Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa
File:                     3134332e302e3232322e302f32332d3233203d3e20323634303232.roa (raw, json)
Hash identifier:          KptWjnIiAVu2H9/Xs1t8+FSwvSBqardaJDf157TBDiY=
Subject key identifier:   8E:17:B6:D0:CF:FB:9F:B3:5C:5B:D2:EC:59:00:E0:D4:AE:23:FB:5A
Certificate issuer:       /CN=670A20A98738BBE9772713B95005BD85F6B31348
Certificate serial:       4FCF6BBFA7603513177DBDCEECA9332EFC853A45
Authority key identifier: 67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa
Signing time:             Wed 03 Jan 2024 12:10:32 +0000
ROA not before:           Wed 03 Jan 2024 12:05:32 +0000
ROA not after:            Wed 01 Jan 2025 12:10:32 +0000
asID:                     264022
IP address blocks:        143.0.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:6b:bf:a7:60:35:13:17:7d:bd:ce:ec:a9:33:2e:fc:85:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670A20A98738BBE9772713B95005BD85F6B31348
        Validity
            Not Before: Jan  3 12:05:32 2024 GMT
            Not After : Jan  1 12:10:32 2025 GMT
        Subject: CN=8E17B6D0CFFB9FB35C5BD2EC5900E0D4AE23FB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:84:d6:34:d0:95:e7:2d:12:dc:0e:7c:eb:
                    e8:54:43:d2:c8:26:85:9d:3f:a7:a4:9e:55:8f:ac:
                    1c:5d:06:62:d8:01:be:1e:6c:8c:82:f1:62:43:dd:
                    3d:5c:ef:34:77:51:ac:d4:c6:b8:09:e5:43:69:ea:
                    c1:26:1b:6a:fb:02:b4:14:1e:6a:b0:33:e0:c9:e2:
                    47:be:90:0a:a0:67:79:4b:a8:f5:98:46:fd:36:36:
                    e8:b0:b2:fe:aa:51:1c:90:b4:a5:fb:f2:84:a1:17:
                    c1:a1:a9:53:e9:1e:19:db:c1:df:1a:b1:3d:fb:d0:
                    57:ce:43:b6:67:57:52:94:11:af:f4:3e:35:b1:0b:
                    62:1f:4c:23:8b:16:a8:7d:32:a4:a2:d2:2a:36:7c:
                    ff:7e:49:80:1e:b0:c4:4c:ab:81:84:66:9e:a9:49:
                    84:e1:ab:82:40:fc:22:8f:59:7c:04:e3:ab:df:a2:
                    62:bd:56:47:ca:86:9d:d0:41:49:f2:1b:36:00:c0:
                    bd:98:b4:c1:e9:51:e7:59:f1:18:fe:c7:6c:ee:47:
                    95:d6:7a:4a:32:9f:16:94:4e:c2:99:af:e3:22:9c:
                    8c:6c:ed:97:48:1f:66:19:78:d7:07:97:2c:20:d4:
                    24:2a:41:7d:6d:cd:20:6d:34:82:fd:fe:d2:7d:28:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:17:B6:D0:CF:FB:9F:B3:5C:5B:D2:EC:59:00:E0:D4:AE:23:FB:5A
            X509v3 Authority Key Identifier:
                keyid:67:0A:20:A9:87:38:BB:E9:77:27:13:B9:50:05:BD:85:F6:B3:13:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/670A20A98738BBE9772713B95005BD85F6B31348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/670A20A98738BBE9772713B95005BD85F6B31348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ff:65:cf:ad:45:02:f7:d6:28:02:c4:b6:32:ff:b5:23:f6:
         46:97:81:62:e3:7e:f3:d4:f2:e9:ea:1f:57:07:44:b8:af:0a:
         e8:ab:8e:5e:00:d7:23:27:a7:ef:56:14:f7:ba:c5:93:c4:57:
         60:2e:32:bc:9d:0b:4c:18:0a:c6:fc:02:de:e1:10:64:6c:61:
         3c:2d:27:80:aa:5a:08:f9:30:46:98:81:f6:6c:df:c1:b1:d0:
         81:94:2c:b5:6b:64:a5:61:2d:74:04:13:fc:cf:c2:24:2b:ab:
         88:7c:f7:15:5c:13:0b:f3:39:f9:fb:60:f5:26:08:2e:86:a1:
         95:0e:bb:46:c8:73:4f:87:53:4e:ab:ea:62:2c:7a:88:7c:6a:
         22:63:05:d6:db:32:df:64:9c:a5:69:b8:6f:4a:79:39:3d:a6:
         a1:74:f8:05:ba:a1:8a:67:2d:9a:f8:db:07:89:03:9e:61:74:
         37:13:e7:f4:7c:94:15:bc:10:dc:7d:3f:88:8d:45:9a:9d:6b:
         3d:50:3c:5b:6b:84:2c:9f:02:ac:fe:4e:70:d4:86:63:b9:df:
         08:83:e3:ce:3b:0e:8c:dc:d9:5d:08:f6:d1:4e:e1:11:93:67:
         37:05:72:1b:4f:33:90:10:02:e7:b4:9e:60:60:61:23:36:84:
         6e:7f:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org