Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
File:                     3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa (raw, json)
Hash identifier:          aT0OlJcTCM874PPUJHTBMhjNPvBFP2h7DmLA1ywgQ9I=
Subject key identifier:   60:39:59:AD:66:49:87:D7:48:A6:F3:ED:2E:C2:25:C3:B7:E3:80:55
Certificate issuer:       /CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
Certificate serial:       1D4AC98E781FE376C71290772E1C5CDD40C7EB2F
Authority key identifier: D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
Signing time:             Wed 28 Jun 2023 16:38:24 +0000
ROA not before:           Wed 28 Jun 2023 16:33:24 +0000
ROA not after:            Wed 26 Jun 2024 16:38:24 +0000
asID:                     264030
IP address blocks:        143.137.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4a:c9:8e:78:1f:e3:76:c7:12:90:77:2e:1c:5c:dd:40:c7:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
        Validity
            Not Before: Jun 28 16:33:24 2023 GMT
            Not After : Jun 26 16:38:24 2024 GMT
        Subject: CN=603959AD664987D748A6F3ED2EC225C3B7E38055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:17:06:16:57:3e:af:ea:0a:c0:f3:bd:dd:
                    e0:02:51:ab:35:47:14:7f:19:af:69:67:3a:ec:92:
                    df:29:33:05:01:08:e0:3f:7d:58:ab:e6:f8:b7:a1:
                    3c:35:c7:dc:9e:56:6a:6b:61:ad:d5:74:d4:0f:09:
                    81:c1:ac:d3:53:0f:92:0b:ae:c3:71:64:11:ef:7f:
                    54:22:5a:40:2c:6c:3e:8d:b6:dc:90:83:da:42:c8:
                    97:71:79:a3:66:46:5e:0c:ed:6a:4a:79:d8:23:a3:
                    9f:0d:4f:8d:95:98:c0:c3:b5:f0:58:92:b1:21:a5:
                    54:40:50:a3:94:b1:29:88:6b:68:c9:37:01:3c:08:
                    8f:c4:39:88:12:08:2e:c8:bd:3d:f7:e1:96:42:eb:
                    6a:82:57:d6:cd:2c:56:37:a1:f8:35:e4:70:88:f6:
                    e4:fd:08:b5:c2:92:61:44:7a:87:fc:fc:86:1b:86:
                    8a:63:12:71:ff:dd:44:6c:bb:39:0f:ae:ec:5c:47:
                    e7:24:7f:11:67:85:e3:eb:05:ee:95:b0:77:ae:aa:
                    dd:99:5b:3e:96:1f:8e:f4:69:4a:40:3d:53:d8:a3:
                    d4:f7:8e:50:83:76:13:80:a6:10:46:0d:e5:c3:23:
                    a6:dc:a5:75:cb:47:8a:21:bf:7d:e6:63:4f:3e:83:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:59:AD:66:49:87:D7:48:A6:F3:ED:2E:C2:25:C3:B7:E3:80:55
            X509v3 Authority Key Identifier:
                keyid:D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:c9:9b:5f:bf:a5:d2:04:8b:68:41:1f:9a:2b:28:5f:92:27:
         6e:2b:64:12:91:27:d9:b2:4a:1b:d1:17:5d:7a:20:d9:7b:cf:
         d8:ef:47:85:00:e5:9a:6d:10:ed:6a:ba:05:3e:e1:7c:fc:1d:
         4e:ea:b6:ff:49:10:15:37:ac:f4:1b:96:56:f2:5f:b0:18:05:
         38:93:cf:14:70:90:d6:fa:25:e7:9f:60:92:65:10:ae:21:16:
         13:2f:42:37:e8:ae:f6:29:bf:e1:fa:86:06:09:47:3f:51:c8:
         a1:48:85:13:4d:c6:7f:96:c9:56:ea:c0:69:bf:40:03:79:cd:
         7f:60:74:0f:f2:f0:20:a5:b2:17:9c:74:99:ff:c7:15:84:15:
         e5:29:28:e6:5d:83:00:cf:d2:b3:66:9e:47:78:e4:70:49:89:
         49:a4:c6:00:6e:02:d1:b8:73:a5:a7:00:63:69:17:f8:3a:16:
         61:6f:4a:cd:d4:11:55:1d:73:1a:8f:1a:79:84:31:8f:28:3e:
         e9:7f:f4:28:dc:12:22:ea:8c:35:1e:f9:45:d8:0d:20:27:06:
         d2:e1:3e:07:e4:f4:90:da:30:f5:ba:f5:4c:fc:6e:ed:a9:96:
         21:99:e8:cb:1e:a6:26:5c:48:f2:56:53:0d:d8:41:58:9f:54:
         98:f3:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org