Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa
File:                     3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          SaQPSVOU0Q7MlDptQ3QnhOL4Z+wKA0/JaXzcsUzfZwg=
Subject key identifier:   3A:B9:D1:06:84:E4:40:71:38:61:3F:F6:AC:3E:01:12:32:C8:D3:63
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       51647AB43ABF07C0E2F34F31A00B1468355662A9
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa
Signing time:             Tue 02 Jan 2024 20:32:18 +0000
ROA not before:           Tue 02 Jan 2024 20:27:18 +0000
ROA not after:            Tue 31 Dec 2024 20:32:18 +0000
asID:                     264075
IP address blocks:        143.208.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:7a:b4:3a:bf:07:c0:e2:f3:4f:31:a0:0b:14:68:35:56:62:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Jan  2 20:27:18 2024 GMT
            Not After : Dec 31 20:32:18 2024 GMT
        Subject: CN=3AB9D10684E4407138613FF6AC3E011232C8D363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:50:74:0c:d1:01:f1:d0:ac:73:6d:5f:dd:90:
                    42:b3:78:9c:06:69:29:2f:2b:a1:18:65:3a:3f:f1:
                    a2:21:11:23:0d:2a:45:98:04:c0:e3:f5:d6:11:39:
                    c3:34:64:78:ea:ba:15:fe:30:86:0d:c5:c5:8e:4c:
                    91:c1:eb:d7:26:e9:84:2c:a5:e2:c5:65:d9:64:a0:
                    e8:94:7b:ce:03:b5:3a:a5:5b:0c:9f:cf:4a:a1:f3:
                    ca:a2:6c:e8:43:e3:e8:a3:fb:73:95:ad:81:75:26:
                    bb:73:bd:93:49:83:22:83:63:2a:07:b8:e5:c6:42:
                    a5:d3:50:44:9f:aa:7b:27:ed:4e:91:79:5d:73:8d:
                    7a:2b:27:4e:c9:8b:5d:d1:f2:05:bb:07:d1:46:40:
                    5e:82:5d:5e:08:49:f1:be:b7:9f:7c:7e:a1:42:3b:
                    fb:4f:a4:6e:c4:fe:b0:1d:58:9c:fb:58:c6:54:61:
                    09:f7:c2:ee:30:e1:3a:68:72:6d:9b:69:e0:5b:c6:
                    f0:28:a9:af:72:b4:38:8a:5c:c5:cd:92:27:53:e9:
                    2d:b0:cb:a7:fb:90:a0:b7:34:2c:14:a1:5f:2b:3c:
                    9e:c4:89:df:4a:e3:c5:66:05:93:53:60:38:b5:40:
                    11:81:aa:92:00:3b:04:5c:5c:47:9d:f6:e6:03:e9:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:D1:06:84:E4:40:71:38:61:3F:F6:AC:3E:01:12:32:C8:D3:63
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:38:e9:34:ec:6e:a4:9b:ce:34:48:12:0a:ef:9c:63:0f:
         c0:95:af:c5:3a:00:32:a8:a0:16:d8:7c:bd:2f:16:89:ef:04:
         a5:fb:22:18:f0:c1:b8:48:ee:af:92:54:6a:86:01:a4:f4:e2:
         43:01:bd:18:99:23:87:94:da:ee:98:c2:ff:a4:5c:87:30:91:
         9a:c1:6d:74:ce:40:02:14:61:42:95:c3:37:86:ab:88:0c:b5:
         55:2c:40:ae:96:09:00:b7:ae:1b:d8:fb:0b:7e:f4:59:84:ce:
         2f:b7:3b:3c:96:f6:41:ef:39:62:83:5f:d7:6e:a7:a1:74:b8:
         e0:76:c6:57:40:f3:9e:72:af:0e:2c:8f:85:e0:81:9e:42:17:
         bb:32:f9:f4:c2:2c:1e:93:f1:1f:3f:d2:ec:52:81:c1:7d:c4:
         74:48:66:97:6f:9d:5d:88:06:b5:0b:11:79:19:c0:2e:55:e2:
         54:9a:1b:df:af:62:55:f0:33:aa:3d:dc:fe:fe:d1:0c:08:27:
         55:92:08:6c:71:2d:a8:0a:cf:9a:1c:89:1a:29:54:70:94:3a:
         61:52:17:43:5b:83:55:b2:8f:1b:8b:25:ed:d0:8e:93:74:74:
         2e:10:40:7a:24:52:3b:c2:52:96:88:df:24:19:20:82:b5:a7:
         78:b6:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org