Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa
File:                     3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa (raw, json)
Hash identifier:          2ZUtuxnzFQtAhezgdvCWayQh2OxghpSUxoNhM+ojD6I=
Subject key identifier:   BD:AD:47:CF:44:3F:6E:F1:8D:75:1F:22:53:9F:5C:6F:9C:77:B0:88
Certificate issuer:       /CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
Certificate serial:       71B79BA68CE7CE6C8B5D9A7D7140B4E06B4A3BBA
Authority key identifier: D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa
Signing time:             Wed 28 Jun 2023 16:38:24 +0000
ROA not before:           Wed 28 Jun 2023 16:33:24 +0000
ROA not after:            Wed 26 Jun 2024 16:38:24 +0000
asID:                     264030
IP address blocks:        143.137.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b7:9b:a6:8c:e7:ce:6c:8b:5d:9a:7d:71:40:b4:e0:6b:4a:3b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
        Validity
            Not Before: Jun 28 16:33:24 2023 GMT
            Not After : Jun 26 16:38:24 2024 GMT
        Subject: CN=BDAD47CF443F6EF18D751F22539F5C6F9C77B088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d8:eb:89:2f:5e:91:a9:98:8f:3e:bb:6a:64:
                    e1:80:98:5e:82:c3:85:42:91:01:44:f7:18:95:ec:
                    07:b9:03:0e:05:5e:17:37:21:13:9d:91:5e:48:ef:
                    44:62:de:b2:5f:f8:65:0d:65:7e:b5:04:f8:f9:a0:
                    11:e1:0e:a8:a4:a3:d0:8e:f4:00:cc:bb:11:e1:3c:
                    0a:9c:8b:c4:f8:a7:09:e0:68:24:38:4c:46:8d:ca:
                    0c:2f:f0:1c:30:7a:70:3e:1a:f3:c8:f6:23:42:fe:
                    79:12:b0:90:b5:74:35:21:29:19:fe:ef:02:1a:08:
                    ef:e3:32:19:43:80:6f:5a:f7:77:ee:3a:21:47:b2:
                    49:01:7d:30:1a:b7:4c:6a:8b:82:2a:0a:9a:4b:a4:
                    e1:29:d6:d1:e7:28:da:64:51:41:a7:12:f9:6a:fc:
                    fc:5f:29:da:3d:ea:bb:5d:1c:f3:aa:b4:84:9b:54:
                    c8:ce:d1:52:07:48:29:38:f6:c9:fd:6f:c7:27:a1:
                    43:32:13:f9:00:d4:74:f5:7e:94:4e:4b:1a:5b:4b:
                    ca:20:68:23:8a:79:c9:6d:a1:93:87:09:ca:9f:ec:
                    7e:d7:33:96:89:77:5f:0a:0c:a4:ca:75:a1:23:28:
                    9b:13:21:41:03:1d:99:72:ae:4f:ad:9c:1b:29:5d:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:47:CF:44:3F:6E:F1:8D:75:1F:22:53:9F:5C:6F:9C:77:B0:88
            X509v3 Authority Key Identifier:
                keyid:D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:91:77:6d:bb:af:03:de:92:11:f9:7e:99:38:68:a8:bb:
         11:75:29:a9:99:b7:b6:12:b4:d9:2d:56:0a:0a:bc:50:c8:3e:
         49:69:ef:e6:00:94:24:7c:22:8a:a7:01:e5:e3:aa:ae:c9:4f:
         15:6c:aa:cd:5b:49:23:e6:eb:3a:2b:ac:2a:81:da:94:2e:c8:
         41:15:c0:84:6c:6c:78:2f:2d:00:6e:f5:28:58:e5:53:7e:c6:
         ca:15:be:06:34:27:be:67:89:bd:f4:5a:2f:c8:9c:85:d5:df:
         80:e5:79:53:09:75:0c:53:3b:04:e3:7a:36:21:9f:61:6c:76:
         5e:ba:c2:d7:25:18:29:c4:b3:fd:3d:70:ba:ae:40:b1:0a:05:
         0b:d6:cc:f2:79:90:97:bd:7f:f2:f6:36:33:be:5e:78:8d:dd:
         44:f5:0d:ea:42:fc:d3:1d:b6:13:6d:b1:ab:ff:3f:65:ae:21:
         e3:ed:ba:09:f3:71:8e:bc:30:e9:3b:d1:58:f9:1d:1d:a7:73:
         5b:7a:9c:86:14:c3:ba:15:d9:d1:3d:fd:17:8e:fe:c3:f0:b3:
         f5:5c:be:ae:ce:9a:76:3a:ca:b6:6d:3c:11:8e:5b:fa:ae:d5:
         ec:f7:3c:39:fe:44:85:2c:10:2d:bf:3f:d8:db:79:d5:b7:a8:
         6b:7c:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org