Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa
File:                     3134332e3235352e37362e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          i8jBq1+heS89puLIMi5eZhLjf0fP10X5ed6jIERBlrw=
Subject key identifier:   F1:F0:3C:AF:78:31:3B:C2:FD:0E:04:12:8F:CD:70:24:F2:91:BF:6D
Certificate issuer:       /CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
Certificate serial:       5322709BFBB1B178692E8A78BBBB9D864F29268C
Authority key identifier: 3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa
Signing time:             Tue 13 Sep 2022 20:14:35 +0000
ROA not before:           Tue 13 Sep 2022 20:09:35 +0000
ROA not after:            Tue 12 Sep 2023 20:14:35 +0000
asID:                     61588
IP address blocks:        143.255.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:22:70:9b:fb:b1:b1:78:69:2e:8a:78:bb:bb:9d:86:4f:29:26:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BBEAF7C89270546CC0F41447D11417F1D00B099
        Validity
            Not Before: Sep 13 20:09:35 2022 GMT
            Not After : Sep 12 20:14:35 2023 GMT
        Subject: CN=F1F03CAF78313BC2FD0E04128FCD7024F291BF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:65:d9:15:87:87:92:9b:5a:98:b5:31:e7:
                    a5:a6:70:ca:15:36:fd:6a:9b:a4:c3:56:1c:76:ca:
                    a1:22:3c:6d:e8:92:66:68:3f:84:ca:60:69:8e:fe:
                    df:0c:e0:78:4c:6d:95:df:d6:b4:cb:7c:fe:5e:d2:
                    e9:7b:ca:a5:33:ef:58:45:aa:ad:77:3d:0f:5c:13:
                    0c:31:5f:ad:d8:5d:16:07:76:01:b2:15:2e:cd:30:
                    b2:8f:50:30:0b:aa:7d:9c:b6:2e:71:d8:3e:61:a6:
                    ce:7b:9f:2c:ef:a1:0d:0e:5a:db:d2:af:03:91:b4:
                    23:75:26:ca:be:c6:2e:15:2a:16:fe:e2:98:5c:58:
                    d4:83:88:31:37:1f:3b:96:01:dd:0b:39:a2:9d:15:
                    f0:01:9a:46:af:a7:af:02:3e:03:3e:f5:05:de:2a:
                    a0:72:ad:bc:ce:cc:bb:f6:23:90:e0:ec:74:64:1d:
                    18:f9:46:ab:9f:fe:13:65:9a:8a:8a:0d:34:3a:77:
                    a9:83:8a:86:39:f3:0b:45:9f:ca:a1:96:ff:f7:8d:
                    90:c5:8c:09:06:84:25:de:7f:03:08:b2:2c:04:ec:
                    52:4c:96:87:9c:96:94:a9:fb:28:49:3d:8e:52:84:
                    86:60:d8:cf:73:25:f1:21:6a:b5:5d:61:45:3f:97:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F0:3C:AF:78:31:3B:C2:FD:0E:04:12:8F:CD:70:24:F2:91:BF:6D
            X509v3 Authority Key Identifier:
                keyid:3B:BE:AF:7C:89:27:05:46:CC:0F:41:44:7D:11:41:7F:1D:00:B0:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BBEAF7C89270546CC0F41447D11417F1D00B099.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pYUfja9aM5WXaFJLvB96469zenRzBcdQmfzxcMJErW9/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:a9:ed:b9:f8:6d:4a:00:e8:83:2d:5f:35:93:eb:d3:ab:6a:
         9b:4d:11:13:03:45:31:46:86:f7:d3:7b:2e:ef:11:99:b2:80:
         5d:a2:29:9c:f4:23:6d:06:40:e9:b5:7f:cc:be:83:54:24:fe:
         d2:88:57:a2:ce:f2:4c:ca:25:85:d6:ed:77:0e:e0:04:d3:c2:
         35:2d:70:5a:7a:18:f5:83:13:25:6f:30:ea:80:b7:28:2e:af:
         6f:1c:c0:54:31:84:cb:9f:33:f4:59:86:e2:6e:e9:38:93:bb:
         bc:d2:b8:c1:bc:b4:e6:f2:95:65:0b:44:83:cf:19:76:ba:35:
         ec:cd:5c:5e:7f:05:2f:25:5c:51:2e:4c:f5:e3:1e:17:31:a7:
         b4:21:7a:5a:dc:d2:90:9f:aa:bd:99:60:e3:7c:75:b8:9d:10:
         d3:a3:52:6a:6b:37:29:50:3b:d9:1f:a4:8a:b6:dc:d7:7a:9c:
         87:88:08:82:49:81:f5:30:d9:5c:1a:5a:c2:5f:5d:08:3a:62:
         8e:e3:38:b3:fa:b8:cc:58:6c:f9:32:db:bf:52:e2:c3:24:99:
         cf:30:5f:9d:74:8d:e2:6c:0f:7d:78:61:ea:3e:c0:07:9e:af:
         f5:57:0d:15:95:16:52:78:87:5e:51:6a:0c:57:7c:f8:c9:f6:
         af:f0:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org