Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa
File:                     3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa (raw, json)
Hash identifier:          IeGdD9+UjFWnfU2d8HPo1NTnTTBJX07lNly6RrUAtV8=
Subject key identifier:   60:BA:75:38:6C:75:D2:1D:5B:A4:DD:A1:1C:77:E3:5E:A4:80:92:3E
Certificate issuer:       /CN=D518634D88143C0017F61EB6C5447D28D1D13616
Certificate serial:       480191C20FF6BEA388990E0E9D8E501BD52BAA60
Authority key identifier: D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa
Signing time:             Thu 04 Apr 2024 04:00:18 +0000
ROA not before:           Thu 04 Apr 2024 03:55:18 +0000
ROA not after:            Thu 03 Apr 2025 04:00:18 +0000
asID:                     53046
IP address blocks:        143.208.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:01:91:c2:0f:f6:be:a3:88:99:0e:0e:9d:8e:50:1b:d5:2b:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Validity
            Not Before: Apr  4 03:55:18 2024 GMT
            Not After : Apr  3 04:00:18 2025 GMT
        Subject: CN=60BA75386C75D21D5BA4DDA11C77E35EA480923E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:34:06:26:73:cb:94:e1:57:23:2c:1b:fa:1b:
                    fb:da:f6:2c:12:1b:de:e2:96:2e:76:ec:54:f6:f8:
                    04:27:d8:c9:9e:48:c7:68:cb:64:b4:dd:55:57:cf:
                    de:27:23:63:b5:f8:1d:60:f0:7c:0a:a5:a0:79:93:
                    94:60:6b:0a:99:81:79:51:c8:94:24:a2:d5:45:89:
                    e6:a4:47:95:cc:e0:5d:29:4e:06:cc:65:07:56:e3:
                    cd:94:14:22:19:78:a1:ea:74:22:48:25:d1:71:88:
                    bf:1a:f9:01:15:83:79:9c:2e:2c:77:db:bd:7e:cc:
                    1c:b1:07:71:f8:10:ee:3b:c5:d6:2f:8a:20:51:df:
                    0d:2e:c2:a2:e3:5f:0f:5e:95:3d:da:1d:da:11:77:
                    0e:bd:b2:c6:95:fb:12:02:f4:dc:42:46:7b:7d:68:
                    21:1b:7e:db:38:9b:e4:e4:24:5a:37:89:02:4f:4a:
                    a3:67:88:46:10:7e:64:7f:00:6e:0f:94:46:a1:1f:
                    1f:3b:6d:0c:81:2f:b5:bf:d5:ac:ef:7b:a3:eb:3a:
                    17:f4:eb:23:53:e9:7f:01:c7:91:95:52:d4:19:b1:
                    be:ee:c1:3d:7e:0b:c1:4e:dd:2a:29:09:1a:de:e1:
                    c2:ef:a8:7f:ff:c4:77:d3:72:83:e1:22:05:8d:5c:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:75:38:6C:75:D2:1D:5B:A4:DD:A1:1C:77:E3:5E:A4:80:92:3E
            X509v3 Authority Key Identifier:
                keyid:D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3134332e3230382e3136302e302f32322d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:64:3b:6b:4d:e4:b3:7e:5c:d3:d9:98:66:37:93:bc:ae:
         aa:2e:2d:cd:3f:5c:f7:6c:3c:0b:f6:1e:57:a4:9e:cd:57:a3:
         e3:05:07:b6:12:4c:7e:52:bf:98:42:72:28:2c:84:47:1a:c2:
         46:d9:70:06:9b:2d:f6:21:78:ab:22:76:53:e0:dd:02:eb:e2:
         e6:76:20:e6:58:85:30:1c:c8:2f:63:dd:d1:f9:36:ff:25:de:
         4e:d8:cd:38:d0:08:29:38:c3:35:1e:6f:01:56:c3:d3:e6:d9:
         e7:b1:45:d6:78:ce:25:0f:97:e2:ff:94:2c:fd:be:b7:6a:1c:
         14:cb:e8:34:14:3a:34:4e:d4:72:2f:86:d8:d4:88:b9:60:44:
         b5:80:9e:b1:7a:03:4e:7d:5d:d8:87:15:7d:f6:11:2f:ca:a1:
         2d:1a:6d:86:ea:87:26:d2:e0:82:a6:31:57:dc:72:b3:4f:c5:
         d5:c2:5a:7a:2e:72:1c:ae:e1:1c:ac:51:9b:81:37:01:27:47:
         9b:c0:b2:5a:cc:e6:4f:2b:eb:91:23:36:2f:15:34:aa:da:34:
         46:9c:3c:c5:78:c7:bd:86:c5:32:fd:ae:b5:f6:f4:51:b7:f6:
         04:1e:59:34:bb:a9:0a:4d:4c:f5:fe:9a:bb:d1:27:8a:dd:56:
         da:4a:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org