Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          gMWNomLYUuTIXzeBcSa5QfR7UX7lroo3ZbULeMK35MI=
Subject key identifier:   51:F5:70:3B:9F:45:4C:4F:38:2E:97:CB:83:FB:08:F3:C9:B0:C9:C7
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       01F5D3B71C5450F4DF97D4C2B5B569DBDCF664F6
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:18 +0000
ROA not before:           Sat 30 Mar 2024 00:56:18 +0000
ROA not after:            Sat 29 Mar 2025 01:01:18 +0000
asID:                     262569
IP address blocks:        143.137.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f5:d3:b7:1c:54:50:f4:df:97:d4:c2:b5:b5:69:db:dc:f6:64:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:18 2024 GMT
            Not After : Mar 29 01:01:18 2025 GMT
        Subject: CN=51F5703B9F454C4F382E97CB83FB08F3C9B0C9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d1:25:e3:c2:00:07:69:ae:7a:65:84:61:7d:
                    74:71:29:12:43:68:af:46:73:21:11:0b:3e:87:89:
                    c1:0e:cb:8d:03:1b:0d:94:31:5f:bd:d1:43:da:a9:
                    80:a8:8c:21:ab:8e:53:71:68:59:48:bc:19:8f:cb:
                    96:41:3e:84:34:b1:33:69:53:55:78:69:b1:3a:a7:
                    c2:ff:3f:e0:90:08:cf:8f:7e:e7:cf:73:5a:30:0c:
                    69:7c:91:92:ff:d8:2e:6f:e4:a7:05:9a:5f:ba:3d:
                    2e:86:c6:9e:39:93:0b:1a:ee:18:3a:76:f5:26:8e:
                    24:a2:fa:78:f5:88:3f:4b:b1:50:83:6f:50:de:41:
                    81:10:cb:6b:f9:77:65:3c:5b:bc:e5:7a:ff:8d:8d:
                    16:06:7e:34:df:d8:0c:c8:f0:1a:44:c6:88:41:69:
                    f0:df:84:17:b1:d5:18:a8:9f:3b:d5:f9:f6:79:1c:
                    c9:c4:29:b0:f2:83:9b:e0:6b:c6:ad:3e:fe:f2:07:
                    e4:9f:f3:b2:f9:85:d4:46:77:18:60:69:2b:29:6b:
                    db:6d:92:38:66:4a:6b:9c:a7:ee:6a:f2:6f:55:9b:
                    bd:2d:8a:7e:b3:ed:44:1e:01:f5:6d:f4:89:1a:bb:
                    29:39:da:ba:7a:c9:f3:95:9c:50:8a:87:7c:7f:4f:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F5:70:3B:9F:45:4C:4F:38:2E:97:CB:83:FB:08:F3:C9:B0:C9:C7
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:37:e3:2d:bf:ea:c7:ba:11:1e:27:3d:d9:c7:0e:14:34:
         95:c7:df:36:62:d5:64:a0:53:66:3f:7c:4f:b0:01:33:ef:b1:
         2a:08:d4:f6:5b:32:93:73:81:a5:db:b6:d4:93:1f:0b:70:99:
         fc:26:b9:78:7a:a6:24:50:ea:33:d5:ec:9e:46:3d:4b:00:e0:
         d4:11:94:f9:20:c7:a2:30:f8:b5:e9:14:66:59:b0:22:24:97:
         4c:ed:2d:fc:36:de:6c:b5:4f:0f:9d:e2:81:ca:fd:a3:66:91:
         42:9e:89:ad:50:bb:f7:e1:d3:0d:82:47:49:5d:e7:06:a9:3a:
         eb:6e:3f:f2:0c:5e:63:d3:b5:4b:76:9d:de:14:90:79:4d:55:
         d3:a4:84:5a:7a:23:7a:66:75:6d:f4:09:7d:89:06:01:33:53:
         4d:7a:20:ce:08:30:d1:d8:77:b1:91:a2:0b:b5:af:f5:86:96:
         8c:31:01:dd:4f:75:d9:b2:49:fc:ab:a5:79:6b:4c:7f:6b:0e:
         30:df:b2:80:03:c1:81:a6:0a:94:a6:db:5c:3b:04:1a:41:6d:
         3f:af:8d:c9:28:24:02:dc:44:69:b3:6b:8b:7f:88:26:f8:fd:
         13:b2:2a:10:3c:55:44:c1:80:d4:6a:94:3c:a5:7b:b6:53:dd:
         9a:47:e6:3e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAfXTtxxUUPTfl9TCtbVp29z2ZPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURD
MkNBQ0ZCRjAeFw0yNDAzMzAwMDU2MThaFw0yNTAzMjkwMTAxMThaMDMxMTAvBgNV
BAMTKDUxRjU3MDNCOUY0NTRDNEYzODJFOTdDQjgzRkIwOEYzQzlCMEM5QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp0SXjwgAHaa56ZYRhfXRxKRJD
aK9GcyERCz6HicEOy40DGw2UMV+90UPaqYCojCGrjlNxaFlIvBmPy5ZBPoQ0sTNp
U1V4abE6p8L/P+CQCM+PfufPc1owDGl8kZL/2C5v5KcFml+6PS6Gxp45kwsa7hg6
dvUmjiSi+nj1iD9LsVCDb1DeQYEQy2v5d2U8W7zlev+NjRYGfjTf2AzI8BpExohB
afDfhBex1RionzvV+fZ5HMnEKbDyg5vga8atPv7yB+Sf87L5hdRGdxhgaSspa9tt
kjhmSmucp+5q8m9Vm70tin6z7UQeAfVt9Ikauyk52rp6yfOVnFCKh3x/T/dNAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUfVwO59FTE84LpfLg/sI88mwyccwHwYDVR0j
BBgwFoAURgy1fR5JKlZqDDGaAuW+XcLKz78wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURDMkNBQ0ZCRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NjBDQjU3RDFFNDkyQTU2NkEw
QzMxOUEwMkU1QkU1REMyQ0FDRkJGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NDMzMmUzMTMzMzcyZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACPiTwwDQYJKoZIhvcNAQELBQADggEBAIf7N+Mtv+rH
uhEeJz3Zxw4UNJXH3zZi1WSgU2Y/fE+wATPvsSoI1PZbMpNzgaXbttSTHwtwmfwm
uXh6piRQ6jPV7J5GPUsA4NQRlPkgx6Iw+LXpFGZZsCIkl0ztLfw23my1Tw+d4oHK
/aNmkUKeia1Qu/fh0w2CR0ld5wapOutuP/IMXmPTtUt2nd4UkHlNVdOkhFp6I3pm
dW30CX2JBgEzU016IM4IMNHYd7GRogu1r/WGlowxAd1PddmySfyrpXlrTH9rDjDf
soADwYGmCpSm21w7BBpBbT+vjckoJALcRGmza4t/iCb4/ROyKhA8VUTBgNRqlDyl
e7ZT3ZpH5j4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org