Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
File:                     3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa (raw, json)
Hash identifier:          qbKpncKeSG5eiTmWyqQf+9b54znTnQq4o+lfTImETT4=
Subject key identifier:   A3:E6:9A:95:23:9E:EB:68:C9:D9:F5:42:42:28:AB:6C:EB:A2:6A:F9
Certificate issuer:       /CN=896F64699A24C2E23B5746346E4D57164325B11C
Certificate serial:       2A7525000BC39A303E0F42DF226C710857BC68A9
Authority key identifier: 89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896F64699A24C2E23B5746346E4D57164325B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa
Signing time:             Sun 10 Sep 2023 19:00:00 +0000
ROA not before:           Sun 10 Sep 2023 18:55:00 +0000
ROA not after:            Sun 08 Sep 2024 19:00:00 +0000
asID:                     267470
IP address blocks:        192.141.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:75:25:00:0b:c3:9a:30:3e:0f:42:df:22:6c:71:08:57:bc:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896F64699A24C2E23B5746346E4D57164325B11C
        Validity
            Not Before: Sep 10 18:55:00 2023 GMT
            Not After : Sep  8 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:9b:41:15:53:c2:e4:24:5e:d2:f9:0a:8f:
                    b1:68:1a:1c:a0:81:6e:99:14:46:54:bd:75:e3:0b:
                    a4:a6:a2:a3:31:5e:be:f0:65:91:18:73:aa:d8:9b:
                    75:81:c7:b4:bc:29:14:3e:3d:6c:76:70:d1:9b:83:
                    db:3e:06:30:c5:60:29:22:f1:68:f2:73:7c:53:5f:
                    83:bd:be:c9:c2:b6:ac:54:d9:fb:ac:8b:14:ef:dc:
                    60:57:9b:e0:b3:a2:d1:14:60:91:b5:e7:2f:de:0e:
                    df:7d:c0:77:a0:8c:eb:9e:44:ba:9b:fa:03:c6:07:
                    1a:db:ef:3f:5d:c6:82:dc:ff:c5:51:f0:42:5c:05:
                    27:91:d9:f7:25:3d:83:31:1f:71:86:1f:25:06:6d:
                    fc:ba:8f:bc:29:05:28:70:1c:7e:ac:a5:d1:2f:93:
                    22:96:41:ca:ec:7e:09:82:a9:57:17:42:8a:3c:d8:
                    ef:05:34:e9:b8:b4:e9:72:11:d7:2c:64:af:f3:fe:
                    d2:a5:94:d6:d9:d6:03:7f:d1:f7:2e:26:ee:8d:c1:
                    bf:0d:f4:26:de:58:46:49:7f:76:8e:fe:ac:da:3f:
                    e9:4f:46:a4:29:53:5a:06:1b:b2:13:3b:b3:ed:5a:
                    8c:bc:12:e9:86:72:44:c1:32:d2:28:cf:ff:6d:f6:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:9A:95:23:9E:EB:68:C9:D9:F5:42:42:28:AB:6C:EB:A2:6A:F9
            X509v3 Authority Key Identifier:
                keyid:89:6F:64:69:9A:24:C2:E2:3B:57:46:34:6E:4D:57:16:43:25:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/896F64699A24C2E23B5746346E4D57164325B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/896F64699A24C2E23B5746346E4D57164325B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/0/3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:47:9a:db:38:d4:77:87:8f:d9:59:13:79:1a:aa:e6:30:85:
         87:50:ce:68:71:cd:3f:15:4b:77:46:1f:98:8a:5e:41:20:dc:
         9b:33:21:e6:7f:d4:af:7e:60:23:8c:38:9a:2d:6a:a1:3b:db:
         af:bd:f6:9c:da:46:04:6f:f5:24:fb:89:75:22:50:5f:99:65:
         c8:de:62:58:26:cb:71:ce:8d:be:02:5f:0f:8b:95:cf:97:d9:
         e2:89:ca:bb:53:ec:c6:ae:8e:4c:83:b4:1b:0b:d6:9a:44:84:
         f9:09:b3:e9:da:88:e4:9d:4c:ea:30:91:a0:25:7f:f3:4c:b7:
         24:65:ed:35:5e:dc:fa:d5:33:c1:fc:21:22:30:b0:5e:6a:a9:
         38:53:0f:4f:4a:39:4c:04:1d:f4:45:18:4f:6d:4e:9f:59:0c:
         54:09:3e:cc:c1:36:b2:a9:91:9f:e1:94:9e:b2:54:cb:b9:91:
         fa:c9:7a:50:4e:2c:4f:97:e1:b4:34:4b:7c:c7:37:54:40:03:
         da:f8:d9:66:12:e5:49:85:56:e6:5b:34:15:2e:46:c7:d0:11:
         70:b5:6c:57:02:57:4a:02:a2:98:de:9f:d8:27:9a:58:27:12:
         44:ff:72:e8:bf:2b:97:3b:e9:9f:e1:09:5c:bc:2f:87:6e:4a:
         4f:7d:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org