Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa
File:                     3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          iSq1tVjQGw/WCZICrB4s4c3saRErfRQe60konTQJDU8=
Subject key identifier:   7A:CF:2B:7D:F9:E1:AD:2B:67:19:EA:93:AD:3E:20:E2:15:64:9D:74
Certificate issuer:       /CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
Certificate serial:       018B907456B6B792D6EB6845604A7D947A68F0EF
Authority key identifier: E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa
Signing time:             Tue 28 Feb 2023 12:42:36 +0000
ROA not before:           Tue 28 Feb 2023 12:37:36 +0000
ROA not after:            Tue 27 Feb 2024 12:42:36 +0000
asID:                     271724
IP address blocks:        143.255.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:74:56:b6:b7:92:d6:eb:68:45:60:4a:7d:94:7a:68:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3051165A08E9EF9F0F3D461B57D8BD18184FC5B
        Validity
            Not Before: Feb 28 12:37:36 2023 GMT
            Not After : Feb 27 12:42:36 2024 GMT
        Subject: CN=7ACF2B7DF9E1AD2B6719EA93AD3E20E215649D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:97:dc:60:b4:71:ba:3c:04:b6:51:83:36:
                    8b:cb:f3:6f:5c:b2:ab:8b:f1:f4:5f:0c:64:e2:9b:
                    70:39:9e:57:a6:a2:d2:46:a3:e6:89:6a:bb:aa:bc:
                    85:d1:f7:81:89:0e:a4:0e:66:f1:0f:78:58:f7:b8:
                    3c:0e:af:dc:04:ed:39:ea:92:ea:88:ae:ad:71:7c:
                    21:f1:51:a1:a6:cb:b0:3b:0d:63:54:30:5e:4d:2d:
                    8c:0c:32:24:9f:f0:fb:08:44:69:26:7c:2d:35:01:
                    7f:4a:af:e9:32:0c:f6:a8:54:fa:84:38:df:de:43:
                    fd:53:43:9a:59:4b:53:9f:b7:58:6b:4e:d7:b5:aa:
                    ec:7e:66:f7:e1:17:3e:72:15:cb:5f:bc:39:6d:ee:
                    1c:a1:ad:e8:e1:11:86:cf:d3:a2:2e:73:b0:68:e5:
                    e4:95:2a:8f:ff:26:5e:4e:ec:27:21:ac:cb:62:30:
                    14:4b:58:d4:bc:ec:fa:ac:44:3a:1d:a5:5f:ee:9e:
                    4b:04:a3:27:7b:63:0d:20:3c:04:92:ce:67:2a:74:
                    7a:dc:29:29:f4:55:d7:d9:ed:19:8d:4d:a0:76:d7:
                    73:f7:a1:bd:e6:2a:e2:bb:38:af:79:39:7f:64:de:
                    3d:3a:d9:3a:d2:ba:bb:19:f7:00:d4:79:ab:42:98:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CF:2B:7D:F9:E1:AD:2B:67:19:EA:93:AD:3E:20:E2:15:64:9D:74
            X509v3 Authority Key Identifier:
                keyid:E3:05:11:65:A0:8E:9E:F9:F0:F3:D4:61:B5:7D:8B:D1:81:84:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3051165A08E9EF9F0F3D461B57D8BD18184FC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:43:84:69:9a:df:4d:de:f8:dd:ab:90:dc:e5:e9:d9:70:6f:
         de:c1:f4:71:a3:a5:0c:de:e3:44:02:fd:08:d6:f8:ce:a0:df:
         1b:ad:5f:29:4b:66:74:23:39:e9:63:2b:88:ad:fd:8d:5f:e2:
         1a:42:58:a8:fb:15:e7:5f:23:9a:ac:e4:c1:b1:8d:04:a7:d1:
         1d:f3:dc:61:34:46:9b:07:79:00:e5:4f:b8:08:31:74:93:96:
         46:b5:a6:9a:7d:48:7b:f8:14:e5:8e:43:a2:83:38:85:58:5c:
         d6:29:73:4e:5f:e7:9a:57:a3:ee:2d:d3:d7:99:27:20:c7:35:
         77:c0:ed:8e:6c:37:50:8e:34:55:62:80:f1:79:d9:66:65:95:
         da:e2:63:fe:3f:5d:ce:a8:37:d5:4f:9a:86:c8:2f:8d:31:67:
         a0:d6:9b:2f:49:de:d5:a7:c2:7d:b8:c7:06:8d:2f:5f:34:bb:
         fc:b0:62:88:41:25:1e:86:4d:92:7b:b6:9e:78:74:e6:92:2a:
         2f:48:8a:82:71:49:f7:ca:12:a6:63:1d:8b:ce:2a:5e:33:58:
         8b:49:96:1e:77:1e:5a:76:e2:e8:6a:b8:94:62:73:67:9b:b7:
         2e:d8:5e:8d:ee:17:6a:cc:d5:d7:38:76:3a:81:78:38:9c:fa:
         86:a9:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org