Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa
File:                     3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa (raw, json)
Hash identifier:          B5vQnAaae40+l/PR/hIKVHF762Ocpap2Ui4hlT2lRNA=
Subject key identifier:   DD:7D:86:5B:EB:42:9F:19:5D:94:70:73:0E:98:81:EF:CC:F3:0F:DA
Certificate issuer:       /CN=616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC
Certificate serial:       360F8CE830D281661DB3AF48288221C8653E1B33
Authority key identifier: 61:6C:DE:B1:DD:DC:AB:54:BC:6C:A1:DC:BD:77:FB:0A:EE:CE:D0:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa
Signing time:             Mon 15 Jan 2024 13:06:01 +0000
ROA not before:           Mon 15 Jan 2024 13:01:01 +0000
ROA not after:            Mon 13 Jan 2025 13:06:01 +0000
asID:                     265147
IP address blocks:        143.255.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0f:8c:e8:30:d2:81:66:1d:b3:af:48:28:82:21:c8:65:3e:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC
        Validity
            Not Before: Jan 15 13:01:01 2024 GMT
            Not After : Jan 13 13:06:01 2025 GMT
        Subject: CN=DD7D865BEB429F195D9470730E9881EFCCF30FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:02:20:4f:a4:e2:2a:57:3a:5e:54:fd:eb:
                    ae:1b:02:e1:12:a3:f3:7f:66:83:ae:b6:18:f6:8b:
                    63:33:64:f2:0f:09:40:b1:25:25:f4:67:20:2e:8b:
                    9f:56:26:bd:d0:ff:8b:34:11:aa:ab:c3:30:85:30:
                    f2:de:5c:e6:08:69:72:bb:0f:44:f9:03:5f:cf:6a:
                    d6:72:de:2d:02:89:15:93:05:f6:da:74:a9:ea:6f:
                    80:05:d6:d0:38:c3:46:5a:64:fb:06:44:a7:40:a1:
                    91:26:77:ac:c6:bd:5f:12:be:90:68:30:05:34:b7:
                    0e:2c:02:e0:88:e0:c2:37:10:44:b6:1c:4c:35:c9:
                    98:f8:cc:1e:1b:33:fd:4e:55:80:21:cd:12:aa:86:
                    ee:60:ec:11:83:17:c6:f7:95:fa:8b:0f:e5:ca:48:
                    cf:dd:7f:0b:60:c1:d2:f0:0c:91:81:3c:59:76:c0:
                    42:72:d6:2c:e5:f9:18:5c:c3:a4:42:8e:4c:c3:c5:
                    71:61:61:33:df:6f:3e:e1:94:fa:35:7d:63:33:24:
                    a4:1e:71:60:8d:bb:79:44:e7:be:2a:5a:74:dc:c6:
                    22:6d:38:31:fd:e8:6f:0c:8d:20:a7:80:88:41:42:
                    5a:b2:c8:d8:91:20:9e:fe:c5:64:b8:1c:4a:6b:69:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7D:86:5B:EB:42:9F:19:5D:94:70:73:0E:98:81:EF:CC:F3:0F:DA
            X509v3 Authority Key Identifier:
                keyid:61:6C:DE:B1:DD:DC:AB:54:BC:6C:A1:DC:BD:77:FB:0A:EE:CE:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/616CDEB1DDDCAB54BC6CA1DCBD77FB0AEECED0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/3134332e3235352e3132382e302f32322d3234203d3e20323635313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:27:20:ce:ca:76:b9:72:4a:5a:e5:86:02:3c:4d:0c:b1:80:
         12:40:a0:5f:20:8f:d7:1a:5a:16:92:b4:8e:56:cc:6a:71:2a:
         63:71:c1:6e:31:a6:b2:c9:2c:53:71:ab:cf:91:66:a0:f6:f6:
         d2:25:95:29:7f:8b:47:93:8d:29:0c:fc:be:7b:e7:3c:4c:53:
         f0:0d:32:f3:20:0f:a3:30:dd:54:7d:b1:75:19:5d:ba:66:52:
         d2:2a:1c:9f:9b:df:d0:46:dd:f9:0f:93:24:af:0e:8a:94:7e:
         47:9f:a1:62:e0:7a:f4:3b:e7:df:c2:ef:c3:96:fb:27:be:3a:
         91:b6:9e:f2:4a:8a:b1:2f:8e:c2:ac:4a:bc:da:9d:05:9a:88:
         42:1c:bd:9a:10:43:f9:51:71:16:25:eb:ce:e7:d6:7b:d5:2a:
         bc:b6:21:63:b4:c0:79:06:7c:a9:33:50:76:84:fb:f8:dc:32:
         5c:a3:39:20:b3:8b:4a:3b:f5:5a:7a:d7:75:29:70:b6:bb:61:
         45:00:72:f8:70:14:f5:e3:59:74:84:15:32:81:76:a4:bc:d6:
         6c:73:c3:8f:a5:34:81:25:bd:1f:98:b8:85:f3:de:97:d0:34:
         be:e5:f2:9f:aa:f4:6f:7e:cf:26:7c:65:a4:84:7d:da:11:2c:
         f1:6c:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org