Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          eYBNfIO5I3Us5Oz5JtshWjKGf+TA8qAwnziG7gZCK9s=
Subject key identifier:   E2:EE:08:B3:71:7B:69:D7:69:7F:C3:2A:81:83:97:34:61:A6:31:8D
Certificate issuer:       /CN=C67929131596EB65AF046524615104BDF0EDC74D
Certificate serial:       08011B5CE193DECA9784341087F1BCDEA5029D0F
Authority key identifier: C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
Signing time:             Wed 13 Sep 2023 20:24:13 +0000
ROA not before:           Wed 13 Sep 2023 20:19:13 +0000
ROA not after:            Wed 11 Sep 2024 20:24:13 +0000
asID:                     263604
IP address blocks:        143.202.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:01:1b:5c:e1:93:de:ca:97:84:34:10:87:f1:bc:de:a5:02:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67929131596EB65AF046524615104BDF0EDC74D
        Validity
            Not Before: Sep 13 20:19:13 2023 GMT
            Not After : Sep 11 20:24:13 2024 GMT
        Subject: CN=E2EE08B3717B69D7697FC32A8183973461A6318D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:15:4e:f7:62:ff:35:03:f3:1d:09:58:7f:
                    92:8f:c7:b6:46:61:0b:84:54:df:85:e5:88:54:2e:
                    5c:b7:f3:49:d3:f7:1a:41:02:71:55:9c:b4:ec:06:
                    8d:59:27:4d:17:9f:8d:70:a0:55:c3:ea:a5:43:17:
                    cf:2c:87:39:9c:83:0c:29:17:81:05:ac:81:8d:a4:
                    a4:1b:7f:1f:eb:32:00:78:29:40:df:62:1b:d3:f0:
                    91:ba:09:68:c5:35:c5:e1:26:4d:70:0c:bc:58:48:
                    e1:18:4d:e3:53:4f:cb:2e:b6:46:37:d7:3d:b5:c6:
                    75:4b:ae:1e:47:80:a2:84:24:88:a8:4e:b4:fc:66:
                    01:18:72:4a:19:30:4d:25:0c:eb:78:78:71:d8:27:
                    9e:09:46:91:a2:30:6b:03:60:c2:1b:12:9d:11:69:
                    b5:03:24:f0:41:ad:5f:11:84:ac:2f:0f:db:d9:e3:
                    ed:c1:49:55:9e:dc:86:ea:23:c9:e6:97:1b:76:a8:
                    a8:5a:85:0e:c9:74:8a:e5:25:53:65:18:93:ea:06:
                    30:5e:85:e4:b7:ea:59:d6:77:7d:69:06:2f:f2:23:
                    e4:e2:2f:03:b0:b3:7f:bd:1c:25:7d:93:58:93:87:
                    fd:64:06:ce:43:08:b5:6b:01:4a:17:71:91:07:cf:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:08:B3:71:7B:69:D7:69:7F:C3:2A:81:83:97:34:61:A6:31:8D
            X509v3 Authority Key Identifier:
                keyid:C6:79:29:13:15:96:EB:65:AF:04:65:24:61:51:04:BD:F0:ED:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/C67929131596EB65AF046524615104BDF0EDC74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C67929131596EB65AF046524615104BDF0EDC74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:c3:68:76:26:30:24:da:cf:b3:be:a3:3b:ca:a7:69:08:
         b8:e8:83:7c:f3:4e:c9:79:a1:c6:80:90:ca:b5:e0:2c:92:00:
         f0:82:12:95:7d:df:b4:60:9f:1f:02:f4:dc:f9:f8:e4:0e:f8:
         cd:f2:32:dd:fa:7a:3b:c7:6b:d0:9b:2f:f3:5f:d3:15:d0:b0:
         2d:ad:06:f6:b3:5b:be:92:a5:48:0b:16:f8:9e:84:f7:9b:5c:
         ea:d9:2c:b0:b9:ac:9a:2a:cf:3a:2e:33:53:36:be:0b:20:20:
         24:2c:6d:47:c8:38:19:83:0c:09:9b:08:7d:7f:56:89:42:17:
         d2:7d:b3:79:78:dc:be:a8:cf:6d:35:11:a3:ee:11:95:8e:22:
         e6:1d:d9:89:2f:d7:b8:de:5a:2b:d7:3b:85:59:c2:e9:c9:70:
         92:45:f3:8c:db:95:1f:9c:53:22:b4:66:24:33:f8:80:80:dc:
         aa:b1:6d:97:46:fe:a8:d0:25:03:3d:89:5b:33:dc:42:be:ce:
         63:5c:07:0f:e5:f2:66:66:5d:43:e5:e6:6a:cd:3a:d0:c0:3c:
         e7:0a:00:a6:db:e8:6d:ff:f8:a8:40:95:cc:54:61:73:ba:a2:
         48:e7:a3:0d:9b:fc:f8:93:68:ba:b3:90:17:f4:fa:d5:12:67:
         77:f5:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org