Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          rA/dM2Ce3mVE8tJ1vExsKbEpmp9ifsDHMsYd7tOchUE=
Subject key identifier:   11:98:6C:5D:91:97:ED:90:F0:ED:88:D1:40:01:03:FB:0F:FB:8C:1D
Certificate issuer:       /CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
Certificate serial:       55B9D012C31B2E21DA5506ED9E5ACA3844E879C4
Authority key identifier: E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
Signing time:             Thu 15 Feb 2024 15:03:19 +0000
ROA not before:           Thu 15 Feb 2024 14:58:19 +0000
ROA not after:            Thu 13 Feb 2025 15:03:19 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b9:d0:12:c3:1b:2e:21:da:55:06:ed:9e:5a:ca:38:44:e8:79:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
        Validity
            Not Before: Feb 15 14:58:19 2024 GMT
            Not After : Feb 13 15:03:19 2025 GMT
        Subject: CN=11986C5D9197ED90F0ED88D1400103FB0FFB8C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:b3:bf:de:31:80:f9:10:73:1c:a7:b8:1c:
                    67:62:88:77:0a:de:4e:6c:0a:35:3e:12:ab:d6:42:
                    94:59:60:b0:27:a2:c7:57:bf:9c:f1:75:85:23:90:
                    fc:49:24:35:e2:00:44:79:d9:73:6b:af:32:9b:45:
                    db:57:28:37:06:c3:8c:c2:9b:34:d3:2f:b6:c8:78:
                    b6:ca:e4:64:64:71:25:45:e9:45:92:a0:0c:ac:a2:
                    76:3c:82:81:a6:fb:74:36:9d:61:25:1e:e5:88:c3:
                    75:4f:6e:de:00:4d:e4:62:42:2d:af:5d:93:b5:07:
                    30:b9:12:4a:0a:50:59:59:d3:90:5f:08:b4:35:2a:
                    f6:a9:86:91:55:20:e0:70:26:39:19:7e:25:1c:e2:
                    bc:7a:35:25:f4:24:ec:56:68:b2:de:37:54:0f:74:
                    95:79:27:bd:7b:91:62:ea:d7:56:4b:90:2c:92:6a:
                    fd:01:eb:04:8e:45:5f:98:ac:0f:64:32:6d:74:42:
                    33:1a:fb:bd:95:51:d6:78:db:69:bb:e3:f9:7a:d9:
                    3c:27:28:ca:13:ff:1f:00:96:2a:b1:52:68:72:c3:
                    98:37:87:83:df:22:9d:33:44:a7:51:08:e6:00:36:
                    03:ba:d9:93:05:ed:8e:a6:89:05:2e:c6:b2:ad:41:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:98:6C:5D:91:97:ED:90:F0:ED:88:D1:40:01:03:FB:0F:FB:8C:1D
            X509v3 Authority Key Identifier:
                keyid:E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:6e:07:bc:b5:fb:ae:e5:d8:84:e1:b5:a4:46:f1:ad:d5:9d:
         d8:d2:5c:c9:44:f6:12:2a:dd:2a:18:2a:c1:5a:e3:bc:73:a7:
         27:6f:a8:d5:dc:e8:3a:65:2d:a1:90:52:02:a7:57:ac:b8:66:
         17:74:bd:27:6d:77:a5:df:c1:80:26:00:2a:d1:9a:ef:6f:1d:
         5d:f3:91:11:2f:42:48:00:d4:37:ea:85:cb:42:03:ab:a8:d6:
         20:2b:99:c6:36:78:8f:4c:5b:cd:bb:e2:2e:e3:f7:b9:2f:29:
         39:d5:93:1c:cd:1a:8f:68:af:94:c4:78:74:82:9a:95:ff:d0:
         a9:79:e6:67:50:9c:88:7c:b2:ff:b8:de:9a:10:cf:eb:79:33:
         c6:2f:ad:25:e7:bb:96:57:30:94:7a:f4:c3:80:4c:26:6b:19:
         be:71:0b:3e:d2:7b:e4:bd:4c:00:86:f5:70:7b:fe:fd:a8:14:
         21:1f:f4:4f:89:cf:69:63:41:ff:a5:fc:c5:8d:80:3b:fd:7d:
         19:d2:3a:95:68:1b:40:c5:c5:57:1d:1f:c7:d6:30:6e:d7:c6:
         d3:fd:57:cf:f2:a3:4d:d1:10:84:a8:ff:6d:bc:18:2f:52:b7:
         d3:05:6e:3e:6f:b4:31:10:77:ff:f3:71:77:fc:11:d4:f8:6c:
         98:d9:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org