Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa
File:                     3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (raw, json)
Hash identifier:          d1G0jf85El4iVoDK+HuqonuqjiQkBG38Ai+PNX4gM+g=
Subject key identifier:   DC:E6:93:6C:A0:BF:49:E3:FC:4F:32:5C:67:6B:71:70:72:41:48:4B
Certificate issuer:       /CN=0AA46B239865B8E64AEAD48999F6B7FD6E1790F0
Certificate serial:       28C5B2997A32CE25BB3093C7F6E459CD40BB52A0
Authority key identifier: 0A:A4:6B:23:98:65:B8:E6:4A:EA:D4:89:99:F6:B7:FD:6E:17:90:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa
Signing time:             Fri 01 Mar 2024 13:30:01 +0000
ROA not before:           Fri 01 Mar 2024 13:25:01 +0000
ROA not after:            Fri 28 Feb 2025 13:30:01 +0000
asID:                     262422
IP address blocks:        143.208.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:b2:99:7a:32:ce:25:bb:30:93:c7:f6:e4:59:cd:40:bb:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA46B239865B8E64AEAD48999F6B7FD6E1790F0
        Validity
            Not Before: Mar  1 13:25:01 2024 GMT
            Not After : Feb 28 13:30:01 2025 GMT
        Subject: CN=DCE6936CA0BF49E3FC4F325C676B71707241484B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:fa:81:15:c5:36:33:dc:d9:1c:07:f8:08:
                    6d:3c:07:00:cb:a2:47:a1:86:a9:7d:67:5c:ef:73:
                    93:10:e3:1d:93:f4:a0:b3:59:e2:89:84:db:17:a6:
                    74:49:23:00:76:1a:fc:ea:04:f7:98:b4:bd:1a:a1:
                    b6:82:1a:33:f8:5b:4c:f1:22:68:f5:40:cd:e1:0b:
                    75:74:49:06:7c:fa:dc:10:ee:9f:b3:46:6c:22:18:
                    03:2d:ee:4d:44:d0:6f:f7:e8:d5:b0:c2:a3:64:23:
                    e1:90:f8:63:31:9c:66:92:64:ea:c2:a1:c9:d7:a1:
                    1d:78:a1:c7:69:af:76:5a:6b:92:9d:c9:8c:07:98:
                    12:4a:a6:f3:f5:31:73:09:35:fd:07:7b:03:e0:77:
                    45:0e:00:ab:4a:66:7e:44:19:fa:9c:8e:6c:c9:0d:
                    4b:98:59:45:ca:91:c6:6e:c1:4a:c5:62:65:4a:ed:
                    4f:f8:c6:6b:db:71:dd:da:54:48:4d:ab:c7:1f:a0:
                    6f:20:45:a8:f6:dc:b2:e5:9c:f7:db:94:88:2a:bc:
                    80:ee:33:7f:ba:0e:38:59:42:7c:51:c6:4e:e2:81:
                    b4:73:75:b5:d1:1b:5f:c9:c6:07:08:61:21:4c:34:
                    a4:cf:a9:5e:16:f8:bf:c6:9b:8c:24:9e:e9:8e:9f:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:93:6C:A0:BF:49:E3:FC:4F:32:5C:67:6B:71:70:72:41:48:4B
            X509v3 Authority Key Identifier:
                keyid:0A:A4:6B:23:98:65:B8:E6:4A:EA:D4:89:99:F6:B7:FD:6E:17:90:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AA46B239865B8E64AEAD48999F6B7FD6E1790F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/0/3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:00:cb:a3:56:75:7d:a3:c4:85:fe:c2:66:61:7c:78:8b:99:
         13:c3:61:54:97:9f:0c:64:d4:a8:a4:db:11:a0:7f:1a:5f:e4:
         8b:87:83:8b:90:f8:51:fc:fc:78:9a:a9:3f:0f:53:9a:36:df:
         cc:67:ba:02:f9:ef:cc:0a:61:6c:a1:0e:63:b4:1d:ef:fa:b6:
         51:27:72:8f:53:72:f1:a5:52:e9:e2:b9:4c:df:29:dd:a9:c9:
         11:a9:27:9f:5f:50:73:dd:b1:b3:95:2b:68:c1:6b:d7:8f:92:
         79:17:6a:2a:d9:4a:c6:bc:da:05:7a:43:74:7a:7f:40:fc:33:
         20:1e:e3:a0:e3:6e:35:93:c6:b5:98:66:1f:19:3d:2c:d1:cd:
         5d:cb:15:3d:79:81:c5:11:07:5f:ed:30:fa:c3:58:b3:15:0a:
         ae:e6:b4:37:27:c3:51:e7:e6:88:d5:47:df:aa:d5:89:05:4a:
         33:00:e2:d5:26:23:20:5e:2b:1e:26:05:18:23:bd:77:72:e6:
         cf:76:4e:d7:6b:54:b5:9a:af:2a:8d:f9:2d:fc:33:76:84:f3:
         39:73:45:72:a2:24:43:0e:07:d4:75:4c:b6:88:dd:a0:d5:a0:
         45:db:be:a7:f4:59:5e:6d:32:ec:bd:36:33:30:91:07:60:0e:
         e6:33:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org