Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32322d3232203d3e20323634303232.roa
File:                     3134332e302e3232302e302f32322d3232203d3e20323634303232.roa (raw, json)
Hash identifier:          75YjXUSZ6ctJX+gKA14oy/WLnuxz1dug2e3PZWuAPO8=
Subject key identifier:   4A:88:13:CB:45:C1:AF:D4:BB:C0:3B:18:EB:0F:11:35:30:6F:23:DE
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       14AD05F8078D7580DE01C200C611C306FB23CAE2
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32322d3232203d3e20323634303232.roa
Signing time:             Thu 18 Apr 2024 19:17:46 +0000
ROA not before:           Thu 18 Apr 2024 19:12:46 +0000
ROA not after:            Thu 17 Apr 2025 19:17:46 +0000
asID:                     264022
IP address blocks:        143.0.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ad:05:f8:07:8d:75:80:de:01:c2:00:c6:11:c3:06:fb:23:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr 18 19:12:46 2024 GMT
            Not After : Apr 17 19:17:46 2025 GMT
        Subject: CN=4A8813CB45C1AFD4BBC03B18EB0F1135306F23DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:03:10:45:0f:f2:ce:0a:99:ee:99:56:e9:
                    86:bf:c0:1b:33:73:83:a5:d2:92:67:f8:0c:4d:34:
                    ab:6c:ac:ce:27:62:59:ce:2c:cd:3c:c8:a4:2f:52:
                    33:49:d2:e3:cf:85:e1:3c:d1:cd:c7:fe:20:16:eb:
                    92:43:67:76:1f:0f:23:c9:17:02:14:4f:ae:b5:67:
                    b9:2d:10:a3:8f:18:d9:cf:ae:1f:aa:06:76:fc:01:
                    cc:cb:f3:a1:33:f9:58:bf:df:fa:3d:a9:62:b5:30:
                    c3:79:96:2d:64:18:48:6f:a4:16:91:56:f6:33:52:
                    f2:e0:bc:27:67:58:d7:3c:cb:2c:18:3b:22:2c:cd:
                    6d:6f:5c:a5:7d:a2:b6:93:b4:d7:cb:10:66:e8:9c:
                    62:65:f6:9d:ce:76:52:21:0c:c8:d7:25:d6:ef:6c:
                    d8:84:cd:b5:cf:ef:bd:24:5e:a7:0a:a3:50:66:5f:
                    0f:8d:e9:c1:00:64:85:15:0d:ad:85:06:ab:be:36:
                    d6:89:a1:63:e7:69:3d:e5:df:1f:23:f8:24:9d:f1:
                    b9:2c:74:13:2e:9d:23:53:5d:12:4b:95:8e:7d:b6:
                    1a:25:24:4d:de:40:f1:fe:7e:ec:21:d9:35:b4:7c:
                    0a:7e:5d:17:0e:06:2e:3e:54:61:6a:fe:50:5b:e3:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:13:CB:45:C1:AF:D4:BB:C0:3B:18:EB:0F:11:35:30:6F:23:DE
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232302e302f32322d3232203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:70:30:3f:4c:0a:20:a8:a4:ff:36:a6:46:b8:9c:48:ab:58:
         46:0c:01:92:cf:c0:4f:6e:88:b0:96:4d:35:0e:0d:e5:a2:e8:
         85:91:01:b8:8d:3f:38:dc:f2:cd:16:9d:d0:e9:5d:ca:54:f2:
         85:5e:71:e7:85:80:9b:ea:21:81:a7:0e:30:04:7d:09:a7:3d:
         b1:cc:f0:49:82:74:6b:3b:92:6c:07:ab:64:2e:6b:71:3f:a0:
         02:4e:d9:5d:f3:35:48:9a:5c:36:54:5e:a2:e7:e6:75:19:0a:
         77:61:9d:14:5e:12:a3:48:c6:2b:99:b9:51:a1:20:0e:f1:ec:
         e1:df:9b:af:28:5f:74:41:2e:ef:b7:44:f8:c9:d1:db:c7:6b:
         26:89:34:14:a0:96:91:aa:af:82:6e:39:18:5b:5a:8c:f6:65:
         41:0c:dd:dd:b7:c2:39:8b:ed:67:b6:20:58:f2:5e:52:75:c5:
         ce:2c:3e:84:71:da:f9:cd:08:2e:b4:71:36:c8:99:a6:55:c5:
         2e:94:55:9b:23:d8:e8:8b:54:40:64:e8:10:ee:b5:77:1c:49:
         73:b0:a2:34:fe:3d:c3:7c:bb:26:a0:13:48:ba:e0:28:32:12:
         3e:67:f2:9e:6a:ac:5d:7d:8e:09:aa:c5:74:bf:d9:e2:db:f5:
         3d:3e:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org