Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          joA3QYkn55rDqhyyTXNh2jIGxir+WMdcwjgz81HqE1U=
Subject key identifier:   87:D1:73:2E:CD:F0:76:F2:52:16:7B:80:81:1F:A9:93:3F:67:09:B5
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       2FA5553D0EEA8FE44463F45B51A494DFA1016F42
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa
Signing time:             Sun 01 Oct 2023 18:22:59 +0000
ROA not before:           Sun 01 Oct 2023 18:17:59 +0000
ROA not after:            Sun 29 Sep 2024 18:22:59 +0000
asID:                     52916
IP address blocks:        143.255.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a5:55:3d:0e:ea:8f:e4:44:63:f4:5b:51:a4:94:df:a1:01:6f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Oct  1 18:17:59 2023 GMT
            Not After : Sep 29 18:22:59 2024 GMT
        Subject: CN=87D1732ECDF076F252167B80811FA9933F6709B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:5c:2f:a3:01:e0:e7:76:c0:e1:4d:34:e2:
                    d8:ae:a2:4b:73:f3:aa:14:db:af:b1:db:41:a9:91:
                    02:21:bc:72:42:01:7f:38:18:8e:97:bf:91:e0:b8:
                    ec:93:d7:f8:70:cb:76:15:ae:7a:5a:d5:15:82:c5:
                    77:03:b8:53:75:cd:ed:53:03:8f:77:96:ed:52:20:
                    fd:ee:38:99:34:3e:2a:e8:5f:85:69:fc:5e:27:bf:
                    ed:55:16:11:0d:34:bd:17:bf:a2:d1:00:6d:3b:1c:
                    bb:6b:90:1f:81:8c:9a:b2:de:1b:fd:16:77:89:13:
                    78:36:17:30:79:00:cb:cd:84:7f:29:11:c7:83:d8:
                    b8:b8:89:1e:2b:58:c7:37:42:b1:0c:b1:13:cf:7c:
                    f9:c5:1c:f3:84:8f:f3:71:32:b7:02:cf:8e:7d:29:
                    91:b4:2b:a4:fc:21:88:91:a3:e3:22:96:fe:b2:43:
                    57:25:63:a0:30:d4:3e:3e:d1:b0:3f:b4:95:77:37:
                    aa:07:25:95:25:a4:7f:65:2d:53:e8:1d:36:45:fa:
                    a8:db:d5:99:31:01:07:ae:b4:8e:18:a2:0e:47:bf:
                    a6:07:45:84:ba:2b:06:34:59:09:9a:58:59:88:db:
                    36:07:6a:06:6b:2d:c5:a0:5d:d0:ac:30:38:fe:4e:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:73:2E:CD:F0:76:F2:52:16:7B:80:81:1F:A9:93:3F:67:09:B5
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:7c:f6:87:69:6d:1a:89:04:1d:fc:44:ba:53:07:04:d6:cb:
         b8:d0:ec:27:82:68:99:38:c0:2f:2f:eb:71:59:21:7f:65:3c:
         28:72:4b:89:a4:54:95:71:fe:ad:1d:cc:60:e4:90:27:a1:f4:
         a6:af:5e:06:a1:45:ba:17:98:59:6c:3a:bd:99:e7:3c:a6:e0:
         cd:fd:e7:a2:2d:79:01:0e:d9:28:31:fa:8c:9a:83:76:85:35:
         f5:68:5e:34:6b:e2:7a:cb:88:5d:1e:ea:bd:cc:4b:2a:8d:1e:
         70:fb:56:aa:5e:d5:c2:ee:7c:ba:88:5e:84:72:27:b4:f0:87:
         45:d1:23:2c:79:db:16:5d:32:c3:a4:06:a0:50:41:76:b2:58:
         a9:86:01:0f:b4:92:1f:5d:fc:c7:12:80:32:ed:79:aa:99:f3:
         ef:4b:c4:8c:79:6a:3c:dc:48:d3:6c:1d:a0:b9:07:59:45:d0:
         7e:26:5b:48:08:9f:ac:a5:8f:91:30:4e:54:da:53:a9:76:46:
         29:ca:cc:5f:81:bc:8e:ca:2c:b1:b1:6a:56:85:1a:fb:62:53:
         a0:1f:3a:9a:a1:35:8f:05:84:38:44:b3:9a:a8:c1:18:53:e2:
         0a:0d:e7:e8:dc:11:e6:80:94:43:79:8c:01:e7:05:13:ee:14:
         4f:95:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org