Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323634303735.roa
File:                     3134332e302e32342e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          nICRUwzywHOTzCoFG4/lDmHS2bRuouebwt9Q0ynVIBQ=
Subject key identifier:   87:5B:3F:71:24:F3:C3:68:26:93:43:1D:07:AC:B6:1B:AC:05:1F:5D
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       4D852D267AEEA2777076D366ED7842F74D6AB8AF
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323634303735.roa
Signing time:             Tue 02 Jan 2024 20:32:18 +0000
ROA not before:           Tue 02 Jan 2024 20:27:18 +0000
ROA not after:            Tue 31 Dec 2024 20:32:18 +0000
asID:                     264075
IP address blocks:        143.0.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:85:2d:26:7a:ee:a2:77:70:76:d3:66:ed:78:42:f7:4d:6a:b8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Jan  2 20:27:18 2024 GMT
            Not After : Dec 31 20:32:18 2024 GMT
        Subject: CN=875B3F7124F3C3682693431D07ACB61BAC051F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:83:5a:bb:37:61:50:52:f2:8d:80:1a:12:
                    00:7d:ec:53:ff:ab:71:02:44:4f:b0:e1:d0:4d:5e:
                    f4:f7:5e:c1:38:e8:81:7d:0d:97:3f:df:65:16:a7:
                    a1:8c:b4:79:f4:37:4e:fb:fb:1b:3d:a3:ef:ed:0e:
                    d1:f4:f9:e3:08:de:2c:82:78:27:4b:da:7f:09:6f:
                    58:47:47:0c:9e:3f:26:86:27:b6:86:53:70:f3:70:
                    b2:16:af:c9:5c:b4:b2:d4:60:53:f8:c9:bc:43:45:
                    7d:f5:a2:2c:25:05:9d:38:c2:a0:6c:63:b3:f3:98:
                    4f:ef:d7:63:5c:4a:67:cb:9a:99:96:36:2e:52:a2:
                    4a:8a:8f:82:b7:91:9c:80:be:a2:3d:de:1a:08:e6:
                    28:79:61:d0:b0:0e:2f:2c:5f:95:9a:88:b1:d5:ab:
                    07:98:18:d6:8a:14:e1:02:4d:fe:9a:a2:3e:95:8f:
                    31:86:d5:5a:c9:f7:e2:f5:0a:c3:7e:d9:07:7c:53:
                    df:f4:9d:52:b8:ee:99:8a:83:4e:d3:fe:41:d2:20:
                    88:8d:39:33:35:ef:bc:dc:2e:e3:c9:ef:92:4f:af:
                    a7:90:36:09:c3:99:28:c0:f1:e9:e0:6f:54:92:79:
                    a7:29:f2:5d:dc:ac:25:3b:21:a7:4c:ed:67:ed:09:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5B:3F:71:24:F3:C3:68:26:93:43:1D:07:AC:B6:1B:AC:05:1F:5D
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:56:b0:a6:c0:57:d6:02:bf:db:d4:79:31:e7:4a:8e:8e:
         e6:5e:0e:7f:08:ef:5a:6c:c9:27:af:53:04:74:e7:a5:4d:38:
         5b:5b:7c:03:1d:9b:54:36:33:5e:bd:c9:df:04:e6:e3:9b:57:
         77:92:1d:9d:f0:a1:3b:5e:54:0b:f8:49:ca:f0:9a:9d:ac:21:
         7e:d1:c3:e5:c1:22:1d:9d:30:ba:8c:cc:86:23:90:89:ba:47:
         25:fb:ab:12:53:41:3a:fc:94:a1:63:d3:fa:06:b8:86:91:7e:
         ef:0d:39:08:9e:5a:0a:54:1a:6e:c3:8e:45:3e:28:38:bc:d0:
         8c:24:a3:e0:ed:cb:98:96:b8:1c:19:56:8d:10:cb:c6:f3:aa:
         e7:5d:d6:06:eb:ac:f9:06:42:ce:a5:7b:45:0f:b4:a6:79:8f:
         d2:5c:ca:57:e7:9d:b5:80:8d:35:8a:06:5c:32:94:af:2f:09:
         28:ba:9c:9c:6c:9b:e8:69:98:c2:ad:94:76:8a:a2:03:ab:16:
         cb:80:93:19:68:89:c7:5d:ed:9c:7b:c5:c4:00:57:42:f7:ae:
         83:6c:35:19:83:c4:8f:d9:6b:33:7c:0c:d9:9a:51:e3:a9:ce:
         16:cb:12:d7:6a:3c:4b:b2:15:e5:0d:6a:0c:8e:46:54:9c:3a:
         7a:c1:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org