Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32322d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          IfgIxvg//FkJW5iATJDCdvVge3Vjlp5WUQfiSl6bK1Y=
Subject key identifier:   6C:B8:9E:EA:B8:93:E9:77:6E:75:E9:3C:86:FA:4A:2E:B1:70:5F:38
Certificate issuer:       /CN=24389FBFAD47987825171CB046C103C7BBF77E5E
Certificate serial:       6C87009F1E3BBF91DD3CCD0D019C6524B31CB11C
Authority key identifier: 24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa
Signing time:             Thu 04 Apr 2024 07:59:28 +0000
ROA not before:           Thu 04 Apr 2024 07:54:28 +0000
ROA not after:            Thu 03 Apr 2025 07:59:28 +0000
asID:                     264011
IP address blocks:        143.0.136.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:00:9f:1e:3b:bf:91:dd:3c:cd:0d:01:9c:65:24:b3:1c:b1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24389FBFAD47987825171CB046C103C7BBF77E5E
        Validity
            Not Before: Apr  4 07:54:28 2024 GMT
            Not After : Apr  3 07:59:28 2025 GMT
        Subject: CN=6CB89EEAB893E9776E75E93C86FA4A2EB1705F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:fe:ff:79:17:b5:f7:2c:7d:3d:3e:d4:81:
                    5b:2b:0d:95:cf:b4:64:69:2c:0d:60:42:b1:d3:d9:
                    06:30:86:31:60:e5:44:94:1f:f6:49:5d:66:d3:13:
                    51:ae:77:ac:58:ce:ca:5c:d6:fc:da:6d:ac:b5:44:
                    15:6e:06:8f:09:9f:1c:1e:fe:29:28:18:64:df:cd:
                    8a:78:8b:e8:a4:db:68:b2:43:e0:3d:6a:1d:d4:fb:
                    94:87:22:33:1f:5e:ae:4e:d3:3c:80:93:fe:e0:b2:
                    9b:a1:09:0d:47:4a:bc:14:35:c9:6b:b4:65:07:80:
                    55:b5:39:94:19:16:dc:c6:d6:03:15:47:d6:db:dd:
                    0e:4f:d3:d6:03:5a:ab:8f:4c:74:de:b8:a4:d5:b0:
                    37:b1:d6:b3:8a:d8:67:e5:f5:fb:c7:1a:ac:4e:b8:
                    a7:c0:d7:5e:ba:e1:c1:1b:f7:0d:77:a0:fd:ea:7c:
                    01:a9:76:9e:f4:76:90:ab:45:94:eb:cb:a8:5c:11:
                    37:70:a1:7f:a3:84:81:bc:66:76:2f:ba:81:17:b4:
                    3c:a9:13:84:4f:fb:55:57:15:33:38:b3:b7:6c:37:
                    2d:9a:0b:65:62:a6:00:7e:a8:81:c9:66:29:88:11:
                    ed:cc:79:25:38:99:29:ac:08:b6:fe:59:2d:27:4d:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:9E:EA:B8:93:E9:77:6E:75:E9:3C:86:FA:4A:2E:B1:70:5F:38
            X509v3 Authority Key Identifier:
                keyid:24:38:9F:BF:AD:47:98:78:25:17:1C:B0:46:C1:03:C7:BB:F7:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/24389FBFAD47987825171CB046C103C7BBF77E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24389FBFAD47987825171CB046C103C7BBF77E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/1/3134332e302e3133362e302f32322d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:93:e3:b8:57:f6:f0:21:af:7d:48:3d:31:b6:aa:bf:b8:
         62:36:a4:90:29:0d:82:21:64:c6:b9:77:ad:03:e9:c5:f7:a6:
         21:1f:4f:36:07:e2:45:0f:1e:71:30:ab:fa:e5:c1:ef:1b:b8:
         8f:03:8a:ae:cc:fd:4b:a9:0b:22:c4:ee:1f:50:c6:9a:2e:f7:
         a8:bf:08:c3:ab:51:7b:41:37:a5:95:d6:af:09:7e:3e:27:cc:
         ac:ed:3a:fb:71:73:28:d8:0d:42:cc:75:63:bd:a7:4c:7b:36:
         c9:a1:ef:55:1f:43:d5:25:a8:a1:c1:31:c3:b3:4f:c4:c4:d3:
         79:f3:bf:53:e4:6b:aa:2c:c1:60:67:51:10:e4:f9:98:50:68:
         87:c3:83:b5:1b:56:93:f3:f7:86:71:ad:07:2b:7f:0a:5f:ce:
         45:d9:45:f1:b2:35:aa:05:e3:37:b8:34:27:65:d0:ed:87:e2:
         e7:c1:85:4d:9d:0e:40:f7:61:a3:be:8d:56:7b:9f:ad:15:d5:
         67:3a:64:b2:b7:56:f8:fa:0d:19:5e:6e:00:78:30:0a:f4:c4:
         19:90:fe:5f:07:8b:23:c9:6c:a9:0f:e6:e5:63:d0:b9:8e:22:
         31:fb:49:a8:5c:d7:80:19:f9:b8:bb:51:c1:b3:c5:20:3f:4c:
         d8:fc:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org