Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323636313632.roa
File:                     3134332e302e32342e302f32322d3234203d3e20323636313632.roa (raw, json)
Hash identifier:          oaCHWiRrgAB5zn6FeLcKR7KWTO4hWpX921TR39dRsJU=
Subject key identifier:   9E:35:DF:08:2E:04:A8:99:38:29:CF:85:A4:F4:46:80:B0:67:27:33
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       72879B5DC415EDC9EB3255906EAAFB09F51E8BC4
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323636313632.roa
Signing time:             Mon 04 Apr 2022 21:47:03 +0000
ROA not before:           Mon 04 Apr 2022 21:42:03 +0000
ROA not after:            Mon 03 Apr 2023 21:47:03 +0000
asID:                     266162
IP address blocks:        143.0.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:87:9b:5d:c4:15:ed:c9:eb:32:55:90:6e:aa:fb:09:f5:1e:8b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Apr  4 21:42:03 2022 GMT
            Not After : Apr  3 21:47:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:81:d9:f0:e9:6c:24:46:32:be:c1:15:79:
                    f7:13:11:79:b6:14:a0:8c:f7:73:89:f1:18:2e:fb:
                    24:a0:2e:21:3b:8e:db:1f:4d:7b:e4:fd:f2:26:59:
                    ca:e1:19:58:a2:0a:65:6f:f0:87:da:0a:a3:9d:84:
                    3d:ad:24:fe:ea:b5:45:de:51:b4:0e:60:10:44:4f:
                    4f:de:9d:ab:41:61:40:0d:b8:a1:a8:85:3e:1f:ae:
                    65:98:c1:73:44:26:6a:c2:43:90:86:66:cf:9b:a0:
                    a8:af:da:0d:19:c4:78:eb:b1:eb:00:df:db:62:44:
                    e9:96:ae:ce:5c:a2:6d:7b:88:15:3a:88:58:98:2c:
                    30:58:38:65:b0:a7:42:cb:36:46:99:3f:d9:a8:65:
                    fb:bc:91:20:fe:84:56:24:ba:0a:2f:ed:04:05:23:
                    85:4e:56:c7:e3:65:b6:5a:e2:e1:5f:fc:90:e8:26:
                    de:f7:7b:1f:eb:95:15:92:af:90:d9:55:8f:17:e3:
                    af:f8:3c:64:33:d8:df:ec:f8:0f:9d:bf:a4:e6:69:
                    6d:25:b7:a3:1b:05:97:54:a6:a5:a4:80:14:69:d6:
                    c0:be:17:19:4b:b1:42:7e:0d:86:a9:77:b3:98:bf:
                    0c:48:4f:37:c7:ec:33:89:ad:b9:c2:40:29:de:6e:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:DF:08:2E:04:A8:99:38:29:CF:85:A4:F4:46:80:B0:67:27:33
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e20323636313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:35:b1:4b:a7:b7:59:67:0e:f1:f2:0c:3e:bd:7a:17:ab:3f:
         12:bd:0e:48:d1:3c:6d:73:2f:59:d8:70:91:83:71:ba:b7:2c:
         08:20:e2:78:2f:c7:8a:b2:ad:b2:30:69:41:7b:d4:6a:f6:d5:
         95:44:8b:13:a1:e3:63:bc:36:0e:6d:f0:6b:bb:69:86:24:4d:
         94:3f:92:4e:70:04:6e:e2:da:6c:ee:3e:b2:6b:c9:bd:cf:b3:
         05:b6:2d:ff:c0:fb:fd:4b:62:ff:95:32:a8:25:cb:72:08:e5:
         0a:dd:d5:83:4a:bc:fb:b7:5b:19:21:9c:b1:c8:38:80:32:8c:
         23:4c:ce:d9:c5:9a:53:92:80:7d:69:ac:68:a6:56:63:7d:20:
         e8:e7:c5:fa:8e:50:78:51:cc:b7:4c:44:a1:1a:9b:84:00:f0:
         89:16:98:0b:a3:da:ed:9a:d9:45:b9:92:ad:6d:82:45:b7:13:
         65:20:7b:03:69:d6:27:8b:66:e3:e5:22:8c:99:b4:7f:4a:9e:
         e6:cb:92:b5:45:96:a4:34:5b:aa:85:01:d8:86:81:a9:98:2f:
         44:93:7c:65:4e:90:3d:9b:f7:1f:d0:58:ea:15:c6:eb:04:55:
         36:a5:e2:2c:1c:0e:e3:66:e9:84:da:ec:1e:51:da:23:d9:b0:
         0e:ad:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org