Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32332d3234203d3e20323634303230.roa
File:                     3134332e302e3134342e302f32332d3234203d3e20323634303230.roa (raw, json)
Hash identifier:          CB2fnABGR7o62ASkkyWl90C/zNINnb52aIIM9ztbSpA=
Subject key identifier:   1C:C6:72:A5:05:BD:95:B4:6A:F0:6E:E5:D0:17:97:FA:67:64:AB:2B
Certificate issuer:       /CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
Certificate serial:       6A3D53E373358FD5F3D538748DC321B03CD6DEA5
Authority key identifier: 67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32332d3234203d3e20323634303230.roa
Signing time:             Tue 16 May 2023 12:29:55 +0000
ROA not before:           Tue 16 May 2023 12:24:55 +0000
ROA not after:            Tue 14 May 2024 12:29:55 +0000
asID:                     264020
IP address blocks:        143.0.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:53:e3:73:35:8f:d5:f3:d5:38:74:8d:c3:21:b0:3c:d6:de:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67491EDA76E398AB01F0CC6CD7474F33F5D99A5B
        Validity
            Not Before: May 16 12:24:55 2023 GMT
            Not After : May 14 12:29:55 2024 GMT
        Subject: CN=1CC672A505BD95B46AF06EE5D01797FA6764AB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:b3:e2:29:80:ab:c2:c0:f1:cc:56:44:5a:
                    fe:1a:1c:65:7b:ba:81:2a:cd:ac:c0:23:60:02:4d:
                    74:6b:ac:d0:1c:26:4f:82:04:8d:28:39:5c:67:4e:
                    08:6f:f6:3d:08:54:91:2a:44:f2:6f:77:4b:ff:9f:
                    ef:7a:75:38:4a:5c:f4:dc:c7:9c:2a:ea:c7:a5:d3:
                    73:b7:f3:d6:d2:fa:74:e7:04:ce:d5:04:da:fd:af:
                    42:4e:e3:6d:85:0e:2a:ee:31:e2:be:9e:f7:01:ab:
                    3b:0d:17:4e:b8:06:60:18:76:db:55:ed:3d:cd:ed:
                    c3:e5:23:d1:0a:97:19:4b:d8:b4:f6:58:af:a1:72:
                    de:33:5d:5f:a5:7b:12:56:aa:61:c4:4e:10:d0:11:
                    09:db:71:0f:05:37:fd:a8:3f:be:5e:58:b6:92:f3:
                    72:8d:b1:27:ce:64:e6:26:c6:0c:43:8f:39:54:aa:
                    fc:84:1a:65:84:24:2f:7c:b8:12:1a:e2:13:d5:70:
                    52:95:c4:c2:d2:a9:09:82:2a:4a:a2:94:90:77:f6:
                    14:e5:28:95:ab:ce:17:8b:41:6e:7f:20:30:2b:d3:
                    d1:3f:79:01:a1:92:3d:79:e7:eb:5f:82:54:f8:bd:
                    9c:1a:12:76:83:29:dc:c7:d2:be:3b:b5:f1:60:89:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:72:A5:05:BD:95:B4:6A:F0:6E:E5:D0:17:97:FA:67:64:AB:2B
            X509v3 Authority Key Identifier:
                keyid:67:49:1E:DA:76:E3:98:AB:01:F0:CC:6C:D7:47:4F:33:F5:D9:9A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67491EDA76E398AB01F0CC6CD7474F33F5D99A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32332d3234203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:5f:0a:ea:13:52:a8:e2:43:4b:b6:f2:a7:8b:b8:10:72:62:
         52:ae:a4:a3:bd:2a:2c:f0:ca:94:b4:8f:f5:9f:14:a7:96:32:
         c2:d1:eb:3d:21:d5:15:c8:14:62:3a:ab:02:fc:e9:7d:5a:9a:
         7a:46:89:51:09:07:f7:40:09:fd:3a:3e:7e:a4:66:b3:41:68:
         4f:e9:93:93:82:7d:80:19:85:36:51:b2:34:ef:34:f1:f8:24:
         b3:4c:2a:88:e5:a7:6a:3d:ba:bd:07:88:05:f3:85:95:b0:a7:
         9e:c5:54:bd:ed:73:67:b0:00:fc:51:d1:9d:b0:ef:05:88:7f:
         d6:05:53:20:19:0e:5c:b4:19:46:52:31:a4:f1:12:c3:a6:18:
         6d:91:0f:8d:cb:c0:cd:0d:f0:1f:a1:5d:5d:6a:12:8a:25:83:
         a8:b4:60:cc:15:6a:b8:83:61:60:72:fe:90:1d:e8:09:33:2a:
         fe:3e:b8:14:5c:ea:32:f9:64:9c:8a:a4:2c:22:0d:62:12:05:
         06:d6:1a:20:4e:a3:ee:5a:0d:4c:9d:72:dd:0b:77:f5:33:28:
         01:36:7d:b8:55:c9:91:a8:ea:b5:ff:6d:fa:cf:5c:51:59:0e:
         bd:e5:40:49:c3:03:6a:80:35:99:cf:ea:08:5a:2d:39:71:3e:
         c0:e0:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org