Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
File:                     3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          jUv1w8J1wjZQeN/sP2Du9t9RzDVrjxxwdEhe864Ko0Y=
Subject key identifier:   64:23:8D:F4:A0:FA:10:F2:4E:4C:FA:F2:9C:44:E5:70:54:7E:62:BC
Certificate issuer:       /CN=2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6
Certificate serial:       5835A93AA16CD0E41C01CB28BB1467449FC4899D
Authority key identifier: 2A:E5:CC:1A:0B:6C:6E:7B:A9:B0:3F:90:BB:CC:F2:88:08:BF:D7:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa
Signing time:             Fri 15 Sep 2023 17:36:30 +0000
ROA not before:           Fri 15 Sep 2023 17:31:30 +0000
ROA not after:            Fri 13 Sep 2024 17:36:30 +0000
asID:                     61834
IP address blocks:        143.137.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:35:a9:3a:a1:6c:d0:e4:1c:01:cb:28:bb:14:67:44:9f:c4:89:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6
        Validity
            Not Before: Sep 15 17:31:30 2023 GMT
            Not After : Sep 13 17:36:30 2024 GMT
        Subject: CN=64238DF4A0FA10F24E4CFAF29C44E570547E62BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:a9:9e:ab:d1:d2:e1:0e:ac:95:76:88:22:
                    da:44:7c:82:61:1c:e2:05:b2:a6:c1:7c:6d:be:6f:
                    c3:dc:1e:38:63:3e:68:cc:05:1f:a9:8c:d1:74:d5:
                    b0:99:7d:c7:0e:53:b1:e7:ad:ab:7a:97:45:ad:2a:
                    3b:ed:f8:6c:67:6d:85:7c:80:b0:c5:ad:6f:0c:f9:
                    9d:77:a9:60:b8:d3:1d:33:ad:28:54:1d:86:54:e0:
                    73:ac:96:ff:e7:5b:44:8f:bf:aa:ca:dd:0b:fa:ec:
                    58:5e:04:ee:df:1a:54:6d:cd:60:87:16:9f:dc:1d:
                    ba:7d:87:5f:5b:8a:c2:33:eb:fd:de:22:82:06:c7:
                    cb:17:e3:aa:d3:0c:0c:a2:50:bf:90:8f:aa:60:ca:
                    e9:18:43:60:e3:d2:fd:ff:44:bf:d8:90:29:ef:94:
                    cb:97:1e:0e:5d:a4:64:e7:4c:87:1e:b0:f1:6f:83:
                    8f:e3:b9:ff:27:6f:9a:da:b2:3f:ab:90:ad:9d:a8:
                    f5:58:8e:b4:ad:fd:1d:a4:f6:f0:1b:00:93:4e:4f:
                    af:cf:60:62:37:3e:c6:08:74:0b:9e:71:e6:62:7f:
                    ea:c8:b5:ae:92:27:e7:77:9b:20:13:63:7f:97:21:
                    f6:89:eb:24:29:4d:2b:fc:6a:09:f8:e1:a7:0b:e6:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:23:8D:F4:A0:FA:10:F2:4E:4C:FA:F2:9C:44:E5:70:54:7E:62:BC
            X509v3 Authority Key Identifier:
                keyid:2A:E5:CC:1A:0B:6C:6E:7B:A9:B0:3F:90:BB:CC:F2:88:08:BF:D7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:e1:a4:c9:b8:67:9b:51:f4:93:ba:33:ad:1b:bf:df:cb:d1:
         08:1e:73:69:32:c9:7f:d0:a2:07:cf:04:15:dc:c6:d0:e5:e9:
         82:b0:ed:12:86:d6:80:0f:f0:cd:fa:7c:27:d1:aa:71:02:0d:
         0f:98:8b:83:b4:88:28:c7:15:9d:3c:fb:8c:2e:31:f7:87:28:
         fd:2a:f3:86:00:ba:20:0e:65:19:8d:10:22:7e:44:64:8f:f7:
         e7:8e:dd:7e:99:0a:cb:ee:e0:7b:67:91:b0:b4:30:7e:07:b2:
         8e:c6:ce:b4:4e:dc:ac:1d:6f:77:f0:b9:3d:a5:3c:e1:44:79:
         64:8f:4c:d7:df:92:27:d3:9f:6e:f8:59:bc:92:70:86:69:b3:
         1e:36:70:ed:86:72:6a:7d:14:12:4b:44:7e:17:24:2b:d8:93:
         e4:be:35:4d:22:af:a8:fa:dc:e1:af:c0:f1:5f:50:c4:5f:c9:
         3a:92:77:d6:98:95:14:6d:10:c3:69:51:e9:3c:fc:3c:93:3c:
         9b:28:91:b5:87:3e:7f:54:e2:34:a3:56:41:28:4c:8c:6e:26:
         9c:67:79:44:c2:a3:7b:62:c5:d2:96:6b:be:58:10:5d:dc:76:
         2b:e5:5e:ce:3a:b1:52:2d:de:55:f5:5d:e6:52:8c:ef:16:00:
         bb:a9:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org