Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa
File:                     3134332e302e3134302e302f32322d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          ZsZ3XeFV8wnh1JOoZqZUm1tawxGKIdohkrZCo7Q1XCE=
Subject key identifier:   38:54:95:A9:58:7C:09:05:82:3F:05:3D:10:CC:96:C1:F4:B3:4B:CF
Certificate issuer:       /CN=6081C137E9272E62F62F2918C1910F90943341EE
Certificate serial:       41B6C6EE13CCDBADDF100D6245441D063E70034A
Authority key identifier: 60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa
Signing time:             Thu 04 Apr 2024 16:01:25 +0000
ROA not before:           Thu 04 Apr 2024 15:56:25 +0000
ROA not after:            Thu 03 Apr 2025 16:01:25 +0000
asID:                     264009
IP address blocks:        143.0.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b6:c6:ee:13:cc:db:ad:df:10:0d:62:45:44:1d:06:3e:70:03:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6081C137E9272E62F62F2918C1910F90943341EE
        Validity
            Not Before: Apr  4 15:56:25 2024 GMT
            Not After : Apr  3 16:01:25 2025 GMT
        Subject: CN=385495A9587C0905823F053D10CC96C1F4B34BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:7a:b7:9a:4d:da:eb:da:38:dd:ee:1a:08:
                    a4:65:42:72:06:82:b4:9f:54:3a:15:58:be:0a:ee:
                    55:2c:b5:d6:91:28:8d:f9:f3:61:01:f6:36:69:e4:
                    71:7e:b7:b4:f6:4d:fb:d1:65:f5:77:82:e7:ad:64:
                    be:0d:49:2d:44:2e:a4:33:54:fa:68:f2:c6:4f:0d:
                    fb:36:09:a8:92:1a:87:15:13:3b:62:80:34:f9:88:
                    c9:43:4e:c2:73:4c:c3:c5:a3:02:4d:90:48:3c:c2:
                    2d:85:73:18:1f:8e:87:20:44:76:d9:9b:fe:ce:bc:
                    ff:4e:a8:88:f7:a7:d3:c2:9d:6d:a7:6c:f7:61:57:
                    d1:4c:1d:d7:89:04:fc:54:1e:ce:2a:ec:53:73:fa:
                    30:57:9a:34:79:89:a0:b9:0b:3e:8e:0f:b7:54:58:
                    47:b9:8f:38:30:56:12:f4:4c:ec:39:de:b0:9a:5f:
                    44:08:dd:8f:16:93:15:af:12:e7:9e:56:64:52:80:
                    6b:b0:d5:c4:db:b7:8a:a8:54:8a:cf:f9:e1:9a:93:
                    b0:ae:19:f2:95:3f:dd:e1:ad:a6:d8:1b:c2:5c:0d:
                    33:58:dd:3d:6f:01:f5:e7:59:ca:40:83:57:8c:cc:
                    00:01:09:f8:ab:ff:3e:7f:5d:67:a2:57:1e:81:47:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:54:95:A9:58:7C:09:05:82:3F:05:3D:10:CC:96:C1:F4:B3:4B:CF
            X509v3 Authority Key Identifier:
                keyid:60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/6081C137E9272E62F62F2918C1910F90943341EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:96:94:db:70:1a:ed:61:39:97:5e:90:7c:58:6b:02:dc:
         dc:5c:c0:c2:a1:bd:3a:ed:b4:67:11:f2:a6:0c:74:31:b3:3c:
         cb:ea:a7:a6:77:b7:b4:93:6d:e7:3f:b4:10:e7:08:16:26:d7:
         36:07:b0:77:f1:84:10:e3:e6:db:ce:3f:37:69:9e:33:0f:3d:
         ef:5d:94:21:ae:e9:47:d2:2d:0e:b3:27:4d:2f:50:fb:51:15:
         43:e8:57:25:46:bf:a8:e1:07:f1:97:a8:e5:6c:02:d1:b8:5f:
         37:f3:e4:7a:61:3e:9f:45:31:86:f5:49:6f:31:64:bd:f3:d9:
         d3:da:eb:68:2e:6d:2f:dd:97:14:96:2f:3c:98:2d:5a:a1:e0:
         28:12:ee:b0:29:e8:88:37:ce:66:75:08:b2:06:c3:a9:0c:8b:
         37:74:38:08:3c:25:51:f0:45:94:fc:ae:89:e0:b9:7f:f4:6c:
         a9:6d:58:a2:b0:72:ff:d8:a2:79:60:cb:f8:b5:49:40:cf:24:
         e1:43:60:08:af:ce:38:55:54:b3:64:9e:1f:6a:e7:0e:42:a1:
         66:e2:71:99:6d:77:8a:65:33:9c:41:e6:28:55:b6:ca:e5:b3:
         39:9d:67:4c:12:c0:c5:4c:54:1f:0a:a3:61:e4:0e:f7:24:eb:
         cc:2c:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:41 2024 by rpki-client on console-fra.rpki-client.org