Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          gqN1GAtAgFqCVqKDcpOmY/BuFvUTXhk39kQog/+tHXA=
Subject key identifier:   DE:A6:3C:DA:C7:6B:5E:AB:82:57:1A:E0:AB:26:5E:4C:49:E5:8A:C5
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       411870E30659A42D2A7163262AE76D0DE6736348
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        143.202.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:70:e3:06:59:a4:2d:2a:71:63:26:2a:e7:6d:0d:e6:73:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=DEA63CDAC76B5EAB82571AE0AB265E4C49E58AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:f8:02:38:ca:a3:54:89:e6:37:5b:e1:dc:
                    4c:12:60:4f:de:4d:d9:4a:65:c1:bf:fb:08:77:12:
                    c3:31:1d:f4:19:47:cd:9e:ac:3e:86:7e:b1:41:d6:
                    0f:09:4f:58:79:42:ab:69:db:2a:db:19:5d:2b:cf:
                    bc:bf:ea:fa:c9:87:98:10:ef:7d:15:f5:86:09:7e:
                    d8:c4:25:6d:5a:d8:75:95:3d:d9:cc:3b:2e:d2:32:
                    9d:a1:67:db:c0:1b:fc:c7:d7:69:52:9c:61:02:a7:
                    1a:c2:5c:ac:a4:a6:49:32:32:e9:54:8e:88:c5:d6:
                    e8:c5:ff:d2:87:1d:4a:c5:5e:0c:af:77:43:30:25:
                    62:6b:eb:f2:2e:fb:d8:ab:e3:34:f0:35:6c:44:2f:
                    58:19:61:36:c0:52:ef:92:7b:08:5f:a1:90:f6:e1:
                    ee:a9:6e:ae:5a:af:f6:cd:72:0f:d5:75:f8:2d:4f:
                    20:6b:10:43:44:87:ad:99:80:f1:ac:ac:35:e7:90:
                    0d:1b:85:9b:9b:09:0e:8a:8b:98:99:6e:d1:23:32:
                    07:67:c6:7e:41:16:8b:5c:74:7a:50:20:27:7a:aa:
                    05:40:03:16:38:09:c7:bb:82:99:93:35:61:26:6c:
                    53:a7:1d:c7:d5:62:a8:49:90:1d:f2:4b:cf:5c:da:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:3C:DA:C7:6B:5E:AB:82:57:1A:E0:AB:26:5E:4C:49:E5:8A:C5
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:f8:29:27:b8:db:4f:e5:b4:6d:74:1e:b7:59:b3:7a:73:a2:
         7e:75:29:e4:ab:cb:22:96:46:a0:11:3c:28:39:95:f9:0a:c7:
         0b:88:83:84:74:6a:e0:0e:e5:4c:73:36:9e:ff:c8:48:bb:e6:
         cb:f4:3c:36:81:6e:99:28:8b:f6:b5:b8:88:a8:d3:c6:95:bf:
         eb:9b:5b:87:a3:94:d2:4e:e5:cd:c3:53:c6:32:89:fb:42:fa:
         3d:3d:5e:c1:47:42:72:8c:6f:de:87:ae:c3:22:bf:8c:fd:ad:
         52:ef:79:fe:9e:d0:6c:2e:e1:7c:4c:b3:a0:96:b6:65:f0:ea:
         e0:cd:a7:e0:bc:5f:1d:ae:ec:61:98:47:61:f8:48:97:9a:bc:
         cd:2f:9a:d9:c3:eb:64:72:73:44:0b:e3:75:b8:ed:8a:65:2c:
         29:a1:46:f3:52:48:e4:f2:29:4e:27:90:e3:97:bd:0e:ec:0c:
         17:fb:65:38:ef:62:dc:24:60:c7:df:48:40:bb:e6:f4:b8:16:
         b0:3b:d1:a4:f8:a3:8a:fd:a5:a1:14:21:f3:b7:fd:d4:05:b7:
         8d:14:31:f4:71:5b:7d:bd:e5:2d:f4:b2:84:0e:2a:5d:c9:fc:
         2f:dc:7e:ef:52:02:92:aa:e5:7a:68:76:ec:eb:8e:8a:09:49:
         00:e3:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org