B87048B7484F4888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/13BB29A4B84BDF66EA401987B87048B7484F4888.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3134332e3230322e3132372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:04:15:ca:51:fd:70:91:e3:21:61:b1:05:30:67:7f:30:
         2d:cf:17:54:6c:40:6b:27:73:f1:8d:ce:f1:5a:93:44:ea:3c:
         ae:e9:4c:f0:eb:0a:c6:16:5b:35:8d:12:9f:ba:7b:59:27:67:
         93:2a:07:e3:9f:37:97:09:a5:9a:9b:d5:d5:9a:c9:06:69:8c:
         82:69:a7:26:b2:e5:30:5e:79:ee:ef:f4:b7:a3:f3:e0:a6:06:
         83:9d:f5:a9:a8:dc:3e:72:1c:77:86:f6:5d:cf:56:02:fd:e8:
         f3:db:e4:55:c4:5c:5a:49:53:7a:fd:ee:00:cc:84:ed:3f:a1:
         9c:2e:66:0b:c2:6b:70:78:13:51:48:99:c9:49:f1:1c:00:f5:
         68:77:11:71:f0:76:0d:f5:20:99:51:82:71:2c:e7:84:5d:47:
         66:66:47:18:23:a3:3c:f6:6d:04:93:49:e5:a8:2d:56:49:df:
         37:16:88:ce:e7:5b:4e:ae:69:de:58:ec:82:61:7f:9e:a0:ae:
         6e:37:56:61:ad:58:63:eb:3a:b5:9f:ce:c2:e5:5e:cb:c0:fb:
         1a:1e:cc:29:ea:74:70:9b:5c:4c:79:c4:4d:3c:67:aa:70:15:
         d9:78:3e:87:a1:52:3d:80:a9:60:aa:fc:25:fb:11:12:20:88:
         3a:f2:4c:77
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKO+SNaOr568JW6ljQQ7W3WmHfzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCQjI5QTRCODRCREY2NkVBNDAxOTg3Qjg3MDQ4Qjc0
ODRGNDg4ODAeFw0yNDA0MDEyMjAxMTVaFw0yNTAzMzEyMjA2MTVaMDMxMTAvBgNV
BAMTKEI2NDgzQzc5RDdGNzNDRUQ2Q0EzQzQ0NjgxNjRDNDMzMTM1NUI1MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHfWOzK+tPZAeNZVSFevVG1wK
xA58FvrQzlc0l0ByRkI8dLWLDGR7N4LPkSBCDTcG76bH+2mwvsawaqkKy04fMB+x
0M1vnooMyue9MKg8PGG0yQOppuwcAA+f/d9MzL76p+yOGoDz9A4Q+SL7mG5zD6Gl
C9h4UT4HRSF6h3SawUEDxtwWYRfs2wtZnbJeQ2zczv2zcBgDUS9TNfoLLoP4YJZM
TL3PeHZ/t53VQobQBTjsrKLR3HuL2FbK3TBhqgZIMazzBAFBzbn4ECJTKhaExk4R
ZSWCsx8sd+UCdtB0cWkv+k2EUw+UQKycSlZVRGEkl3Ervl5nmv58pO27ZuK1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtkg8edf3PO1so8RGgWTEMxNVtR4wHwYDVR0j
BBgwFoAUE7sppLhL32bqQBmHuHBIt0hPSIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC8xM0JCMjlBNEI4NEJERjY2RUE0MDE5ODdCODcwNDhCNzQ4NEY0ODg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEzQkIyOUE0Qjg0QkRGNjZF
QTQwMTk4N0I4NzA0OEI3NDg0RjQ4ODguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNDMzMmUzMjMwMzIyZTMxMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/KfzANBgkqhkiG9w0BAQsFAAOCAQEAQ/UE
FcpR/XCR4yFhsQUwZ38wLc8XVGxAaydz8Y3O8VqTROo8rulM8OsKxhZbNY0Sn7p7
WSdnkyoH4583lwmlmpvV1ZrJBmmMgmmnJrLlMF557u/0t6Pz4KYGg531qajcPnIc
d4b2Xc9WAv3o89vkVcRcWklTev3uAMyE7T+hnC5mC8JrcHgTUUiZyUnxHAD1aHcR
cfB2DfUgmVGCcSznhF1HZmZHGCOjPPZtBJNJ5agtVknfNxaIzudbTq5p3ljsgmF/
nqCubjdWYa1YY+s6tZ/OwuVey8D7Gh7MKep0cJtcTHnETTxnqnAV2Xg+h6FSPYCp
YKr8JfsREiCIOvJMdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org