Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32342d3234203d3e20323633393930.roa
File:                     3134332e302e31362e302f32342d3234203d3e20323633393930.roa (raw, json)
Hash identifier:          v64BrLIX+SmOw+wiHFQkbtJOQksUBNPMMWb5ztLSWIs=
Subject key identifier:   C4:DE:08:55:56:21:1B:2F:99:3F:57:DB:EF:78:10:1F:20:6A:05:F0
Certificate issuer:       /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial:       4CE7432E864024268E7B58BE33EEA096A83380A2
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32342d3234203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:20 +0000
ROA not before:           Sat 13 Apr 2024 16:08:20 +0000
ROA not after:            Sat 12 Apr 2025 16:13:20 +0000
asID:                     263990
IP address blocks:        143.0.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e7:43:2e:86:40:24:26:8e:7b:58:be:33:ee:a0:96:a8:33:80:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
        Validity
            Not Before: Apr 13 16:08:20 2024 GMT
            Not After : Apr 12 16:13:20 2025 GMT
        Subject: CN=C4DE085556211B2F993F57DBEF78101F206A05F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:de:18:90:dc:82:05:d0:28:e1:2b:c4:03:
                    2c:2e:40:3a:d1:5d:d6:61:32:8d:4d:8a:5c:69:fb:
                    3a:0d:eb:23:31:5d:75:a7:1d:58:d7:e1:f5:8b:cf:
                    77:e8:20:7e:62:67:21:ae:96:5b:5b:1c:34:87:9a:
                    26:db:95:5e:1b:27:98:60:d6:87:61:04:3c:ca:38:
                    d0:68:18:46:71:1e:5f:c5:11:ec:b3:7c:71:99:11:
                    5c:2f:d9:26:ce:61:83:d5:0e:e9:a3:4b:f7:9c:07:
                    82:c9:f8:8c:ba:75:bc:20:83:9b:df:7f:5e:6c:39:
                    65:61:f8:d5:01:55:71:8a:76:fa:07:6e:d9:14:1c:
                    c8:aa:44:16:c9:5f:1b:b1:c6:70:47:45:0f:54:e7:
                    81:73:3c:29:59:be:08:fc:af:af:34:38:5b:cc:65:
                    94:95:eb:d2:13:90:28:5d:d6:f9:af:1c:6c:a7:f9:
                    93:d8:60:01:41:d4:6c:fd:b1:81:48:a3:81:62:e9:
                    fa:05:03:72:7c:36:e6:8c:32:24:3d:2c:fa:6d:d9:
                    85:3a:c1:d4:bd:0b:1d:8a:28:45:08:8e:10:7f:33:
                    cf:06:c2:1e:c2:a2:53:fa:cf:dd:60:a6:7a:e4:58:
                    1a:1c:95:ff:c7:71:f0:74:1e:24:e9:a7:5f:c2:58:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DE:08:55:56:21:1B:2F:99:3F:57:DB:EF:78:10:1F:20:6A:05:F0
            X509v3 Authority Key Identifier:
                keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31362e302f32342d3234203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:1a:14:5b:19:c5:64:cc:f6:9b:81:2a:70:df:8d:c3:37:
         20:44:71:b7:cd:99:ed:61:e6:09:30:ea:af:48:70:b2:64:70:
         6a:bf:e1:cd:93:c9:6b:44:5e:d7:d9:b9:02:37:ca:c9:ba:0e:
         e9:24:88:0f:e3:1e:b0:00:d5:75:20:12:10:de:70:05:c5:a1:
         07:f7:9b:52:f1:bb:71:4e:cf:3d:3b:e3:a6:d4:44:d8:e0:03:
         6b:94:79:28:9c:5a:8b:45:da:d6:a6:f5:51:b1:3a:07:e7:55:
         f6:8d:cf:9d:ef:24:97:cd:c2:d4:78:7e:c8:31:da:99:e9:5a:
         25:48:51:fa:02:16:98:dd:74:66:02:96:ba:f7:e1:48:87:e1:
         14:b5:90:25:6d:ab:94:6e:b1:ac:33:71:4d:7b:0f:06:c1:5b:
         46:e1:ee:6b:db:ec:9a:20:45:1e:22:cb:35:3b:a2:b8:4e:fa:
         09:8a:ba:3f:b2:71:a3:a9:3a:d1:42:64:21:e0:87:2f:f4:b7:
         68:9c:09:9f:93:b8:f2:52:c0:f4:a1:8c:02:7b:bd:f0:09:ab:
         0f:93:fd:1e:55:23:4d:52:f1:9a:37:78:b0:11:51:f7:37:7e:
         a2:bb:7e:6d:27:35:25:b1:3d:a1:33:cd:2d:89:38:a9:d2:ab:
         4c:4f:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org