Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          BlX3aLYyEKNggRBdAx8UiYzxsJgyUeDOyyE8uSUtJKU=
Subject key identifier:   96:44:89:B4:8D:47:6A:D9:6E:F1:51:09:0C:98:05:81:99:BA:3B:3A
Certificate issuer:       /CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
Certificate serial:       067D2FFCE0027C5639B9D76C35EB583D48D5D654
Authority key identifier: 49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
Signing time:             Tue 19 Dec 2023 17:10:16 +0000
ROA not before:           Tue 19 Dec 2023 17:05:16 +0000
ROA not after:            Tue 17 Dec 2024 17:10:16 +0000
asID:                     263604
IP address blocks:        143.202.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:2f:fc:e0:02:7c:56:39:b9:d7:6c:35:eb:58:3d:48:d5:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Validity
            Not Before: Dec 19 17:05:16 2023 GMT
            Not After : Dec 17 17:10:16 2024 GMT
        Subject: CN=964489B48D476AD96EF151090C98058199BA3B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:3c:a4:86:21:79:67:87:57:de:09:7d:40:
                    f6:99:4f:51:8a:26:16:7b:eb:20:90:03:8c:8c:cc:
                    89:cf:d4:d2:a1:f3:c0:b4:ec:4a:23:77:76:5e:41:
                    2b:b3:84:d9:6d:e2:fa:93:99:d0:ab:16:84:de:d3:
                    55:37:3d:5d:87:9d:48:b1:cb:1f:62:5c:5a:5f:a9:
                    d3:35:8a:a5:a8:c3:c3:53:6b:f3:4a:b3:1e:b1:17:
                    10:af:e3:27:c4:5c:60:06:e7:e0:26:1e:45:40:c6:
                    f0:c1:7d:f6:fd:88:67:65:5f:a9:43:4d:96:8e:96:
                    78:1c:65:9a:65:08:a2:79:b6:d4:76:2b:02:18:04:
                    31:0b:36:3f:cd:2e:f5:68:05:11:56:69:25:c0:35:
                    61:23:c1:46:d5:cf:75:bd:9b:b8:80:20:05:06:fd:
                    6a:d7:a1:88:47:55:81:08:5e:77:79:3a:d4:15:7c:
                    ea:8b:2f:1f:37:77:f3:c4:63:ee:3b:e0:19:8c:57:
                    a6:69:c3:f1:62:e4:95:5d:df:6e:27:6f:d1:43:13:
                    ce:b0:00:4e:00:2d:c0:64:00:94:b5:81:68:6b:6b:
                    8d:4b:06:d0:97:47:65:64:ec:17:79:36:f5:b7:d6:
                    30:78:8b:87:1d:d4:74:59:0d:94:88:41:1b:cb:9e:
                    16:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:89:B4:8D:47:6A:D9:6E:F1:51:09:0C:98:05:81:99:BA:3B:3A
            X509v3 Authority Key Identifier:
                keyid:49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:94:12:7f:f1:a2:32:9b:43:4d:fd:ff:0e:69:cd:8d:f4:91:
         15:99:3e:07:bf:d9:79:7d:3b:b1:47:6e:bb:80:af:11:3c:43:
         fc:69:8d:da:65:88:47:73:7a:fe:4e:08:2c:49:1e:6e:cf:e3:
         02:d4:f1:ee:e0:aa:c2:54:d1:c3:c8:40:66:72:aa:f3:f9:b3:
         40:c7:98:ce:c6:7a:b2:c3:ee:95:2f:c2:f5:18:da:2b:ae:e0:
         aa:cc:c1:6d:a5:2b:2f:9d:77:cd:62:3a:6f:d8:06:e6:7a:f7:
         1b:6a:ba:a1:23:cb:19:35:5e:f4:9f:0a:6b:1c:de:9a:46:89:
         3a:9c:54:3e:c1:b8:b8:94:77:65:88:bf:28:3a:bc:4d:a2:f6:
         94:8c:f7:db:c8:9f:37:09:8a:fc:e9:8c:a2:5f:14:ac:81:f4:
         56:dc:ff:0e:2e:e1:3e:fa:d1:05:04:ad:96:85:7d:c1:c1:8d:
         f9:00:42:04:52:ba:fa:ca:9c:55:b4:5e:ce:ed:33:db:b3:cb:
         96:af:9e:a7:cf:7a:9c:c3:46:98:1c:fa:1f:ad:52:f6:cf:d1:
         0a:9b:3e:d7:d2:98:2f:01:f6:1e:44:e1:a4:65:6a:9f:f3:a9:
         db:92:6f:53:83:fd:70:5b:a0:75:0f:22:b1:09:3d:8f:6c:4c:
         48:a8:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org