Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31392e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31392e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          Cb9nc3A4r+e8U//6/r8SKX91NPpk16n7X/j/bPRv1A8=
Subject key identifier:   F3:14:D7:12:63:A5:45:11:CD:B6:5E:A3:78:56:8D:D4:9C:EC:E3:B5
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       52AF51BBE144D72D30C33954300E0FA9FDE9832C
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31392e302f32342d3234203d3e203532393136.roa
Signing time:             Sun 01 Oct 2023 18:23:00 +0000
ROA not before:           Sun 01 Oct 2023 18:18:00 +0000
ROA not after:            Sun 29 Sep 2024 18:23:00 +0000
asID:                     52916
IP address blocks:        143.255.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:af:51:bb:e1:44:d7:2d:30:c3:39:54:30:0e:0f:a9:fd:e9:83:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Oct  1 18:18:00 2023 GMT
            Not After : Sep 29 18:23:00 2024 GMT
        Subject: CN=F314D71263A54511CDB65EA378568DD49CECE3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:17:05:f5:e8:64:1a:da:73:14:5a:44:cd:
                    c1:81:3c:52:be:2d:f6:5f:fc:11:92:33:cc:6b:44:
                    da:29:50:6a:74:42:d1:fd:21:c4:7a:96:ba:5a:2b:
                    2c:84:5c:07:72:05:f2:50:08:6f:f2:64:4d:ad:db:
                    27:ec:8f:d4:d4:5c:b7:40:c6:32:77:89:e0:c1:a5:
                    85:62:a4:34:28:24:79:46:4d:a0:7b:f5:08:d7:f3:
                    aa:7c:0a:ec:a1:0e:fd:a9:e1:1e:95:24:c2:4c:51:
                    43:31:5d:16:bf:80:2c:d1:95:09:84:f3:aa:00:f0:
                    90:fc:0f:af:33:95:50:6d:ff:f8:7d:38:28:6c:86:
                    0c:5a:67:96:ad:d9:e7:5c:b6:92:28:b3:8a:f2:67:
                    16:5b:8d:94:b8:02:f3:12:17:f7:b5:f2:ec:7f:d4:
                    64:ad:7b:d6:de:31:9b:8b:f1:fd:e4:fb:6d:fa:1e:
                    90:97:bc:32:c5:4e:e8:49:14:89:b8:a7:5b:bb:85:
                    1c:f9:87:55:95:16:33:eb:dc:1f:67:7d:af:6a:75:
                    05:88:ae:68:74:3d:84:f3:92:fa:2d:de:76:cb:2e:
                    29:53:b6:83:9b:36:9f:0e:8d:89:b3:e8:2f:94:80:
                    bd:d8:8f:ba:38:95:d3:13:57:fd:0b:6b:90:bd:83:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:D7:12:63:A5:45:11:CD:B6:5E:A3:78:56:8D:D4:9C:EC:E3:B5
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31392e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:d9:1a:b1:14:3c:a2:2a:ac:0a:df:b8:37:ad:8f:37:1f:
         ab:c4:b6:02:ab:25:b3:18:58:8a:6b:6c:46:0e:50:43:a7:a3:
         dc:6f:ad:28:70:f8:64:ce:6f:f0:d9:d7:dc:84:50:52:3b:67:
         83:d1:d2:16:f5:56:0f:78:16:a1:c7:c7:9a:02:4c:88:eb:a7:
         7a:c8:c7:65:46:28:95:33:17:28:51:96:bf:a5:23:46:ae:ac:
         b2:a2:aa:68:38:45:df:4f:1a:8d:9e:e8:a9:39:5c:27:da:52:
         21:be:80:3e:53:19:d2:8e:d8:91:0c:8e:16:26:15:b1:a7:ec:
         f0:b1:44:13:48:fa:b0:52:6c:2a:11:49:72:9c:2a:21:7d:a2:
         3f:d8:d5:f9:85:5a:82:99:8e:04:66:ba:92:c7:a9:50:da:db:
         5a:bb:70:25:2b:0b:a8:44:93:34:f0:62:33:36:3f:b1:1d:f5:
         29:80:51:b1:f4:ca:2f:65:3b:fa:2d:a5:b6:05:b7:2f:9e:1c:
         b9:9b:5c:c0:36:75:e6:c2:a8:10:8c:dd:9c:be:c3:7b:b7:db:
         d0:f3:54:c2:f6:a1:f9:98:13:5d:0a:94:6a:c0:8d:34:9c:7e:
         70:a6:bf:a8:ee:d2:26:04:c6:07:e0:ac:fa:82:ad:04:45:e4:
         20:c1:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org