Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa
File:                     3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa (raw, json)
Hash identifier:          gSCY536SjaXkmP4tAAwIreNiuYl61m0OOenxCfltHh8=
Subject key identifier:   57:3C:25:80:F9:3E:78:19:94:0B:FE:34:89:53:2A:8D:E5:27:D8:CE
Certificate issuer:       /CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
Certificate serial:       869BA3DA53243EFA0AF2E5A1A792907FB4697E
Authority key identifier: 62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa
Signing time:             Thu 09 Nov 2023 14:14:07 +0000
ROA not before:           Thu 09 Nov 2023 14:09:07 +0000
ROA not after:            Thu 07 Nov 2024 14:14:07 +0000
asID:                     264086
IP address blocks:        143.208.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:9b:a3:da:53:24:3e:fa:0a:f2:e5:a1:a7:92:90:7f:b4:69:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
        Validity
            Not Before: Nov  9 14:09:07 2023 GMT
            Not After : Nov  7 14:14:07 2024 GMT
        Subject: CN=573C2580F93E7819940BFE3489532A8DE527D8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:30:a3:0b:8e:31:23:7e:b7:48:f1:ff:8c:
                    19:5a:6a:52:b2:84:bd:f6:d2:26:45:5b:b4:67:66:
                    f7:3e:a9:3f:31:24:0f:0e:82:04:2d:95:d1:5a:a4:
                    85:d2:e8:5e:99:f3:be:8e:82:62:c2:85:fc:80:23:
                    97:a5:f9:b8:1f:80:6d:d8:66:6a:60:d6:f9:f0:1b:
                    a7:76:2d:ce:58:69:18:8b:d1:e2:a1:d9:ac:5b:5c:
                    bb:2e:7a:a9:96:d8:06:b0:b8:14:a4:72:d9:3f:a0:
                    76:f2:9b:f2:c2:6a:6b:00:40:fe:00:e3:6c:12:4e:
                    60:a5:a8:25:af:00:87:40:14:bb:5a:82:34:a6:35:
                    20:f4:cc:d3:cb:66:d1:8b:fd:d2:33:c9:65:d1:fc:
                    6c:74:3a:32:ea:a7:23:7f:11:30:75:ac:c0:6a:93:
                    88:d1:1e:a2:75:2c:95:be:f6:85:5b:5e:a0:40:05:
                    bc:e1:b5:05:a5:40:92:5b:79:88:93:17:1b:01:68:
                    a8:e7:18:03:ae:68:b0:d9:d4:cb:01:70:19:87:8b:
                    07:18:74:2e:62:37:d9:e2:32:e2:d5:ba:6b:9c:c5:
                    f8:42:b4:c5:46:c2:5b:4f:c6:d3:36:98:dc:14:f1:
                    0a:21:42:07:d7:c4:e3:af:18:0b:96:36:11:70:56:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3C:25:80:F9:3E:78:19:94:0B:FE:34:89:53:2A:8D:E5:27:D8:CE
            X509v3 Authority Key Identifier:
                keyid:62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32342e302f32332d3233203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:e0:de:a0:77:96:17:82:50:f5:ca:47:73:67:a9:97:d1:7f:
         d0:75:60:57:94:26:ab:74:8e:8e:2d:3e:5e:6e:18:c4:1e:fb:
         4f:91:49:41:cb:8a:b9:fc:02:62:86:12:53:52:b5:3d:4f:7f:
         a2:d1:76:9b:86:53:f5:f0:62:db:bd:1a:6b:ba:0f:89:ae:de:
         74:3f:83:1c:2a:83:04:a7:21:0b:49:6e:7f:18:59:31:f0:17:
         75:70:7c:8d:c0:96:49:8d:1a:cb:9c:0c:f6:38:72:5b:76:75:
         55:24:ef:49:9a:01:88:9c:ba:e0:5f:72:9e:0f:20:69:3e:fc:
         76:f6:7c:58:22:3c:02:11:5f:fa:db:ff:c4:9c:0c:45:77:8b:
         bc:c7:c5:4e:17:82:06:3a:63:2e:a3:f8:3a:ef:7c:a2:a2:9a:
         ba:f4:34:0d:03:aa:50:24:e1:b7:f9:c4:a7:85:1c:6b:d8:56:
         41:be:d0:95:a2:b3:00:8d:64:ad:f5:97:4a:ca:fe:d9:52:fc:
         89:a9:34:0f:f1:d9:c6:0e:17:19:1b:82:8d:ef:0f:15:7a:21:
         75:55:93:33:5e:96:3a:ed:7f:f0:34:b7:58:1e:6c:4a:ef:d5:
         0e:b1:7b:f2:e4:5f:6b:f4:d1:e1:6d:7a:e6:09:63:0a:3d:fc:
         47:f8:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org