Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36332e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36332e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          759PmhUnZDV2KH9kMt25LcbH60JwBrF9WKd1ui8mGkI=
Subject key identifier:   4E:AF:08:EB:D6:77:33:9E:62:6F:66:DC:9E:8F:9E:B2:1A:87:4A:9F
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       3978DB8EE989866DA95670E04AA29C5CA36F9900
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36332e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        143.137.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:db:8e:e9:89:86:6d:a9:56:70:e0:4a:a2:9c:5c:a3:6f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=4EAF08EBD677339E626F66DC9E8F9EB21A874A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:1d:4e:6e:c6:88:3f:fe:8d:a9:88:07:11:
                    ec:b8:0f:3f:35:3a:6a:7a:40:0d:df:36:06:c1:12:
                    8e:05:58:55:0f:2a:f6:a2:c4:62:46:e0:cf:0c:27:
                    0e:29:a1:7c:23:23:b0:c8:43:fe:55:dc:03:a8:f4:
                    7f:8f:6b:e5:e8:68:8f:74:24:58:38:d1:96:fc:8c:
                    a5:4a:31:02:39:ba:3b:0f:1f:1d:ca:7c:22:3f:ea:
                    31:0d:93:2b:6e:6c:e7:c5:76:da:9c:4b:87:de:92:
                    60:2c:c4:13:8a:34:d0:59:dd:78:a4:77:50:5a:14:
                    61:96:ec:e8:a2:b7:64:10:de:93:b1:99:da:03:13:
                    6c:f3:cd:15:87:3c:c3:80:d4:c4:10:13:0e:24:24:
                    76:fd:d3:9d:24:f2:73:87:85:24:2c:32:83:3d:5c:
                    58:a7:b4:22:bc:8d:47:94:09:25:49:0b:da:19:41:
                    34:78:83:fa:c4:23:70:f2:f0:84:4f:25:f2:ae:67:
                    0b:10:c1:d5:9a:a6:06:21:c8:0f:c0:61:3a:98:72:
                    51:f8:74:97:50:da:76:32:ee:d9:35:82:5e:8a:3e:
                    b9:8b:97:ab:18:0b:df:41:93:a1:f1:a7:4d:b4:a3:
                    4e:37:41:9f:b2:ad:d4:46:5b:21:fd:5d:a6:af:6f:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:08:EB:D6:77:33:9E:62:6F:66:DC:9E:8F:9E:B2:1A:87:4A:9F
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36332e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:a2:2a:6f:bf:e2:ef:a2:2a:45:52:7c:a8:a4:05:60:f7:
         d8:c3:0c:28:1c:a3:3c:05:ae:f7:8e:2d:b1:ff:3a:49:df:32:
         a1:79:4b:20:be:06:14:e7:3c:a0:64:e9:5b:65:77:65:1a:7e:
         07:b0:89:b4:4d:10:39:b3:bb:94:f6:70:11:bd:64:bc:6c:b6:
         22:4c:18:c0:92:8a:f1:b3:d0:be:eb:e2:26:2b:16:ce:bb:b8:
         e7:16:e5:e0:e3:c1:91:b2:17:7e:4f:fd:35:5d:06:86:b3:f7:
         d9:cf:dd:08:a9:b3:10:ec:08:83:31:bb:3d:95:31:b5:a2:ed:
         36:99:e5:fb:07:94:cd:f5:d3:22:f6:63:7c:6f:83:59:bd:de:
         74:3d:c7:80:d7:a6:39:04:50:a6:fd:ad:65:8e:8e:7d:b3:61:
         f7:70:d8:a1:8a:59:75:0b:64:60:24:19:bb:e7:12:cb:ff:70:
         96:30:ad:94:57:3e:7d:2a:83:d1:e2:8b:f4:8a:ee:11:83:19:
         f8:e2:74:2e:2a:5f:64:29:1d:e0:ce:a1:98:ca:77:5e:38:34:
         9c:70:58:22:03:8b:95:1a:70:f0:25:cc:6e:62:03:9b:7e:3d:
         99:df:89:80:da:08:b5:5d:0f:a8:3d:17:7b:d8:d6:2d:65:bc:
         3c:97:8c:2c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUOXjbjumJhm2pVnDgSqKcXKNvmQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURD
MkNBQ0ZCRjAeFw0yNDAzMzAwMDU2MjFaFw0yNTAzMjkwMTAxMjFaMDMxMTAvBgNV
BAMTKDRFQUYwOEVCRDY3NzMzOUU2MjZGNjZEQzlFOEY5RUIyMUE4NzRBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/h1ObsaIP/6NqYgHEey4Dz81
Omp6QA3fNgbBEo4FWFUPKvaixGJG4M8MJw4poXwjI7DIQ/5V3AOo9H+Pa+XoaI90
JFg40Zb8jKVKMQI5ujsPHx3KfCI/6jENkytubOfFdtqcS4fekmAsxBOKNNBZ3Xik
d1BaFGGW7Oiit2QQ3pOxmdoDE2zzzRWHPMOA1MQQEw4kJHb9050k8nOHhSQsMoM9
XFintCK8jUeUCSVJC9oZQTR4g/rEI3Dy8IRPJfKuZwsQwdWapgYhyA/AYTqYclH4
dJdQ2nYy7tk1gl6KPrmLl6sYC99Bk6Hxp020o043QZ+yrdRGWyH9Xaavb+pJAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUTq8I69Z3M55ib2bcno+eshqHSp8wHwYDVR0j
BBgwFoAURgy1fR5JKlZqDDGaAuW+XcLKz78wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzAvNDYwQ0I1N0QxRTQ5MkE1NjZBMEMzMTlBMDJFNUJFNURDMkNBQ0ZCRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC80NjBDQjU3RDFFNDkyQTU2NkEw
QzMxOUEwMkU1QkU1REMyQ0FDRkJGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzAvMzEz
NDMzMmUzMTMzMzcyZTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACPiT8wDQYJKoZIhvcNAQELBQADggEBAG6Koipvv+Lv
oipFUnyopAVg99jDDCgcozwFrveOLbH/OknfMqF5SyC+BhTnPKBk6Vtld2Uafgew
ibRNEDmzu5T2cBG9ZLxstiJMGMCSivGz0L7r4iYrFs67uOcW5eDjwZGyF35P/TVd
Boaz99nP3QipsxDsCIMxuz2VMbWi7TaZ5fsHlM310yL2Y3xvg1m93nQ9x4DXpjkE
UKb9rWWOjn2zYfdw2KGKWXULZGAkGbvnEsv/cJYwrZRXPn0qg9Hii/SK7hGDGfji
dC4qX2QpHeDOoZjKd144NJxwWCIDi5UacPAlzG5iA5t+PZnfiYDaCLVdD6g9F3vY
1i1lvDyXjCw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org