Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa
File:                     3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa (raw, json)
Hash identifier:          88uXsIn5/rPXAgnGJFYQYOyiy7QeHurIDalyGPS2OnA=
Subject key identifier:   75:F6:49:21:34:83:CF:2D:00:BB:3F:0F:5B:10:D8:CB:F8:28:A4:D6
Certificate issuer:       /CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
Certificate serial:       0F20460A306AE021F72C7078E2C41C679747C43F
Authority key identifier: D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa
Signing time:             Wed 28 Jun 2023 16:38:24 +0000
ROA not before:           Wed 28 Jun 2023 16:33:24 +0000
ROA not after:            Wed 26 Jun 2024 16:38:24 +0000
asID:                     264030
IP address blocks:        143.137.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:46:0a:30:6a:e0:21:f7:2c:70:78:e2:c4:1c:67:97:47:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
        Validity
            Not Before: Jun 28 16:33:24 2023 GMT
            Not After : Jun 26 16:38:24 2024 GMT
        Subject: CN=75F649213483CF2D00BB3F0F5B10D8CBF828A4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:92:8d:16:db:8e:ea:71:78:c0:af:68:bc:
                    43:92:3a:4b:1a:0e:99:0c:45:a9:2d:dd:00:01:74:
                    b4:87:1e:a5:10:a0:53:1b:fd:40:01:62:4d:68:fa:
                    ea:6c:86:6c:b1:2c:79:58:74:3b:2e:b8:cf:fc:37:
                    a1:4b:4b:87:ee:75:c6:c3:59:dc:17:3e:51:33:58:
                    5f:ab:10:85:b0:de:1d:da:b9:d4:02:87:5c:58:f1:
                    29:2a:45:36:44:c0:8c:62:8b:05:e0:82:e6:6b:31:
                    95:7e:ea:ae:a8:04:e8:2d:c2:25:bd:e7:14:07:01:
                    0d:72:d3:87:34:72:38:cd:2e:2d:d1:7a:1f:aa:45:
                    07:5f:1b:4e:74:6d:ff:50:b7:51:ed:d8:59:4e:1c:
                    6e:7a:e5:b4:04:a7:3a:08:1b:70:fe:f3:07:cb:3e:
                    f0:d7:c7:0c:e6:f2:91:9a:b5:6e:60:f7:4f:c5:2b:
                    44:1a:2e:13:b4:c6:25:cd:ff:e7:5d:d4:0f:f0:50:
                    c2:2e:8f:ff:9b:40:39:ad:e2:24:20:45:5b:99:06:
                    a7:60:20:f3:b6:38:46:f8:fa:0d:f9:14:7a:71:27:
                    3c:4f:15:3e:b1:0b:b7:89:fc:ed:2e:14:0a:23:f1:
                    99:49:5e:10:c7:a2:b8:c3:fb:66:1f:17:a7:a3:2b:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:49:21:34:83:CF:2D:00:BB:3F:0F:5B:10:D8:CB:F8:28:A4:D6
            X509v3 Authority Key Identifier:
                keyid:D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32332d3233203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:74:9f:3d:f5:12:61:f9:fe:4a:9c:eb:3f:84:e3:59:59:
         da:8d:43:bc:a0:d4:45:b6:e0:db:cf:a9:f4:46:c4:2d:4f:3f:
         a0:e7:9e:a1:ae:7e:11:ea:a3:ac:4e:71:5e:2e:6d:58:d7:78:
         46:f7:3d:11:64:23:81:8b:8f:ea:4e:f7:06:e5:64:8d:03:5c:
         56:01:0e:56:fd:f8:b0:41:03:98:40:c1:9c:bc:92:75:2e:d4:
         cd:40:ba:68:24:de:f1:2d:ca:3c:b8:80:48:ff:4d:01:cd:86:
         1c:c6:c3:e5:98:47:34:87:81:ac:1c:64:93:ec:41:6d:ff:ef:
         28:c2:e9:1f:a2:f0:fc:8c:72:b6:3d:dc:a6:e4:1e:95:39:4f:
         e4:f7:ef:9f:27:33:79:2e:4d:8f:63:25:66:22:96:9b:bc:de:
         e5:8f:c0:a7:4e:06:6c:7c:85:91:82:3a:3d:cb:f9:94:eb:e5:
         68:f9:52:81:56:68:34:f5:1b:10:b4:07:7d:84:9a:c5:01:2f:
         1f:c6:28:01:bd:10:ea:b5:4e:2a:27:2c:62:ba:35:a4:2a:4c:
         f5:fd:22:21:f3:db:cc:c6:ec:93:dd:aa:42:f7:83:7a:0a:15:
         24:94:71:34:3d:94:6c:86:92:36:bf:db:bd:a8:91:51:81:b7:
         7b:18:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org