Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          /Cirm3Aio0BZAFSRIrpWaGS+anHHXh5VSSwA8ldpcfw=
Subject key identifier:   04:C1:F4:50:4B:78:A2:32:92:03:12:BF:9F:A5:2F:06:73:DA:0A:98
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       16C17CA4D211F5327F5536F62A874612FB8D7EE5
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:56 +0000
ROA not before:           Thu 21 Sep 2023 13:31:56 +0000
ROA not after:            Thu 19 Sep 2024 13:36:56 +0000
asID:                     263604
IP address blocks:        143.202.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:7c:a4:d2:11:f5:32:7f:55:36:f6:2a:87:46:12:fb:8d:7e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:56 2023 GMT
            Not After : Sep 19 13:36:56 2024 GMT
        Subject: CN=04C1F4504B78A232920312BF9FA52F0673DA0A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:02:55:bc:03:02:72:41:be:a3:0e:72:4c:
                    be:4b:00:69:18:43:ec:ad:b9:4d:c2:7a:cc:b8:78:
                    8c:19:49:2e:cb:48:d3:a7:81:d0:ab:6d:4b:5f:95:
                    46:08:af:5d:de:d0:1c:c4:84:33:01:1d:9c:1f:38:
                    eb:69:3e:c3:46:3f:ae:b7:48:5f:8d:60:a7:60:d6:
                    de:f7:9d:a1:ed:ca:42:bc:de:c1:fd:a1:c9:73:03:
                    6e:12:2a:99:a6:a3:15:27:7b:cf:fb:98:0c:25:02:
                    d5:c6:eb:e5:c1:43:c2:3e:29:c3:c4:e8:c5:6a:b3:
                    19:c0:ba:a3:17:ca:6e:c5:fe:24:a5:4a:cf:e8:91:
                    1e:b7:1c:19:66:fd:f3:70:f6:2f:5e:69:10:66:5f:
                    9f:c6:18:7b:bf:79:c7:df:fc:d0:87:c5:c0:67:31:
                    5a:ad:93:87:0f:21:c4:7b:64:ca:65:f4:9d:1e:64:
                    24:4b:84:44:34:7b:51:54:e9:b4:8c:5d:8d:4e:60:
                    6d:37:12:a1:77:02:e7:2a:7b:30:00:05:81:26:9e:
                    5b:7d:33:73:fb:1c:87:0a:b2:ea:d8:9b:d1:a4:d4:
                    75:60:7e:09:7d:d5:69:52:15:e8:88:26:d8:69:a2:
                    12:cc:7c:b0:b5:05:a0:a3:ac:01:66:c1:73:5e:61:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:F4:50:4B:78:A2:32:92:03:12:BF:9F:A5:2F:06:73:DA:0A:98
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:ce:b9:cd:93:e9:92:54:fc:18:5c:11:59:64:df:5c:f5:
         4c:b3:60:3d:d3:3a:91:ea:d3:ac:81:f5:6b:1f:5a:d8:77:d6:
         f1:1f:3a:88:0f:a2:f1:3a:72:26:bf:f0:4b:16:cc:ab:2c:07:
         d0:a1:63:51:c5:b7:3c:ed:4e:3e:41:76:8c:b2:c4:31:4b:da:
         7b:b4:68:27:5c:6a:8c:c9:91:23:a3:1d:76:01:b3:13:a2:fb:
         88:f0:c9:ec:f3:8f:fb:45:1d:f6:a2:ea:83:61:47:e0:46:bf:
         ec:2a:08:cc:75:63:e4:79:a4:59:72:dd:2e:96:ab:15:67:78:
         b3:95:e3:26:20:f9:63:fe:73:aa:56:22:a9:91:95:41:c3:cb:
         e4:a9:55:49:fe:f9:30:db:9b:82:c7:03:14:8e:f9:f6:d1:08:
         10:98:74:2e:40:21:8d:c8:92:1f:36:f7:1d:da:38:64:aa:79:
         65:10:68:ea:ac:9e:ae:e5:77:0f:a1:9e:67:c9:fb:56:73:81:
         47:51:22:79:81:ce:5d:4b:6b:fd:58:78:14:12:c1:68:c5:c7:
         5e:9c:bf:d0:09:fd:0e:b8:ec:45:81:c7:ad:8e:26:b2:9b:b4:
         2c:2f:3e:9a:06:8c:eb:2c:ab:0b:5d:8b:15:bd:c6:ce:bc:3e:
         e6:ac:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org