Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323636373232.roa
File:                     3134332e302e3234312e302f32342d3234203d3e20323636373232.roa (raw, json)
Hash identifier:          EfgQ/d/lmGuBh6CYEAH5LXWXhoQItphP6ZwGL9FHIGg=
Subject key identifier:   A1:27:84:A0:9A:05:8C:49:F3:AD:6E:D9:54:9E:CA:8E:EA:15:6E:9E
Certificate issuer:       /CN=8B146E33D31029096D1CCD6B6212814336FA1433
Certificate serial:       127BDA210BDF357B3498935CF491422C719885EF
Authority key identifier: 8B:14:6E:33:D3:10:29:09:6D:1C:CD:6B:62:12:81:43:36:FA:14:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B146E33D31029096D1CCD6B6212814336FA1433.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323636373232.roa
Signing time:             Tue 07 Feb 2023 14:54:05 +0000
ROA not before:           Tue 07 Feb 2023 14:49:05 +0000
ROA not after:            Tue 06 Feb 2024 14:54:05 +0000
asID:                     266722
IP address blocks:        143.0.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7b:da:21:0b:df:35:7b:34:98:93:5c:f4:91:42:2c:71:98:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B146E33D31029096D1CCD6B6212814336FA1433
        Validity
            Not Before: Feb  7 14:49:05 2023 GMT
            Not After : Feb  6 14:54:05 2024 GMT
        Subject: CN=A12784A09A058C49F3AD6ED9549ECA8EEA156E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:0c:22:61:b9:01:6a:cf:35:23:a7:48:1f:
                    57:bd:98:dd:bc:26:a1:18:5d:57:93:5b:38:6a:f5:
                    8c:18:a1:7a:f4:40:03:b4:ef:dc:08:02:43:99:87:
                    ec:d0:dc:be:0b:6a:7c:8c:43:52:a6:9f:64:29:da:
                    29:7d:9e:24:1d:64:c0:6f:23:d2:8f:6b:7d:2c:ab:
                    f8:a6:7f:a1:39:34:8b:b4:e8:f0:3e:8d:9c:a8:7c:
                    f4:19:0a:2b:a2:04:9b:cb:d1:35:13:a6:f2:e8:af:
                    c8:d6:6f:5e:9e:d9:9d:8a:c3:84:58:0a:30:20:a1:
                    c8:c4:2b:8f:4e:32:aa:88:22:1e:bd:bb:4c:fc:62:
                    dc:ed:81:bf:2c:05:43:8a:f7:c3:61:2d:f8:2b:69:
                    4b:64:af:71:1a:af:a4:56:a7:cf:0f:94:05:bf:d0:
                    db:ab:52:f3:2b:ec:d5:d0:1e:cd:2b:79:f8:a9:7d:
                    d1:fd:c8:9f:83:e9:b1:72:94:b1:8c:f1:1a:a2:3d:
                    c1:48:67:6e:c3:5a:be:e5:c5:3c:06:8f:53:16:60:
                    83:c3:98:50:cc:57:8a:04:29:11:bd:44:d5:21:8b:
                    bf:06:7d:ee:ac:df:74:58:06:e1:a0:5d:e7:27:ad:
                    e5:5a:7a:03:b6:c2:6b:fc:7c:f6:43:9d:67:6b:33:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:84:A0:9A:05:8C:49:F3:AD:6E:D9:54:9E:CA:8E:EA:15:6E:9E
            X509v3 Authority Key Identifier:
                keyid:8B:14:6E:33:D3:10:29:09:6D:1C:CD:6B:62:12:81:43:36:FA:14:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8B146E33D31029096D1CCD6B6212814336FA1433.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B146E33D31029096D1CCD6B6212814336FA1433.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323636373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:27:60:19:1b:81:64:8f:d8:b5:4c:1e:9c:b6:a5:3d:0f:
         e0:71:3e:93:18:0f:f3:e0:d1:44:d5:be:bf:60:1d:3e:8d:f6:
         02:da:9b:de:29:d5:c4:89:f1:63:f1:f1:6c:66:00:a3:9e:a1:
         5d:a9:73:b3:ff:e5:88:1d:c4:ce:99:13:a3:cf:53:77:1f:e8:
         9b:a4:b4:7c:23:35:7c:3f:88:40:2d:cf:5a:11:f8:fe:ae:f2:
         e2:3e:a2:06:d9:21:8c:ec:bf:72:a0:a1:ab:ff:fd:24:5d:02:
         04:8e:96:1b:88:2f:c2:98:6f:d8:14:cf:50:d9:13:3d:f5:a1:
         90:29:4d:40:90:c8:33:a6:b1:8f:3c:4f:65:62:e7:e4:7f:5b:
         a0:7a:53:9f:d8:2e:0f:b4:90:0f:72:63:79:3c:9c:a2:b2:77:
         bd:d9:fb:31:49:63:07:46:e5:a5:c9:90:dc:37:81:31:a4:92:
         e2:e0:95:85:fd:da:31:b3:79:40:97:18:3b:e3:c7:49:7a:0a:
         47:6a:cc:c9:db:d8:cf:d1:28:fa:18:cc:ca:45:e7:6d:c8:e7:
         f6:49:63:10:a9:3d:a8:be:a8:83:b2:81:1e:89:a3:77:70:23:
         c7:cb:06:02:d8:bb:23:95:36:47:81:cd:a3:23:55:bb:d7:a4:
         c2:cb:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org