Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa
File:                     3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa (raw, json)
Hash identifier:          jN7Ly+MsS2Xgo+/QVVGgFbeg6cYcZTtYE8iI/nhM27Y=
Subject key identifier:   18:63:3D:DB:0C:08:7C:9B:51:B3:AE:DA:93:81:B6:CE:CA:24:9B:89
Certificate issuer:       /CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
Certificate serial:       0DE50AD19E0509AD7312AEAF65AEF6ACA317087C
Authority key identifier: D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa
Signing time:             Wed 28 Jun 2023 16:38:24 +0000
ROA not before:           Wed 28 Jun 2023 16:33:24 +0000
ROA not after:            Wed 26 Jun 2024 16:38:24 +0000
asID:                     264030
IP address blocks:        143.137.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e5:0a:d1:9e:05:09:ad:73:12:ae:af:65:ae:f6:ac:a3:17:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C358E6928303C5658F72633DD8C3CF3F10E8D5
        Validity
            Not Before: Jun 28 16:33:24 2023 GMT
            Not After : Jun 26 16:38:24 2024 GMT
        Subject: CN=18633DDB0C087C9B51B3AEDA9381B6CECA249B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:64:99:84:40:7a:70:7b:8a:ca:e8:85:fa:
                    d5:f3:4b:61:bf:fd:b9:fa:5f:0f:04:45:1e:41:de:
                    55:ae:d8:bc:9a:ca:50:48:bb:16:89:0a:52:67:71:
                    47:3f:a6:2b:64:1b:23:fe:85:bf:e8:73:85:71:0d:
                    fd:af:c5:94:e2:5e:8c:0a:70:d2:8d:23:0a:04:b6:
                    e9:39:e2:0e:e9:b7:f6:38:ff:10:bd:52:c3:f0:42:
                    53:20:88:fe:15:06:bb:ef:f8:93:1e:ed:7f:a2:22:
                    f2:69:d9:60:55:30:ff:29:f6:e7:59:54:b1:47:48:
                    91:0b:60:68:fd:0d:71:94:a0:a1:28:9c:1e:a3:f8:
                    32:33:ff:cd:e8:1c:a1:e1:81:19:46:f6:8d:7f:ec:
                    2e:c3:ff:28:18:ce:f4:a5:db:ae:ab:02:a4:7c:ce:
                    58:f7:71:70:66:45:2b:8d:27:f3:60:64:97:de:77:
                    1a:b8:31:b5:33:a1:90:ad:eb:cf:29:eb:75:8b:6a:
                    2b:f3:ac:b8:e0:b6:cf:c1:aa:50:d8:08:e4:f6:9c:
                    36:85:87:9a:90:0e:4f:87:73:3a:60:cf:a4:54:e7:
                    6c:92:9f:2d:7b:59:52:42:3e:b6:6e:e2:04:dd:2a:
                    84:8c:0c:b7:8e:ec:cf:d3:af:2c:31:42:45:c6:0a:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:3D:DB:0C:08:7C:9B:51:B3:AE:DA:93:81:B6:CE:CA:24:9B:89
            X509v3 Authority Key Identifier:
                keyid:D9:C3:58:E6:92:83:03:C5:65:8F:72:63:3D:D8:C3:CF:3F:10:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9C358E6928303C5658F72633DD8C3CF3F10E8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34332e302f32342d3234203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:98:05:d7:91:e6:3f:71:6d:d0:74:ff:9e:cf:b9:a6:4a:e7:
         db:9e:dd:78:0f:cf:57:8e:39:fd:62:50:3a:e3:97:73:6f:d5:
         aa:e1:32:82:99:66:0a:ab:30:75:f9:2b:2c:91:57:11:32:b5:
         93:50:68:ea:a2:d5:b3:6d:92:3b:c6:72:55:84:68:f2:b3:47:
         d8:cc:55:b9:ca:89:6d:9e:43:c2:e9:ad:90:ad:8f:23:e3:0d:
         65:a6:7e:32:21:bb:7b:75:3a:17:21:84:87:16:20:b3:ad:4a:
         53:c3:ab:9a:40:b1:48:9f:71:a2:27:16:c4:0f:90:33:3f:9c:
         ea:9e:67:46:0d:c3:5f:39:df:36:1c:f3:b3:91:89:a9:74:16:
         6a:00:04:84:58:d7:34:b8:72:42:04:04:a2:cf:d2:7f:49:6c:
         8d:95:8a:4b:a7:aa:4e:43:03:6f:cf:74:96:62:d9:2f:c3:29:
         71:d0:18:c8:4a:19:44:6a:5a:3d:c7:e4:6b:95:0b:80:5e:05:
         14:71:2e:99:5a:19:32:66:c0:01:4d:db:b4:5d:46:70:fe:f3:
         60:4e:fc:22:4c:d8:4a:ea:38:12:a3:c5:2f:8c:7a:d4:55:71:
         f3:5f:e1:bf:0a:56:73:d7:8e:b7:aa:39:b7:f2:a9:5e:d3:bd:
         f7:c3:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org