Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          NGoZZ2onJuyNJ+/72mFgih0gBdsjs7mt10XWC/beGpk=
Subject key identifier:   5B:F2:70:6E:E6:1A:2C:DA:46:5B:6A:28:A8:E5:00:67:A1:23:E4:14
Certificate issuer:       /CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
Certificate serial:       1E0171EC117B153D5BCD40F9063DEFC702700EBE
Authority key identifier: E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
Signing time:             Wed 10 Apr 2024 13:00:16 +0000
ROA not before:           Wed 10 Apr 2024 12:55:16 +0000
ROA not after:            Wed 09 Apr 2025 13:00:16 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:01:71:ec:11:7b:15:3d:5b:cd:40:f9:06:3d:ef:c7:02:70:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8
        Validity
            Not Before: Apr 10 12:55:16 2024 GMT
            Not After : Apr  9 13:00:16 2025 GMT
        Subject: CN=5BF2706EE61A2CDA465B6A28A8E50067A123E414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:c1:78:30:f2:d3:94:a6:04:0f:8a:be:ac:
                    f2:97:72:3a:42:04:54:b4:3b:fe:40:4c:47:0c:68:
                    1c:3b:ea:6b:ff:50:c5:c8:cc:29:a5:1b:84:b4:65:
                    fa:21:4f:90:e3:6c:c6:19:13:fb:ab:16:41:41:d9:
                    64:92:66:38:a3:8f:6b:27:3e:c5:f9:9e:01:84:fa:
                    b0:24:f4:8e:00:c8:cd:6b:e4:2a:86:32:9b:c0:08:
                    d6:35:bd:17:0d:d6:f7:c1:ce:4e:7b:dd:e5:93:fc:
                    0a:57:02:33:a3:af:9d:53:e2:0a:cc:9b:7d:38:19:
                    e6:ec:13:e0:f1:e2:43:a0:a7:8c:0b:0a:02:ff:6e:
                    7f:a4:44:82:ba:20:04:9c:53:7c:da:95:fa:34:72:
                    3d:a4:08:b0:63:5a:bd:9a:4d:de:97:12:7d:4d:ea:
                    0d:28:30:79:ea:78:04:41:01:9e:72:23:62:9f:70:
                    0d:92:18:cd:c0:c4:3c:52:86:8c:6e:32:21:36:71:
                    85:15:7d:dd:dd:27:0a:3d:04:b5:be:1c:8e:93:28:
                    60:e4:f6:60:58:34:59:99:71:36:e0:c7:6f:a2:78:
                    f8:79:6c:6f:30:4a:30:01:13:07:6c:37:b3:d5:9e:
                    c1:81:5b:ea:54:4c:85:c2:70:11:95:6c:c3:a5:16:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:70:6E:E6:1A:2C:DA:46:5B:6A:28:A8:E5:00:67:A1:23:E4:14
            X509v3 Authority Key Identifier:
                keyid:E2:00:9F:B9:E6:F8:B4:97:5E:3C:2F:6C:43:BC:82:75:E7:38:E3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2009FB9E6F8B4975E3C2F6C43BC8275E738E3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/0/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:09:50:92:d9:81:97:d5:78:94:ba:45:b7:20:58:62:98:a3:
         2c:f6:05:eb:27:05:e0:a6:69:b8:8a:dd:ab:2d:5b:85:58:0d:
         1f:ba:0e:02:a7:d1:e9:60:7b:76:58:86:a9:d6:2c:cf:01:1a:
         ce:62:d3:65:ac:de:c3:a3:5e:23:ac:72:ec:ac:df:96:44:e6:
         40:1e:8e:2c:4f:13:cb:39:21:e9:1b:df:32:b6:e3:87:ec:5b:
         82:63:e4:f9:fb:0d:e0:79:a9:f3:75:2d:24:ad:38:6e:ba:70:
         1b:36:0b:40:02:56:e7:d3:8c:2c:72:44:af:63:d1:4d:d0:d0:
         7e:7f:f6:b2:40:f4:85:fc:07:c7:77:86:ac:02:ce:79:56:06:
         19:e6:86:12:28:dd:c0:13:89:af:d2:32:72:b8:50:f2:f7:ba:
         4c:af:f9:74:95:7e:a8:0f:f6:08:56:ff:14:aa:ea:e6:73:4b:
         6b:f7:25:48:c5:f9:e1:54:51:5e:b8:c5:7e:6e:f1:a0:3b:16:
         2b:a1:11:36:2b:8d:77:95:e1:ad:83:65:c5:bc:2c:84:3a:86:
         d1:51:22:cd:e4:d3:ba:56:aa:9f:c8:ea:5b:3b:69:b9:3f:b8:
         a6:c3:84:65:29:09:72:8c:b5:14:57:56:de:f2:0d:30:0d:8d:
         35:7f:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org