Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          B+JjWhM8h2zMg/W6YbMJWj5sNWiNha8Ai5tr+NMW+js=
Subject key identifier:   B6:21:35:1B:32:0D:9B:A8:AD:9F:8C:CA:29:56:4E:8C:CC:4C:78:0D
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       36F32D274700D02B0D4F875BBBC62FF5FE821060
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:13 +0000
ROA not before:           Wed 13 Mar 2024 19:16:13 +0000
ROA not after:            Wed 12 Mar 2025 19:21:13 +0000
asID:                     262369
IP address blocks:        143.137.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f3:2d:27:47:00:d0:2b:0d:4f:87:5b:bb:c6:2f:f5:fe:82:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:13 2024 GMT
            Not After : Mar 12 19:21:13 2025 GMT
        Subject: CN=B621351B320D9BA8AD9F8CCA29564E8CCC4C780D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:02:cd:df:43:9a:31:ba:1d:02:92:6b:af:
                    61:84:25:ec:1d:f7:98:00:8a:15:56:8a:b6:da:6e:
                    66:a6:35:90:1a:45:de:27:9f:93:ba:36:81:57:61:
                    63:d2:db:bc:61:25:7f:07:33:86:40:11:2d:5b:f2:
                    2c:e4:b6:da:ec:bf:8e:9e:91:39:e5:de:48:0d:a8:
                    68:c1:80:72:95:2e:1b:8d:48:ed:e6:e6:18:0f:70:
                    b1:e3:b3:18:71:b5:f4:6e:b7:ea:26:14:ea:99:0d:
                    a5:6d:45:01:ec:75:3f:47:8b:50:29:e5:41:99:0c:
                    6d:74:a2:bb:63:9d:b3:2d:5b:0e:f3:d6:c0:53:b3:
                    89:9d:47:7a:6b:1a:16:62:cf:12:c1:c0:af:37:5e:
                    36:dc:4d:1e:21:5c:96:9e:54:2e:01:38:d0:64:7c:
                    82:13:c7:9b:2e:71:6b:08:16:a5:6d:0b:7a:16:30:
                    32:0f:5d:2d:3b:d8:e5:13:8f:ac:b6:09:95:a9:35:
                    36:d2:5f:25:fe:1d:7c:8d:67:31:66:8b:9e:b2:91:
                    60:72:68:f0:f6:c7:75:c2:1f:77:48:de:2a:b2:1f:
                    30:80:17:c7:20:32:f6:f0:18:3a:dc:d7:6f:f0:fe:
                    46:ce:ec:2b:24:3b:fa:cd:4d:bf:7a:83:be:f0:80:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:35:1B:32:0D:9B:A8:AD:9F:8C:CA:29:56:4E:8C:CC:4C:78:0D
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:91:b5:df:f8:22:47:f2:2b:ad:b5:59:07:20:0e:72:95:
         98:63:9b:dd:ab:77:d0:fa:ff:d0:41:a8:0e:e5:2a:9f:ea:84:
         61:0d:c9:b1:4d:05:41:af:16:32:da:6e:95:07:10:df:1b:a0:
         5d:55:86:28:5f:c1:94:36:87:31:13:0e:03:c2:29:cb:6a:ef:
         05:e2:a3:e1:96:d2:48:41:26:52:a9:63:d1:85:e8:0b:e0:6b:
         cc:5a:98:d4:49:3c:a6:63:03:ef:a2:f4:11:ad:1f:bf:ac:89:
         7e:65:26:dc:aa:6a:3b:d0:a3:fb:d2:b8:3b:78:77:2d:c2:7e:
         05:00:0a:de:b0:0d:05:39:98:38:d1:1d:ba:a7:3c:4f:d7:e2:
         38:ee:4b:1e:4e:19:78:6e:37:fc:72:47:bd:b4:4b:10:63:69:
         3e:49:07:8f:14:f4:fb:92:b4:c8:c9:7e:17:eb:f4:39:fa:5a:
         8c:6e:aa:2a:bf:6e:91:d8:b8:05:ff:db:87:63:9f:d7:c5:e3:
         ff:aa:56:86:2a:8a:04:c6:fd:6d:fb:4c:07:c5:fb:c4:52:da:
         3f:e9:1c:60:12:83:ed:b9:e5:c6:ea:eb:80:4b:ba:cc:ee:1f:
         39:1c:3f:a2:e1:01:64:ca:2c:ae:8f:24:67:c3:fc:16:8c:ea:
         02:39:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org