Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
File:                     3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          79+HFSq/9WJLubundusBAZPt0eVI9A76aoAtNixJOXY=
Subject key identifier:   FF:F8:30:40:92:1B:19:6C:8A:06:B9:11:5E:85:E5:EE:6F:B0:F3:2A
Certificate issuer:       /CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
Certificate serial:       1E62C317C8A9822CC36B30304D2358F88E84D142
Authority key identifier: 58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
Signing time:             Fri 01 Mar 2024 11:00:09 +0000
ROA not before:           Fri 01 Mar 2024 10:55:09 +0000
ROA not after:            Fri 28 Feb 2025 11:00:09 +0000
asID:                     264117
IP address blocks:        143.255.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:62:c3:17:c8:a9:82:2c:c3:6b:30:30:4d:23:58:f8:8e:84:d1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
        Validity
            Not Before: Mar  1 10:55:09 2024 GMT
            Not After : Feb 28 11:00:09 2025 GMT
        Subject: CN=FFF83040921B196C8A06B9115E85E5EE6FB0F32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:a5:ce:3e:92:4d:99:c4:0c:98:7f:a2:1e:
                    5f:d6:b9:08:72:0b:8d:3e:57:95:90:4c:19:dc:d3:
                    1e:e6:d1:a0:2d:1b:45:f7:af:19:31:72:b0:5e:39:
                    32:50:7e:f5:bd:09:fe:ae:9a:4f:51:6a:41:ce:93:
                    cf:50:df:6d:93:d8:af:1c:90:58:d4:d9:4f:f3:53:
                    af:b4:4f:db:e9:6a:a5:71:97:15:a2:30:2a:4e:15:
                    6d:44:c5:87:02:f7:2d:39:96:d6:2b:13:6c:1b:c9:
                    61:da:8f:bf:43:18:c3:36:97:cc:3e:3c:71:a3:ab:
                    f1:30:40:dc:34:c8:f0:90:89:26:bf:17:ef:b3:73:
                    67:d6:96:be:90:24:28:c2:51:ea:01:e3:4a:9b:6e:
                    ad:df:c2:b4:4d:a0:8a:11:ec:af:98:39:74:47:8e:
                    79:4c:1f:45:e2:bf:f9:6e:69:bf:36:de:1e:04:84:
                    c5:6d:0a:d1:c5:23:ad:ae:86:a0:05:88:b7:5f:4e:
                    76:dd:a8:ab:a4:95:7e:c1:89:64:d0:5d:5a:e0:48:
                    0e:05:d7:78:94:8f:37:61:36:ea:90:5c:a8:6a:97:
                    77:51:72:7b:6a:e1:54:87:9d:2a:18:b8:d4:6f:d5:
                    f1:2d:a6:25:65:4e:ee:8a:b0:27:15:ef:50:3f:5b:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:30:40:92:1B:19:6C:8A:06:B9:11:5E:85:E5:EE:6F:B0:F3:2A
            X509v3 Authority Key Identifier:
                keyid:58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c5:55:29:3f:a1:32:4a:b7:bf:f7:fc:81:e6:c5:c2:ba:bf:
         85:34:ee:01:48:47:b6:41:8a:54:2d:92:71:6b:40:22:82:b9:
         b5:c7:82:ba:75:db:20:a3:f4:1c:35:30:3e:e0:37:df:d5:83:
         c6:05:b8:dd:b4:8c:46:fa:25:b3:1e:7a:fb:f4:b1:b4:8d:f9:
         fb:ea:40:e6:d3:33:c4:14:a8:fe:3b:49:83:9b:da:60:c9:fd:
         5f:95:d0:59:41:72:8e:93:e0:dd:31:54:86:88:40:4c:5a:88:
         7e:e4:c1:06:cb:5e:fa:74:90:b3:c0:cf:b1:44:f6:2b:23:a8:
         9f:f9:92:ae:a3:d4:21:13:3f:bd:6e:24:77:a7:63:35:28:12:
         9a:72:c8:c9:a2:59:84:b8:96:6b:0e:5b:e9:66:62:4a:69:9b:
         e3:04:be:84:05:66:cb:79:f0:47:a1:bd:41:90:f5:b8:56:fb:
         e9:2c:d1:57:85:94:79:ba:d8:2e:f1:9a:e1:4d:1e:78:cf:9c:
         13:fc:5b:1e:0c:0b:35:73:f0:22:bc:db:87:d0:85:5d:07:91:
         6b:4c:35:e2:0d:be:6f:4a:47:a4:65:2a:c5:0b:89:16:6c:2b:
         85:59:be:24:85:ce:91:d0:56:90:ab:ff:f2:1a:42:0e:69:51:
         ba:d7:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org