Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
File:                     3134332e302e3231362e302f32322d3234203d3e20323634303237.roa (raw, json)
Hash identifier:          Mbu0K9egy7eARUP27MWiQRFsQswufwMW81BRLOIaUFw=
Subject key identifier:   88:37:BB:75:93:06:03:03:69:85:E5:D2:41:50:35:13:50:C0:5B:D5
Certificate issuer:       /CN=923141629C33831528ED5BCD343A22B26852B46E
Certificate serial:       5B01071399C9A8F4529C688B58F9990B1077B099
Authority key identifier: 92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/923141629C33831528ED5BCD343A22B26852B46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
Signing time:             Wed 18 Oct 2023 19:00:00 +0000
ROA not before:           Wed 18 Oct 2023 18:55:00 +0000
ROA not after:            Wed 16 Oct 2024 19:00:00 +0000
asID:                     264027
IP address blocks:        143.0.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:01:07:13:99:c9:a8:f4:52:9c:68:8b:58:f9:99:0b:10:77:b0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923141629C33831528ED5BCD343A22B26852B46E
        Validity
            Not Before: Oct 18 18:55:00 2023 GMT
            Not After : Oct 16 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:7f:c5:aa:3a:14:0e:15:13:a7:79:10:5e:
                    50:ad:50:eb:de:be:d9:dc:c1:0b:75:60:16:9b:be:
                    01:86:1b:fc:31:cb:9d:15:6a:cf:24:df:21:ea:3a:
                    79:03:80:d4:aa:cf:b5:be:03:eb:63:c0:00:28:6f:
                    c9:0b:df:6a:99:95:d7:52:9d:94:15:3a:67:b6:c0:
                    d2:ba:8d:61:fb:f0:57:4a:fa:03:1f:a7:f0:07:ab:
                    0b:91:70:26:c8:d6:10:35:69:7f:93:05:89:de:a0:
                    55:40:d9:4d:2d:6d:02:6e:b9:c5:0b:02:25:c6:2d:
                    72:78:81:55:77:eb:f3:54:89:e3:62:fa:2e:62:43:
                    4f:ab:a8:4e:34:e1:dd:e9:fa:2d:fc:b9:87:70:d5:
                    09:e6:1f:4b:c1:18:86:a4:a3:cb:1a:64:ef:5f:03:
                    b7:91:ac:d2:69:62:f9:65:3c:2e:27:b4:ee:2d:cb:
                    2e:20:0a:bd:94:13:06:20:00:98:54:38:24:e9:a6:
                    57:e5:63:dc:a0:fd:d1:b3:21:d0:65:da:e5:a5:e9:
                    94:1f:69:4a:63:34:52:68:94:0d:b1:97:d2:ec:66:
                    e0:43:20:a2:5c:7a:fd:7f:8d:7e:2c:aa:f6:d3:ba:
                    01:4a:01:cf:dd:43:8d:03:81:99:34:01:b1:64:7f:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:37:BB:75:93:06:03:03:69:85:E5:D2:41:50:35:13:50:C0:5B:D5
            X509v3 Authority Key Identifier:
                keyid:92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/923141629C33831528ED5BCD343A22B26852B46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/923141629C33831528ED5BCD343A22B26852B46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:26:1b:fc:dd:70:69:94:ef:99:90:29:e7:52:83:00:5f:6e:
         e9:2c:41:be:96:17:9c:bf:e9:67:30:b9:b0:3a:0d:40:20:c2:
         0c:55:b2:06:d8:c0:24:6b:80:8d:03:c2:d2:db:c7:c0:85:b2:
         59:09:eb:00:8f:90:0f:d7:1f:9e:8f:8a:37:7e:73:92:42:15:
         bf:83:02:55:74:ea:0f:d6:a4:88:b8:04:7f:9a:36:3d:c9:13:
         f7:94:74:d5:a0:1e:f9:bb:59:60:87:bc:0a:b5:b4:75:77:c8:
         cf:2d:b9:97:ce:d7:76:bc:cd:1f:1c:5c:9e:e1:cb:e1:0c:43:
         81:f6:90:f2:cb:cb:bd:98:63:ee:c4:5d:d3:4f:cc:24:ed:cb:
         ec:4a:fe:64:68:de:ae:c0:51:d3:c5:1d:31:d2:dd:2a:16:d5:
         b2:ee:41:c4:a9:fe:89:57:b0:6c:bf:49:0c:1c:a2:33:43:72:
         26:22:e0:d9:26:07:0f:3b:88:cb:b3:70:1a:a2:a2:a2:cc:0a:
         03:dd:37:d1:cc:96:6d:a1:03:bd:6a:89:77:e4:10:20:a6:4e:
         3e:79:52:39:61:a0:57:ce:93:9d:8f:73:51:6c:f7:14:b6:5d:
         0a:04:cd:ff:94:6f:54:fe:c5:53:e6:00:12:0e:65:8d:93:7c:
         c6:98:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org