Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
File:                     3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (raw, json)
Hash identifier:          aDhSYj4oTztHgTm38LMyptPim87FylmdwPIqPntJwwY=
Subject key identifier:   C5:AF:25:18:14:91:28:49:79:AF:B9:63:8C:BD:33:4D:BA:42:60:6E
Certificate issuer:       /CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
Certificate serial:       197E07B1F056B7DA4D809D636DC82756D6C2E750
Authority key identifier: 02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
Signing time:             Fri 01 Mar 2024 01:57:52 +0000
ROA not before:           Fri 01 Mar 2024 01:52:52 +0000
ROA not after:            Fri 28 Feb 2025 01:57:52 +0000
asID:                     264042
IP address blocks:        143.137.152.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7e:07:b1:f0:56:b7:da:4d:80:9d:63:6d:c8:27:56:d6:c2:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0249D40E0D1F259C584F5A52FCB768DD9F6D7982
        Validity
            Not Before: Mar  1 01:52:52 2024 GMT
            Not After : Feb 28 01:57:52 2025 GMT
        Subject: CN=C5AF25181491284979AFB9638CBD334DBA42606E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:d5:c0:7d:97:68:c3:93:21:93:87:da:e4:
                    89:ff:cf:84:22:61:b1:df:7f:e2:06:17:f1:4e:5b:
                    7c:ec:94:7c:d7:9b:59:98:40:fc:8f:a1:b8:3c:fe:
                    9c:4f:45:5a:1b:8f:9e:c2:5c:b4:26:70:d8:b8:4e:
                    cf:9c:17:f3:f2:94:f8:a3:2d:bb:20:06:c1:f7:dd:
                    be:69:4a:f9:cb:71:2f:09:c0:33:fb:8f:1b:43:2a:
                    dc:4e:54:e8:45:fc:31:85:f6:10:db:eb:6d:f0:6d:
                    6e:bf:44:a9:5a:78:f5:b0:80:12:c1:77:57:1f:74:
                    a2:d0:dc:d4:e9:78:8c:06:cb:b6:c3:cd:c8:db:8e:
                    69:e6:8a:3f:2a:32:ff:8f:3d:d1:68:62:f6:d6:9a:
                    0d:c7:75:31:d0:76:e0:f4:bb:a7:ef:9a:b3:57:ff:
                    3c:a7:69:0b:95:ab:ce:45:c5:6e:f4:27:8c:6d:f6:
                    83:ef:53:a4:64:3f:bb:1b:8d:d2:b5:1f:7b:56:b9:
                    03:53:3b:6c:7a:04:29:e5:be:e8:36:9a:e5:96:d5:
                    96:1c:b3:22:98:22:3a:de:cc:b4:4b:c1:18:3f:f1:
                    28:d7:5d:88:93:7b:e5:3f:25:68:b7:d8:1c:e2:6f:
                    f8:a9:98:c1:ca:9b:d5:e1:49:37:d6:90:d1:68:f1:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:25:18:14:91:28:49:79:AF:B9:63:8C:BD:33:4D:BA:42:60:6E
            X509v3 Authority Key Identifier:
                keyid:02:49:D4:0E:0D:1F:25:9C:58:4F:5A:52:FC:B7:68:DD:9F:6D:79:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0249D40E0D1F259C584F5A52FCB768DD9F6D7982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/0/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:d5:f3:cf:25:ff:3a:95:70:c3:fe:8d:a1:61:3f:96:86:e9:
         74:0b:31:27:99:8e:36:0b:b5:f5:2d:44:ad:a4:66:d7:c8:d9:
         9f:62:29:2a:3c:84:d9:74:20:34:81:9a:1b:aa:38:e8:37:2f:
         1e:9a:10:75:cf:46:e5:eb:1c:c6:cc:d7:5c:ef:ba:d3:22:d0:
         ea:81:5e:7e:11:00:36:ea:4f:12:06:be:c5:4a:98:b8:86:b4:
         7d:26:00:7e:0e:46:32:ac:f4:80:fa:fa:6d:7d:a6:66:b2:27:
         d8:c6:e8:2a:52:4e:ae:51:db:f5:bd:b9:b4:9c:cd:f0:fb:b2:
         1e:44:2b:6b:7a:6b:c0:ff:bd:4d:df:50:aa:81:5d:a5:5f:65:
         59:cf:77:08:f1:97:3a:1f:d7:69:15:b4:50:c0:48:3e:63:73:
         cf:2d:56:8a:32:1b:89:82:bb:7c:1d:c1:c9:66:0a:1d:3f:b4:
         78:ba:b4:37:01:58:2a:e1:4f:01:ff:ae:0f:26:92:7d:ef:57:
         99:f1:a2:82:66:d6:e3:b2:f5:ef:9b:33:ea:72:82:78:51:97:
         b1:db:06:2d:3b:9d:30:3e:c8:e8:0d:67:f8:4a:8d:0c:12:ff:
         a7:a9:08:18:c1:02:de:13:34:ec:3e:62:c6:aa:f0:66:86:9a:
         7f:a5:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org