Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa
File:                     3134332e302e3232322e302f32332d3233203d3e20323634303232.roa (raw, json)
Hash identifier:          WRH6HVZKDFyD/UJvrOaSC28W5OsNAzdSGWpS6vj5Tco=
Subject key identifier:   86:49:C3:39:2E:28:96:47:E4:F4:2B:6E:D8:0B:30:CB:F8:E3:E7:D4
Certificate issuer:       /CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
Certificate serial:       4B6D39750D990261E36A940AC64C2AB32F8D48CE
Authority key identifier: 3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa
Signing time:             Fri 05 Apr 2024 00:55:43 +0000
ROA not before:           Fri 05 Apr 2024 00:50:43 +0000
ROA not after:            Fri 04 Apr 2025 00:55:43 +0000
asID:                     264022
IP address blocks:        143.0.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6d:39:75:0d:99:02:61:e3:6a:94:0a:c6:4c:2a:b3:2f:8d:48:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249
        Validity
            Not Before: Apr  5 00:50:43 2024 GMT
            Not After : Apr  4 00:55:43 2025 GMT
        Subject: CN=8649C3392E289647E4F42B6ED80B30CBF8E3E7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:10:31:3c:9e:90:ee:36:96:06:03:ad:13:
                    5c:d5:f3:d1:87:86:5c:fb:42:b0:b4:78:8c:a5:81:
                    07:47:25:30:b5:59:dc:54:89:a4:50:db:6e:20:39:
                    2d:a3:a3:70:11:7d:3e:78:2c:f8:7d:c4:0a:07:01:
                    68:bf:39:fe:ed:87:7a:55:64:db:48:50:d1:74:df:
                    ba:1d:fd:24:c9:f0:14:04:c5:09:a2:9c:42:aa:57:
                    c3:d5:5a:5c:3c:af:a1:5e:88:df:2e:fa:97:26:02:
                    c5:6b:4a:a1:1c:13:fe:c4:ad:63:a1:62:e7:7b:6d:
                    6c:ad:98:98:55:7c:3c:45:4b:7c:c4:82:44:83:f5:
                    9a:df:7e:63:99:f3:77:5c:4c:af:f1:02:d2:4d:b2:
                    1a:6f:70:b5:f9:14:ba:7e:3e:a5:94:f4:4d:df:65:
                    3b:7f:f6:99:8d:da:2b:24:8f:43:38:3d:63:81:c0:
                    b4:57:c7:34:ae:1e:3b:78:9b:95:35:01:0b:1c:23:
                    6f:a6:45:ff:70:25:16:32:7a:3c:97:d3:a7:02:2a:
                    99:ac:9d:88:42:3f:f4:33:cd:42:1b:d3:3c:c4:c8:
                    1e:fd:ba:cb:52:f2:a8:5f:7b:89:db:73:51:3b:57:
                    4b:56:73:41:16:e7:87:b9:c8:5a:e7:12:5c:73:43:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:C3:39:2E:28:96:47:E4:F4:2B:6E:D8:0B:30:CB:F8:E3:E7:D4
            X509v3 Authority Key Identifier:
                keyid:3C:CB:67:1F:1E:70:95:DB:5D:4A:14:A0:19:3A:7D:2F:4C:AB:32:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CCB671F1E7095DB5D4A14A0193A7D2F4CAB3249.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/1/3134332e302e3232322e302f32332d3233203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:63:24:33:43:16:00:45:f1:3f:36:e6:4e:23:16:e5:af:a6:
         dc:a5:dc:6d:80:de:fe:7b:3d:27:37:a2:4f:c3:90:6a:aa:f1:
         e1:b2:38:55:35:40:7b:c4:cc:cf:e9:9e:ac:a9:ce:a1:32:e3:
         24:c0:56:9f:f7:59:79:96:12:f0:e1:2f:5e:e0:87:a2:e3:c5:
         04:50:3a:2d:5a:8e:6d:01:0e:bd:1d:7c:0f:7b:20:bf:9f:7d:
         6b:64:2c:d2:3b:d4:73:e6:db:ae:19:48:58:d8:bf:34:de:c3:
         1d:0d:3f:fc:45:fc:c8:ee:b2:fc:14:0a:60:cd:ea:ee:b8:57:
         4f:86:d1:78:1c:79:90:55:0d:02:05:59:84:55:b0:75:ac:7b:
         36:99:58:bc:e5:26:39:74:29:68:67:23:3e:c0:b0:94:5d:cb:
         3c:1e:0a:f1:6a:52:50:bd:e9:29:6f:06:3e:92:1a:a9:ef:81:
         0e:6a:30:6a:b8:16:1c:9a:64:76:eb:cb:5f:94:71:9b:61:ad:
         3e:74:5f:77:c1:76:5c:67:ab:8d:66:c0:51:2d:73:5c:42:58:
         08:70:60:61:46:b9:a2:1f:93:eb:0c:af:c3:42:8c:5f:06:21:
         26:cf:29:b9:13:b4:b8:d7:81:81:1c:74:70:80:31:d2:b8:ae:
         3c:91:78:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org