Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e203533313831.roa
File:                     3134332e302e32342e302f32322d3234203d3e203533313831.roa (raw, json)
Hash identifier:          ZGMfuvLxtu2AjClur1C1G98XKfl8sBgWwwPLvbDmJEE=
Subject key identifier:   20:22:AF:73:13:2F:1D:B9:E8:41:65:7F:16:3D:A0:C5:49:CA:10:73
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       652D6DE2AE48432009C39A6E43CFB9DD57AAB0AC
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e203533313831.roa
Signing time:             Tue 28 Feb 2023 18:03:09 +0000
ROA not before:           Tue 28 Feb 2023 17:58:09 +0000
ROA not after:            Tue 27 Feb 2024 18:03:09 +0000
asID:                     53181
IP address blocks:        143.0.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2d:6d:e2:ae:48:43:20:09:c3:9a:6e:43:cf:b9:dd:57:aa:b0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Feb 28 17:58:09 2023 GMT
            Not After : Feb 27 18:03:09 2024 GMT
        Subject: CN=2022AF73132F1DB9E841657F163DA0C549CA1073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:d7:c0:44:d6:e8:10:9a:37:b4:6d:79:2b:
                    8a:fd:65:bf:6d:31:6c:bf:9d:ec:a1:77:c4:89:06:
                    06:76:67:d5:0a:ef:90:92:4a:76:ae:5a:e1:c7:48:
                    69:9b:4a:ba:b0:86:2d:19:15:52:c7:c8:d8:ed:f1:
                    77:cf:04:fc:bd:37:a8:77:f4:30:d4:82:74:e6:3d:
                    cf:4d:5f:d0:46:25:d0:ec:cc:62:96:d7:f3:96:65:
                    2f:7f:90:8a:cd:b5:f3:aa:f2:eb:53:66:8b:63:9e:
                    09:6f:76:d3:21:f1:f4:73:8b:2f:91:6c:80:b8:38:
                    7a:79:86:2c:bc:95:65:79:e9:d8:a2:d2:bf:ed:5f:
                    db:da:6a:1e:8f:99:95:82:8b:83:d9:1c:43:25:06:
                    59:10:df:0e:bd:f3:5a:6a:39:0c:d8:c9:2c:25:87:
                    c7:c6:7a:99:9d:db:95:82:f8:8b:2e:91:89:0c:66:
                    1e:6e:20:46:2f:8d:af:cf:76:4d:3b:b7:6e:5e:2d:
                    93:49:b4:ff:ea:ed:40:c9:1e:bf:f2:ad:b7:89:b9:
                    80:2b:03:a5:f0:50:a9:5e:1c:a3:ab:ad:3f:e2:d2:
                    84:3c:1d:80:4c:5c:84:7f:1f:bd:c3:f0:06:86:98:
                    81:c6:c3:92:83:e8:bd:ea:90:d8:ff:c2:9a:9c:d6:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:22:AF:73:13:2F:1D:B9:E8:41:65:7F:16:3D:A0:C5:49:CA:10:73
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e302e32342e302f32322d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:68:3a:58:eb:69:d9:f7:01:76:cf:e1:e6:54:89:d8:2e:7c:
         36:d5:74:8d:0d:f6:2d:19:49:0f:ad:bb:b5:17:34:fb:59:74:
         d4:c1:6c:5a:0e:aa:bb:25:54:09:b4:07:16:3a:d2:68:ae:97:
         ee:07:05:6b:34:d3:10:5f:a9:c8:88:b4:5c:b1:7d:55:b7:cc:
         91:2f:69:e9:a0:6d:6b:9e:b7:af:59:81:c3:ab:6b:64:f8:28:
         ff:6d:0b:dd:ea:06:ba:f8:1f:00:6d:56:45:4e:b6:51:65:75:
         1b:f4:e0:aa:31:8f:0d:af:a8:0d:b1:1e:8d:cf:93:4d:3c:ec:
         ce:6e:f9:2f:8b:22:ac:ed:c8:fc:36:4c:6a:59:bc:4b:da:15:
         b7:b2:3a:f8:5d:b2:dd:0d:4f:29:0a:c8:4c:11:67:f3:f3:cc:
         15:c3:27:77:71:fd:25:00:01:44:ed:e6:84:2a:0b:3a:a9:6b:
         1f:f9:ca:ab:fe:02:b6:f0:f1:a8:29:c8:46:2e:1a:2a:74:e8:
         5f:9f:0a:a7:df:e1:a3:1d:0d:65:f6:2e:1f:9c:18:1f:b5:c1:
         95:d9:5e:b7:02:cc:c1:1d:86:cc:e6:a9:e2:c9:dd:42:5e:2a:
         f0:66:17:31:c8:de:59:3b:75:64:fc:b3:6e:8e:ed:8c:66:66:
         be:9e:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org