Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
File:                     3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          qVF65MgHOxsXGSJIId+WaK9X3BBH8iT9SBkZ/RvCmlE=
Subject key identifier:   12:18:B6:27:42:80:6C:DF:EB:07:8E:B4:A5:EA:24:DF:07:15:2B:3F
Certificate issuer:       /CN=3527BFBEBA965103D54B88A498C218A6600C1596
Certificate serial:       7642BCB1E087608B157FBE0E05EB7FC738CD004B
Authority key identifier: 35:27:BF:BE:BA:96:51:03:D5:4B:88:A4:98:C2:18:A6:60:0C:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3527BFBEBA965103D54B88A498C218A6600C1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
Signing time:             Thu 15 Jun 2023 11:09:22 +0000
ROA not before:           Thu 15 Jun 2023 11:04:22 +0000
ROA not after:            Thu 13 Jun 2024 11:09:22 +0000
asID:                     264117
IP address blocks:        143.255.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:bc:b1:e0:87:60:8b:15:7f:be:0e:05:eb:7f:c7:38:cd:00:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527BFBEBA965103D54B88A498C218A6600C1596
        Validity
            Not Before: Jun 15 11:04:22 2023 GMT
            Not After : Jun 13 11:09:22 2024 GMT
        Subject: CN=1218B62742806CDFEB078EB4A5EA24DF07152B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:22:42:8d:a9:9d:81:a3:0b:36:e1:1f:08:
                    14:f1:3f:af:d6:ba:f3:3c:bc:ff:38:e3:76:54:fa:
                    13:19:dd:41:2c:bb:b4:4a:af:e1:7f:08:c5:74:30:
                    d3:82:78:8e:2d:1e:15:6b:1a:16:29:d2:8f:fb:00:
                    ac:87:68:2d:83:37:69:3a:46:ef:e9:5d:71:37:66:
                    b0:a8:68:08:c2:c0:1d:7f:56:3b:ff:b2:27:a0:0f:
                    8c:55:03:56:9c:37:75:3b:d3:94:0d:80:f4:2f:cb:
                    a0:66:d2:fc:8d:53:a8:10:00:6c:5c:62:6d:f8:f8:
                    c1:35:8a:16:2b:47:d2:35:58:d0:f6:50:70:e8:85:
                    84:be:b5:e6:55:67:20:d7:b6:be:d0:8f:a5:5b:98:
                    c2:80:a1:24:63:05:ad:c2:a4:05:4e:92:7b:76:21:
                    de:20:8e:78:c2:56:76:aa:d1:9a:52:7a:73:e2:28:
                    55:e7:ce:f4:40:b3:67:6d:6d:20:8d:6a:23:cf:b8:
                    ed:6b:cc:61:55:98:35:3a:41:a3:4d:61:78:7e:6f:
                    96:2b:cc:04:3b:df:fe:bd:2e:a3:ac:8d:a3:5b:b6:
                    fb:4f:c2:6e:a5:5b:85:c2:56:5d:8a:4f:c6:d4:e6:
                    32:d9:45:c6:84:4f:fc:59:32:39:e3:ec:02:59:f0:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:B6:27:42:80:6C:DF:EB:07:8E:B4:A5:EA:24:DF:07:15:2B:3F
            X509v3 Authority Key Identifier:
                keyid:35:27:BF:BE:BA:96:51:03:D5:4B:88:A4:98:C2:18:A6:60:0C:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3527BFBEBA965103D54B88A498C218A6600C1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3527BFBEBA965103D54B88A498C218A6600C1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:3b:41:21:27:e1:fb:84:c1:68:fc:58:39:e5:b5:60:13:
         e5:d1:ac:79:2c:92:62:5f:41:ec:d2:a6:93:b2:76:4a:8e:9b:
         d5:f7:6f:5b:d3:55:06:0e:80:56:99:58:38:bf:7e:c8:d5:9b:
         3b:01:7d:9b:62:26:4b:dd:57:4b:95:3d:8c:b5:f4:10:69:4b:
         36:cd:c3:8b:ae:f8:09:a0:be:51:c0:23:af:8c:37:3a:17:a1:
         68:8d:0c:82:b4:ff:e6:88:ce:f5:ae:4c:87:80:2e:03:36:d7:
         a6:b4:f5:33:b0:20:68:be:5e:d1:e0:47:3a:5d:df:8f:7f:df:
         5a:c9:41:c7:52:77:85:8a:c3:e4:9d:c7:2b:1b:6d:09:1f:c0:
         25:77:89:2f:86:9c:3d:89:4c:bb:08:45:7b:70:ed:a3:de:10:
         68:ff:06:eb:ce:4d:60:69:0d:9f:d7:25:4e:21:5b:e8:b6:f1:
         2e:ac:b2:e0:5d:fe:d9:e6:62:48:38:f8:f1:87:41:c6:d9:23:
         87:83:1a:85:c5:8e:2b:24:9c:d2:36:9e:06:dd:b8:51:08:de:
         e6:cd:1e:e6:f0:11:fd:6b:20:fc:ea:ac:f9:11:64:14:57:09:
         71:d2:53:02:95:c9:9d:dc:13:45:fe:23:00:15:b2:b7:d0:f4:
         21:9e:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org