Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa
File:                     3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa (raw, json)
Hash identifier:          MYsAM5a7oDX6v9py2PhnO+hdzGtivzYT+weKIoVEqTg=
Subject key identifier:   ED:ED:E3:5A:ED:A1:48:E1:13:07:17:36:7C:3D:51:FF:A2:09:2E:0E
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       7DB012F9764B36A78777415CF6FEEFAD1BDF83DC
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa
Signing time:             Wed 31 Jan 2024 14:31:14 +0000
ROA not before:           Wed 31 Jan 2024 14:26:14 +0000
ROA not after:            Wed 29 Jan 2025 14:31:14 +0000
asID:                     271724
IP address blocks:        143.255.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b0:12:f9:76:4b:36:a7:87:77:41:5c:f6:fe:ef:ad:1b:df:83:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:14 2024 GMT
            Not After : Jan 29 14:31:14 2025 GMT
        Subject: CN=EDEDE35AEDA148E1130717367C3D51FFA2092E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:fc:38:f4:9b:c4:0b:1b:c1:da:e4:2f:31:
                    3c:35:a6:fb:ab:af:7b:24:cc:1d:41:1e:2f:b0:e8:
                    e9:14:b5:a1:d1:1c:fa:ad:da:3e:82:6e:94:3f:2b:
                    1d:4d:0a:e5:31:3e:05:c8:bd:8a:09:c2:98:cd:e1:
                    c7:77:7c:a4:7f:c1:ee:1d:9c:51:60:7c:01:c9:08:
                    79:38:c8:cd:2f:aa:e0:37:36:d1:ec:1d:a0:bc:63:
                    d3:3a:67:0a:55:d8:fe:a3:9c:72:c6:86:0d:70:91:
                    c0:7f:38:43:50:99:5b:b9:47:c0:ce:02:52:53:2e:
                    f0:98:3b:0e:9a:23:0a:ab:f0:3f:20:f7:8b:a6:43:
                    02:2f:3c:64:61:63:fe:ff:18:36:36:9a:13:29:30:
                    f8:ee:ba:66:4e:0b:d3:1e:42:42:c5:b3:39:5e:b3:
                    c3:5d:1e:87:ce:b9:98:5d:33:69:5b:7c:0f:58:8e:
                    a6:5b:af:36:d1:d8:b8:ba:04:24:02:4e:4a:a2:6e:
                    cb:55:7f:44:ac:ed:c8:fc:72:e0:e1:b3:df:14:1b:
                    72:38:45:bb:67:13:e3:5c:4d:27:15:79:23:3b:48:
                    f8:69:0b:2b:6b:43:d9:2f:fe:8f:45:bc:9f:63:3d:
                    50:24:f1:9a:bf:fa:29:5d:cd:ce:08:2c:74:d5:43:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:ED:E3:5A:ED:A1:48:E1:13:07:17:36:7C:3D:51:FF:A2:09:2E:0E
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3134332e3235352e3131322e302f32322d3234203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:ed:74:a3:2d:ae:d0:bd:d1:f8:82:a5:31:52:cd:2d:69:
         a7:a4:d2:95:2c:ef:d0:6a:44:ed:a9:3f:f1:83:e2:6b:5e:29:
         c3:00:37:2b:10:e3:25:91:f4:3b:bb:5d:e4:97:8a:24:e5:6f:
         d4:c4:25:c0:e4:95:b5:d8:66:29:a3:5c:29:68:1a:c7:28:4a:
         15:70:0b:b1:09:6a:54:c9:be:d6:85:c0:97:e5:0c:2b:6a:c7:
         a5:91:20:74:eb:d8:86:7c:1e:0f:1e:35:47:45:9f:b8:5a:ed:
         04:3f:8f:38:eb:d8:e3:68:55:eb:6f:61:8c:1a:5a:8e:85:e4:
         30:a6:43:95:1e:06:44:be:3e:9f:44:f0:4e:37:09:31:db:9f:
         9d:2a:81:8e:a7:15:b3:19:ac:e6:c2:46:a4:84:d7:7c:7f:ed:
         ad:04:79:28:cc:71:14:e8:1c:c3:4b:91:d2:aa:51:79:db:2f:
         2a:3a:ed:04:a7:54:35:28:80:a0:73:d8:b1:20:c2:a4:46:19:
         75:bb:c3:37:db:ba:86:3c:4f:7d:1e:2e:d8:28:8f:bd:ab:77:
         ac:ab:af:c2:9c:87:ed:5b:f7:c2:ec:c3:50:ec:a9:95:3c:5a:
         5c:ff:f6:52:18:00:e6:24:84:66:c5:e1:64:39:76:1a:1d:15:
         19:01:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org