Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e203533313831.roa
File:                     3134332e3230382e32302e302f32322d3332203d3e203533313831.roa (raw, json)
Hash identifier:          W0shn/3AGkp5e9M2ipfF4pX5COXfdHHKa6TkxNjtbDY=
Subject key identifier:   2C:E0:BE:23:DD:62:BD:B0:91:6F:43:96:6F:32:55:EE:DC:0A:1C:B3
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       1D9F72B41E39AA45216DE2886B2029B37098B5E4
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e203533313831.roa
Signing time:             Tue 28 Feb 2023 18:03:43 +0000
ROA not before:           Tue 28 Feb 2023 17:58:43 +0000
ROA not after:            Tue 27 Feb 2024 18:03:43 +0000
asID:                     53181
IP address blocks:        143.208.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9f:72:b4:1e:39:aa:45:21:6d:e2:88:6b:20:29:b3:70:98:b5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Feb 28 17:58:43 2023 GMT
            Not After : Feb 27 18:03:43 2024 GMT
        Subject: CN=2CE0BE23DD62BDB0916F43966F3255EEDC0A1CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:80:f4:a0:33:40:6d:c4:49:1c:87:c3:72:
                    b1:64:cd:98:01:9a:74:43:d6:62:d5:b4:b6:46:15:
                    d7:fa:f3:12:56:e2:69:cf:ec:9c:c3:d3:b2:37:41:
                    2d:19:55:b3:47:13:a5:5c:b4:8f:53:2a:3b:a0:f6:
                    5c:00:f5:99:f7:b7:7e:f2:4a:03:a2:e6:56:b5:35:
                    e1:33:20:dc:8a:86:04:aa:46:6e:97:84:26:38:4c:
                    37:f9:fb:a7:b0:3d:cb:3b:8a:21:98:f9:3d:3b:68:
                    a3:07:0c:c1:be:af:35:c9:d1:df:b9:96:28:50:10:
                    ac:05:30:11:2a:1b:49:02:f3:24:ee:ef:cc:21:6d:
                    d7:b9:db:02:d4:8f:26:f9:44:03:58:11:41:77:66:
                    0b:f3:e3:aa:ed:b5:32:65:1f:8e:e3:37:21:3a:c5:
                    be:c1:e4:76:1b:f5:0a:47:73:4a:31:dc:0d:9f:fc:
                    30:f9:0c:92:33:7e:60:dc:2f:fd:ff:43:06:61:1d:
                    81:ce:a8:27:b4:ca:3a:1f:26:99:df:0a:69:83:c0:
                    19:3a:25:80:ae:9c:58:8b:c5:3e:ae:e3:c8:cd:be:
                    4c:df:67:36:4f:c1:cf:76:ba:1e:ff:29:bd:61:79:
                    64:44:f0:75:a3:fb:95:24:b5:e0:de:0c:ef:fa:a0:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:BE:23:DD:62:BD:B0:91:6F:43:96:6F:32:55:EE:DC:0A:1C:B3
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:5d:ae:6d:f5:b7:68:b3:0a:db:5a:68:b0:04:cb:5e:a6:
         70:08:68:3d:bb:f2:31:81:7d:15:70:a4:49:4d:3a:24:50:b6:
         45:b1:b3:a2:d6:20:2f:fc:2c:1e:f5:c0:9c:42:7c:94:b8:1f:
         af:ec:0e:f2:b9:bb:d5:74:ce:03:92:c1:2e:84:36:b0:f0:67:
         df:eb:08:64:40:0f:04:2a:01:07:63:b6:f4:fa:64:39:7e:80:
         22:56:7b:b5:3d:be:69:8d:af:dc:1e:25:e5:36:f0:88:09:b3:
         3f:41:eb:8c:9c:b1:bd:ab:c7:15:26:1a:8f:23:a3:87:7d:98:
         6b:c5:37:ce:b6:46:ad:27:89:65:f0:f2:55:77:7c:8c:94:a3:
         15:26:0d:0c:d8:66:fd:4e:62:98:55:d6:1f:60:dd:ab:16:aa:
         ec:bf:2a:81:35:80:14:ae:01:b3:8b:eb:21:8a:10:90:35:f3:
         d8:92:24:ac:a6:43:0f:4c:b4:eb:f0:02:cf:c4:2d:81:da:8c:
         04:ab:07:22:68:f3:e4:dc:40:47:a5:7e:5c:ab:7f:a7:d4:49:
         2d:25:33:d5:f1:34:91:78:d0:7c:67:99:2f:0a:8b:6e:90:a1:
         68:c4:f0:1f:18:88:75:b9:81:36:50:d0:e8:9d:2c:29:c7:8d:
         2c:4e:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org