Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3234203d3e20323634353136.roa
File:                     3134332e302e382e302f32322d3234203d3e20323634353136.roa (raw, json)
Hash identifier:          mEk88dV7s1sdKkxOqSD+8TOb4LLH2ItLOL7b+O8aOrw=
Subject key identifier:   F3:FE:58:60:A5:04:32:05:07:2F:40:A1:56:9F:06:5E:4F:B5:C8:98
Certificate issuer:       /CN=92707970D9A36CB4BBB7C0CED7E733E8F481BF39
Certificate serial:       45D025E623FD6C5C8DBF23C7946C45C56FABB4B8
Authority key identifier: 92:70:79:70:D9:A3:6C:B4:BB:B7:C0:CE:D7:E7:33:E8:F4:81:BF:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92707970D9A36CB4BBB7C0CED7E733E8F481BF39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3234203d3e20323634353136.roa
Signing time:             Tue 22 Aug 2023 15:25:29 +0000
ROA not before:           Tue 22 Aug 2023 15:20:29 +0000
ROA not after:            Tue 20 Aug 2024 15:25:29 +0000
asID:                     264516
IP address blocks:        143.0.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d0:25:e6:23:fd:6c:5c:8d:bf:23:c7:94:6c:45:c5:6f:ab:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92707970D9A36CB4BBB7C0CED7E733E8F481BF39
        Validity
            Not Before: Aug 22 15:20:29 2023 GMT
            Not After : Aug 20 15:25:29 2024 GMT
        Subject: CN=F3FE5860A5043205072F40A1569F065E4FB5C898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:f3:a1:a4:47:14:ff:ac:e9:1c:86:4e:58:
                    ed:f5:5c:68:da:61:aa:2b:3e:27:94:4d:ea:c4:d7:
                    75:d0:68:c0:e8:75:f7:1b:ea:22:1e:44:3c:95:32:
                    db:b7:f7:6b:db:fe:79:53:57:46:c9:5e:cc:5a:e6:
                    af:d3:a5:e6:33:f3:aa:84:93:2c:7a:36:87:51:15:
                    a7:c6:a4:e8:97:17:d8:d1:c4:8f:c6:68:c9:da:8b:
                    d4:91:59:6a:b8:23:d4:80:49:47:41:ff:c5:2e:de:
                    5a:80:80:fe:2e:dc:47:07:81:67:f3:a6:a7:4a:81:
                    ac:82:4b:cf:5a:23:23:ca:5d:17:47:af:62:0f:d3:
                    c2:0e:23:48:a2:7f:ac:46:8d:00:fc:af:bc:78:64:
                    96:ef:ff:19:ba:c5:19:4e:6e:49:b1:e2:90:eb:c5:
                    91:99:de:4e:49:b6:b1:d7:5d:78:c2:64:19:14:cd:
                    61:1a:38:21:a2:4d:11:d3:51:69:84:50:73:2c:65:
                    d9:33:63:a1:bd:b2:d3:bd:b2:4a:52:d6:92:30:b5:
                    2b:00:60:65:45:43:46:de:f0:5d:0e:75:da:e1:d0:
                    03:08:20:6f:a4:c9:ae:cb:b1:05:5e:7e:6e:30:94:
                    49:84:2b:fe:85:b6:50:af:1e:0f:c2:fc:67:ea:dd:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:58:60:A5:04:32:05:07:2F:40:A1:56:9F:06:5E:4F:B5:C8:98
            X509v3 Authority Key Identifier:
                keyid:92:70:79:70:D9:A3:6C:B4:BB:B7:C0:CE:D7:E7:33:E8:F4:81:BF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/92707970D9A36CB4BBB7C0CED7E733E8F481BF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92707970D9A36CB4BBB7C0CED7E733E8F481BF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3234203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:de:e3:a2:82:26:80:60:c0:96:15:09:fc:1b:ea:1d:65:
         92:58:22:62:28:6d:c1:b8:2f:1e:c9:c4:16:09:fd:89:0c:32:
         c9:5e:8e:71:ff:25:87:73:62:9a:6a:05:70:42:a4:44:75:33:
         79:6d:90:84:b9:ee:5f:a0:db:df:d8:e2:23:59:7a:0f:f9:a9:
         e3:1f:17:9e:7c:0a:7f:23:6b:df:f4:62:82:db:b8:f0:db:a2:
         76:58:49:b0:27:8d:e8:01:4a:84:1b:59:2f:6b:0c:71:cb:8d:
         5f:07:8d:05:9f:a8:6c:a9:d7:90:27:37:df:78:0b:79:20:79:
         3f:ac:83:07:33:c7:0f:c3:72:0e:1a:83:20:55:52:ee:56:0c:
         0b:11:a7:26:c7:a0:28:35:91:b3:3a:99:dc:f1:35:a3:4c:e9:
         5f:00:01:43:8d:ce:86:31:70:f4:66:e0:94:08:05:66:ae:33:
         34:32:65:d8:d9:15:68:07:f2:12:41:0c:64:05:06:7a:29:03:
         ee:9a:d2:ec:3e:20:2a:52:6d:e7:98:1d:87:87:c9:f1:ec:b0:
         cd:b7:ef:07:03:01:b4:9a:b8:74:e0:80:22:3e:10:8f:6b:3f:
         01:ac:8e:28:98:cc:7e:67:e2:9e:66:ba:9d:cb:6d:02:cb:67:
         38:38:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org