Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa
File:                     3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          rTvsV3neHftsHSrphCQ2+4v96V4Gd/TGk5TGgMAiS7E=
Subject key identifier:   5E:51:FF:45:77:D7:42:A1:30:47:5E:43:ED:F6:DA:DC:DB:84:E4:95
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       37A6FCFD91BC83A91E8C5763AD254CFD4C7C74EB
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:19 +0000
ROA not before:           Sat 30 Mar 2024 00:56:19 +0000
ROA not after:            Sat 29 Mar 2025 01:01:19 +0000
asID:                     262569
IP address blocks:        143.137.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:fc:fd:91:bc:83:a9:1e:8c:57:63:ad:25:4c:fd:4c:7c:74:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:19 2024 GMT
            Not After : Mar 29 01:01:19 2025 GMT
        Subject: CN=5E51FF4577D742A130475E43EDF6DADCDB84E495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:39:f9:43:c0:22:4f:b6:02:31:32:3d:48:
                    cc:79:b0:16:e8:c1:53:a9:89:aa:a4:62:ac:a4:34:
                    11:68:39:23:84:e0:57:22:39:c9:03:91:ea:3e:fa:
                    99:48:4d:29:fd:53:3a:8e:53:65:65:a4:fa:5b:ff:
                    e4:22:7d:d4:34:04:49:88:22:aa:69:51:ba:ea:06:
                    3b:f6:83:3b:9b:17:5a:80:f4:e8:9d:99:2d:8a:c2:
                    11:66:35:2d:c2:10:21:9f:f7:1a:12:c4:ff:38:73:
                    e5:31:b8:77:80:a1:ae:d0:79:7b:fa:e1:fb:36:21:
                    83:77:75:39:b2:ee:29:93:f5:74:b1:1f:9f:b4:a4:
                    20:7d:88:bb:c7:4d:a7:bd:5c:42:ba:8d:c5:29:30:
                    64:ec:6a:63:95:8b:17:52:bc:40:cf:ae:2d:86:ed:
                    e7:0c:0c:b5:a1:69:f5:21:a8:c7:12:ed:c7:04:61:
                    11:4d:c3:e7:1c:55:59:e8:63:25:27:23:bd:90:ae:
                    a1:30:e5:ce:3b:bf:f0:ba:7d:05:f4:63:2f:b5:06:
                    af:97:63:b0:3c:9c:9d:de:d1:78:a8:9c:6d:f8:7f:
                    44:a4:92:c2:67:73:fe:71:5f:48:72:a2:b5:52:0d:
                    99:01:ab:0f:43:97:68:6d:2a:f8:4a:67:b9:8b:d3:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:FF:45:77:D7:42:A1:30:47:5E:43:ED:F6:DA:DC:DB:84:E4:95
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:28:60:a1:97:99:05:df:e1:c1:22:16:e3:82:a3:ef:ea:08:
         4c:2e:82:7f:c0:d9:95:3d:46:c0:7e:51:dc:45:f1:5d:b6:2f:
         4a:8e:23:60:d6:66:68:a9:79:a6:78:3a:6a:49:52:ae:0f:f5:
         b7:33:0a:84:ba:0d:28:23:48:88:c0:0d:50:64:9a:fd:d7:28:
         60:d3:d1:01:cb:a0:c6:ae:d6:8b:93:dd:a6:96:bd:77:ae:08:
         0d:29:f3:8c:8d:94:b4:01:89:e1:a0:69:2f:b5:4b:52:fb:ee:
         19:ce:25:e8:b1:16:89:5a:ba:42:d8:6b:a3:34:ba:47:a5:bc:
         4b:aa:8a:a0:71:c7:a1:c2:35:6f:27:f5:9c:de:01:44:46:cd:
         b4:e8:f4:9e:d3:26:f6:f1:4d:44:8b:b4:fc:df:24:5d:20:0d:
         39:73:08:48:3c:9b:4c:c8:3b:f9:6b:b8:7c:1d:86:3a:fc:09:
         2c:e2:50:2c:d6:7b:dc:f8:35:27:dd:92:69:ef:3d:b4:10:b5:
         c2:69:29:82:11:83:6e:1e:64:a8:0f:ef:d6:ba:57:aa:37:42:
         b3:01:00:a5:1b:ce:b0:ce:ec:8f:fc:6c:e7:62:5f:17:cc:0b:
         fe:81:57:17:0d:d3:c8:37:f9:29:f9:8e:07:2e:2f:28:77:a3:
         d9:db:e2:06
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUN6b8/ZG8g6kejFdjrSVM/Ux8dOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURD
MkNBQ0ZCRjAeFw0yNDAzMzAwMDU2MTlaFw0yNTAzMjkwMTAxMTlaMDMxMTAvBgNV
BAMTKDVFNTFGRjQ1NzdENzQyQTEzMDQ3NUU0M0VERjZEQURDREI4NEU0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5Tn5Q8AiT7YCMTI9SMx5sBbo
wVOpiaqkYqykNBFoOSOE4FciOckDkeo++plITSn9UzqOU2VlpPpb/+QifdQ0BEmI
IqppUbrqBjv2gzubF1qA9OidmS2KwhFmNS3CECGf9xoSxP84c+UxuHeAoa7QeXv6
4fs2IYN3dTmy7imT9XSxH5+0pCB9iLvHTae9XEK6jcUpMGTsamOVixdSvEDPri2G
7ecMDLWhafUhqMcS7ccEYRFNw+ccVVnoYyUnI72QrqEw5c47v/C6fQX0Yy+1Bq+X
Y7A8nJ3e0XionG34f0SkksJnc/5xX0hyorVSDZkBqw9Dl2htKvhKZ7mL03rrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXlH/RXfXQqEwR15D7fba3NuE5JUwHwYDVR0j
BBgwFoAURgy1fR5JKlZqDDGaAuW+XcLKz78wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURDMkNBQ0ZCRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NjBDQjU3RDFFNDkyQTU2NkEw
QzMxOUEwMkU1QkU1REMyQ0FDRkJGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NDMzMmUzMTMzMzcyZTM2MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
NTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGPiT4wDQYJKoZIhvcNAQELBQADggEBADYoYKGXmQXf
4cEiFuOCo+/qCEwugn/A2ZU9RsB+UdxF8V22L0qOI2DWZmipeaZ4OmpJUq4P9bcz
CoS6DSgjSIjADVBkmv3XKGDT0QHLoMau1ouT3aaWvXeuCA0p84yNlLQBieGgaS+1
S1L77hnOJeixFolaukLYa6M0ukelvEuqiqBxx6HCNW8n9ZzeAURGzbTo9J7TJvbx
TUSLtPzfJF0gDTlzCEg8m0zIO/lruHwdhjr8CSziUCzWe9z4NSfdkmnvPbQQtcJp
KYIRg24eZKgP79a6V6o3QrMBAKUbzrDO7I/8bOdiXxfMC/6BVxcN08g3+Sn5jgcu
Lyh3o9nb4gY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org