Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3134332e3133372e382e302f32322d3234203d3e203533313732.roa
File:                     3134332e3133372e382e302f32322d3234203d3e203533313732.roa (raw, json)
Hash identifier:          fobn4aABHCN02ww+F2T5k6JRR58CIAFRz0PHTCRONaQ=
Subject key identifier:   79:6D:F7:F4:EB:5E:EF:21:E2:DA:4F:4A:02:DA:83:09:3A:7B:DA:07
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       7B665B2CFE7703515DA8B365E1FF9DB602623680
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3134332e3133372e382e302f32322d3234203d3e203533313732.roa
Signing time:             Mon 19 Dec 2022 13:52:00 +0000
ROA not before:           Mon 19 Dec 2022 13:47:00 +0000
ROA not after:            Mon 18 Dec 2023 13:52:00 +0000
asID:                     53172
IP address blocks:        143.137.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:66:5b:2c:fe:77:03:51:5d:a8:b3:65:e1:ff:9d:b6:02:62:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: Dec 19 13:47:00 2022 GMT
            Not After : Dec 18 13:52:00 2023 GMT
        Subject: CN=3082010A0282010100A0C0132269A2823474439992FC365722E5E3C0A1BBF77A00A976A1A3BB1E617992DE13DD1A50C8C05D9D5212A887E410B00350745D7715492CDB154FDCB2420F4FBEBFF036CE748B90D802B22C68BD31754EA9CEE7EC8537ED7928E6C454256A8B6DAF21B8B497E54F426BD8BE77ABC20BA0109B86254D1B372953E9FC14ABCC8393603EDF4D76A1D11A53FEB3FE4057D9D89E7DC4C01B23F1E9494DA58B36A4EEAC94ADF0DC5AC439612A4110B9926D4015ED606F8E4E451CE791FBA9C7C563F8EC5822DB234EFEEB7F2D62820C4C7E8AE1131DD492611A99C12F7DA88B7B2256C5E4C6389CC76C7FBC3DBB3580417448688F6F5782C7DDBECEB33C742316B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:13:22:69:a2:82:34:74:43:99:92:fc:36:
                    57:22:e5:e3:c0:a1:bb:f7:7a:00:a9:76:a1:a3:bb:
                    1e:61:79:92:de:13:dd:1a:50:c8:c0:5d:9d:52:12:
                    a8:87:e4:10:b0:03:50:74:5d:77:15:49:2c:db:15:
                    4f:dc:b2:42:0f:4f:be:bf:f0:36:ce:74:8b:90:d8:
                    02:b2:2c:68:bd:31:75:4e:a9:ce:e7:ec:85:37:ed:
                    79:28:e6:c4:54:25:6a:8b:6d:af:21:b8:b4:97:e5:
                    4f:42:6b:d8:be:77:ab:c2:0b:a0:10:9b:86:25:4d:
                    1b:37:29:53:e9:fc:14:ab:cc:83:93:60:3e:df:4d:
                    76:a1:d1:1a:53:fe:b3:fe:40:57:d9:d8:9e:7d:c4:
                    c0:1b:23:f1:e9:49:4d:a5:8b:36:a4:ee:ac:94:ad:
                    f0:dc:5a:c4:39:61:2a:41:10:b9:92:6d:40:15:ed:
                    60:6f:8e:4e:45:1c:e7:91:fb:a9:c7:c5:63:f8:ec:
                    58:22:db:23:4e:fe:eb:7f:2d:62:82:0c:4c:7e:8a:
                    e1:13:1d:d4:92:61:1a:99:c1:2f:7d:a8:8b:7b:22:
                    56:c5:e4:c6:38:9c:c7:6c:7f:bc:3d:bb:35:80:41:
                    74:48:68:8f:6f:57:82:c7:dd:be:ce:b3:3c:74:23:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:F7:F4:EB:5E:EF:21:E2:DA:4F:4A:02:DA:83:09:3A:7B:DA:07
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3134332e3133372e382e302f32322d3234203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:e0:4a:c8:b4:6e:62:e1:15:69:00:c9:29:d8:68:35:e5:
         0c:49:85:ba:65:49:18:a6:ff:dc:43:b7:b0:f6:60:1a:ef:a4:
         ce:8e:7a:d5:f1:a5:ae:1f:98:ed:37:40:31:57:f7:d9:86:f0:
         a7:2f:d4:d8:5b:f1:9a:9c:a7:90:5e:b4:46:d8:92:d8:9b:d8:
         6e:eb:96:c0:cd:bf:cb:22:44:3a:5a:58:57:aa:3d:ac:32:aa:
         02:c9:98:45:d9:fd:fd:8d:01:94:01:c4:dc:48:9d:4e:ac:91:
         0c:fa:0e:33:ad:be:94:45:c7:e5:a1:fa:f9:69:65:ad:d9:40:
         c5:cc:91:7b:26:7c:be:34:e9:1c:cc:2e:12:77:55:a3:de:26:
         37:5f:a8:27:31:c8:69:f4:2c:e4:ae:0f:f4:b8:74:ec:6d:a9:
         43:0a:87:7a:cf:c0:58:bb:df:cc:7e:7a:63:43:89:93:0b:f1:
         f9:ff:74:fe:cb:27:de:47:b9:a6:3e:67:f2:7e:51:32:6c:7f:
         e8:41:dd:2e:7a:a0:eb:5d:ef:f9:53:ad:46:02:6d:76:93:3f:
         7e:15:e5:70:00:39:58:ec:ee:68:e4:50:2f:ee:ca:2d:40:5c:
         60:8e:88:9a:29:a9:ed:a7:7c:48:19:3b:f0:5f:13:12:3e:eb:
         0c:ec:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org