Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3134332e302e3233322e302f32322d3234203d3e203238353830.roa
File:                     3134332e302e3233322e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          i6AUhCB9ecpRl/wlf2BT5ydqW3qWr9mSxiMcrzlpTIw=
Subject key identifier:   5F:12:EE:CC:74:6B:34:C4:EB:E9:FF:65:C6:24:BF:BF:3E:E7:D3:56
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       59F9F852130B7AE46556E82E97EA054A2F943584
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3134332e302e3233322e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:03 +0000
ROA not before:           Thu 19 Oct 2023 19:10:03 +0000
ROA not after:            Thu 17 Oct 2024 19:15:03 +0000
asID:                     28580
IP address blocks:        143.0.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:f8:52:13:0b:7a:e4:65:56:e8:2e:97:ea:05:4a:2f:94:35:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:03 2023 GMT
            Not After : Oct 17 19:15:03 2024 GMT
        Subject: CN=5F12EECC746B34C4EBE9FF65C624BFBF3EE7D356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:00:34:40:17:62:78:23:37:11:94:70:64:
                    f0:a6:5f:1b:d4:a5:fb:35:18:4f:c3:37:41:db:64:
                    f8:0c:2e:c6:5b:63:1d:f0:27:1f:65:dc:ab:a5:36:
                    5e:b1:1f:a5:98:44:44:39:e3:fc:d5:68:5f:94:a4:
                    c5:cf:56:93:f5:0b:59:ba:c5:ae:e4:1f:ec:93:1e:
                    65:f7:9d:7c:84:ed:de:91:64:bb:16:0b:95:c4:de:
                    2f:09:89:3b:50:6c:86:f6:e6:8d:14:1d:77:33:4c:
                    34:15:cd:ef:0f:65:27:5a:e9:71:42:2a:d2:66:30:
                    96:e4:a3:b9:fc:ec:db:05:5c:51:21:18:62:63:88:
                    f5:a2:46:9b:09:df:1a:60:47:8c:32:8b:94:17:9f:
                    87:4b:96:7c:97:0d:1f:a9:49:64:5e:af:a5:75:71:
                    99:42:54:05:51:70:d3:6c:fb:d1:1c:1f:a0:24:4b:
                    94:55:2f:73:19:36:99:b0:cd:e5:d0:ff:2e:a1:89:
                    44:3c:aa:53:aa:8f:ad:fb:ec:05:de:90:c6:5f:d5:
                    29:fe:ee:07:cd:cf:b2:d0:5c:75:4d:79:1a:91:ea:
                    dc:c8:f1:f9:63:2f:42:b4:0a:f8:6d:8d:2f:76:09:
                    be:94:73:b7:a7:b2:b2:79:87:b2:e5:77:06:8e:74:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:12:EE:CC:74:6B:34:C4:EB:E9:FF:65:C6:24:BF:BF:3E:E7:D3:56
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3134332e302e3233322e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:60:af:58:4e:51:b3:f1:d6:e4:2b:17:fd:ff:7f:84:da:8b:
         7e:b8:21:6a:95:95:2b:d9:d9:e7:ea:51:fc:75:f4:b8:f1:f4:
         91:ee:9d:ac:c8:d8:bc:ed:5d:fb:ec:2a:f8:76:e9:ab:1c:67:
         f8:28:58:3d:28:a6:67:37:97:e9:40:c9:60:55:74:96:b4:95:
         c4:fd:84:9e:53:1e:b4:74:7a:ba:1c:75:1e:e1:c9:00:d4:c7:
         29:ce:ee:51:c2:f7:86:f6:40:21:fe:23:1c:4e:db:0f:c3:dd:
         90:2a:28:67:c4:fa:6c:c5:af:b7:28:6d:d0:75:3e:8b:a8:98:
         00:4c:a3:bd:a1:5b:b4:49:bd:f2:5a:0d:9f:0e:4e:cf:34:9c:
         62:f6:dd:97:41:4c:b2:d6:e2:46:06:a0:03:a7:6d:67:51:5d:
         a9:3c:00:2e:ac:60:b3:24:74:10:87:9e:72:ca:12:a6:47:e5:
         80:d3:59:9a:a9:ed:1f:c6:39:af:70:88:6d:59:35:4a:3a:be:
         38:43:03:99:2a:61:d6:0b:fa:16:d3:53:19:72:e2:da:21:ca:
         9a:97:a6:a2:b0:52:f2:31:b2:46:2f:4d:90:4f:bd:73:fb:d5:
         b2:15:75:c7:47:72:ee:49:d9:8c:7b:3e:1a:78:c0:2c:db:c0:
         d5:5a:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org