Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32352e302f32342d3234203d3e20323634303836.roa
File:                     3134332e3230382e32352e302f32342d3234203d3e20323634303836.roa (raw, json)
Hash identifier:          jQMMWTqU7C8DbSkkdIgdi4ygpQd24Yti9HiGjTqFsUM=
Subject key identifier:   A9:B2:90:9C:E1:88:02:13:56:5E:9A:40:68:F8:FA:21:96:3C:EB:1C
Certificate issuer:       /CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
Certificate serial:       27965C63401BA8D54273D5D1EF76A7A080EA722D
Authority key identifier: 62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32352e302f32342d3234203d3e20323634303836.roa
Signing time:             Thu 09 Nov 2023 14:14:07 +0000
ROA not before:           Thu 09 Nov 2023 14:09:07 +0000
ROA not after:            Thu 07 Nov 2024 14:14:07 +0000
asID:                     264086
IP address blocks:        143.208.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:96:5c:63:40:1b:a8:d5:42:73:d5:d1:ef:76:a7:a0:80:ea:72:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
        Validity
            Not Before: Nov  9 14:09:07 2023 GMT
            Not After : Nov  7 14:14:07 2024 GMT
        Subject: CN=A9B2909CE1880213565E9A4068F8FA21963CEB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:bd:eb:44:4d:84:30:f6:d6:84:e2:14:90:
                    c3:e9:d2:3e:83:36:96:3a:1f:17:66:ec:1c:e9:c5:
                    84:74:6b:1e:35:a1:f0:34:59:cd:fd:29:51:c4:92:
                    11:08:3b:fc:0c:04:44:21:98:5b:6b:f2:51:64:0e:
                    0f:db:f3:db:6a:ab:7d:16:3d:fc:ab:b1:68:94:1f:
                    25:1c:7c:7f:0f:6f:de:bc:db:fc:da:c3:ba:9a:e7:
                    ba:84:07:e7:8c:25:f0:bd:1f:cb:8e:f9:a2:37:22:
                    05:a3:c3:36:85:01:53:0e:8f:d4:36:5a:2d:f0:9f:
                    50:f4:6b:68:f8:83:6a:7d:a8:fa:ad:cf:d9:59:b0:
                    cc:ea:36:2b:d4:25:22:52:b4:e7:58:02:e8:e4:2d:
                    4b:a4:29:d6:d7:9a:34:fe:4a:63:96:e1:01:b4:a8:
                    b0:de:a5:bc:37:f9:b0:9d:cb:4d:98:fa:d0:14:97:
                    c9:37:3f:6f:d4:44:d5:bf:cf:22:76:4d:04:ba:35:
                    83:53:ae:c9:4f:bc:88:20:3d:df:34:b8:e3:48:64:
                    d7:39:50:22:24:35:77:0f:47:8e:f9:4d:93:3c:6f:
                    2c:c7:07:43:00:35:9d:6b:29:ec:7c:62:80:51:ac:
                    06:51:9e:31:32:f9:f0:67:4f:40:3a:cf:14:ba:fd:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B2:90:9C:E1:88:02:13:56:5E:9A:40:68:F8:FA:21:96:3C:EB:1C
            X509v3 Authority Key Identifier:
                keyid:62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/3134332e3230382e32352e302f32342d3234203d3e20323634303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:ab:85:60:ea:19:11:7c:4e:fe:0f:c3:4d:26:e6:9e:1b:
         88:9a:15:cf:7e:a8:c5:7c:5e:cc:91:ba:f3:22:92:1f:cd:61:
         2a:e3:a6:f3:7d:a2:8e:4e:8e:a4:e7:b7:c5:0b:a1:33:e6:a5:
         79:33:2e:fd:94:86:07:3f:c8:7b:96:75:95:2a:cc:e2:d6:c6:
         2b:7f:f7:54:ba:e6:cf:c2:19:71:02:cb:8b:e6:1b:6a:80:73:
         6c:17:70:18:76:18:bc:a1:43:0f:cf:9c:92:45:8b:cd:27:55:
         36:13:5b:be:6c:77:d3:aa:8b:d4:4c:20:98:ad:b6:db:86:54:
         7b:9f:80:c4:42:18:78:0b:a9:2d:f4:15:25:64:c6:7f:e0:8c:
         ca:f1:6c:fa:64:3b:18:47:39:91:99:c4:18:d8:24:fd:d5:c0:
         ec:ce:26:cf:1b:5d:62:2d:ce:22:34:89:1e:25:b2:57:86:79:
         74:7f:e5:9d:b9:cb:d3:c7:93:fd:1b:f5:05:70:a9:fe:ee:ae:
         d0:81:3e:ec:a8:da:e8:9a:0e:e3:e3:96:d8:01:ce:43:36:d7:
         98:ee:11:c3:43:e2:d1:19:45:28:b4:48:d2:78:79:6e:95:ed:
         1a:31:1a:46:a9:47:1d:77:1d:f8:f6:a7:05:8a:9d:fd:91:4f:
         5c:bb:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org