Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137312e302f32342d3234203d3e20323632333736.roa
File:                     3134332e3235352e3137312e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          iZd72CwPgwmm2Az9O4a5mtPuPsT+JrnbBJu2wzUellc=
Subject key identifier:   5E:B0:67:F8:20:79:06:88:4C:8C:85:3B:A9:73:8A:CE:72:23:D3:DD
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       5D9C3ACA94691E76778AC0A84BAB384FC27671FF
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137312e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 04 Jun 2024 17:35:14 +0000
ROA not before:           Tue 04 Jun 2024 17:30:14 +0000
ROA not after:            Tue 03 Jun 2025 17:35:14 +0000
asID:                     262376
IP address blocks:        143.255.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9c:3a:ca:94:69:1e:76:77:8a:c0:a8:4b:ab:38:4f:c2:76:71:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jun  4 17:30:14 2024 GMT
            Not After : Jun  3 17:35:14 2025 GMT
        Subject: CN=5EB067F8207906884C8C853BA9738ACE7223D3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:98:68:ba:25:77:3e:bd:0b:0c:e5:c4:54:
                    4f:1f:c1:5f:d6:4e:fb:b0:38:7f:05:37:52:34:b6:
                    de:db:5c:08:dd:e7:3c:5d:f6:ff:7a:89:39:c3:dd:
                    2e:c5:83:88:f9:b5:11:76:b7:e0:33:0b:0b:eb:92:
                    e7:e2:cb:8d:7c:47:12:75:8f:c6:d6:40:62:e0:c9:
                    48:5d:a4:c4:1d:d7:da:9c:e1:76:3c:f6:63:6a:ca:
                    98:3f:93:f3:2e:4f:6b:a0:71:76:f4:39:7b:0e:e4:
                    20:93:92:86:5a:bf:f5:a7:ef:58:fd:6b:a5:be:4f:
                    cb:cf:27:b5:e7:5e:7a:c9:d6:b6:bf:7c:f6:2f:cd:
                    b9:54:09:62:68:9b:cb:f1:d1:f1:0e:8c:b4:21:1b:
                    da:78:26:07:2b:ed:aa:62:05:d8:31:f5:5c:cb:f7:
                    e4:cf:d1:ad:39:bd:81:46:b6:88:3d:53:f9:c6:50:
                    95:38:da:46:2c:0f:ea:9f:17:29:4a:81:6c:19:2e:
                    9d:64:15:fb:db:3e:43:2d:48:30:9e:34:1d:fb:cf:
                    80:92:f8:d2:cf:05:bc:69:e7:ea:81:4a:67:bf:19:
                    52:7b:18:08:bc:5b:66:17:51:dd:7f:bb:84:7b:b3:
                    8b:0d:94:4b:58:bf:37:e7:ae:f6:01:69:b1:c6:e2:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B0:67:F8:20:79:06:88:4C:8C:85:3B:A9:73:8A:CE:72:23:D3:DD
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137312e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:27:24:c2:24:6f:0c:ff:c6:0c:f2:2d:69:45:a2:90:96:4d:
         3c:66:25:96:35:85:7c:86:44:01:f1:c0:ae:bd:c2:dd:9c:c5:
         49:fc:9d:96:ea:73:ef:48:bb:d1:0e:77:12:c5:63:12:e5:85:
         d2:e3:89:32:b4:af:45:c8:22:41:4d:56:cb:3c:c8:76:5f:50:
         7b:34:9c:8c:b7:13:35:ea:16:5d:f5:d3:03:c5:51:bf:db:bd:
         20:3e:d5:6c:e9:cb:23:d5:e1:05:f9:74:fd:49:b9:3d:31:2d:
         5a:08:04:e9:cf:e4:7e:4f:8e:d9:3c:5c:0f:8f:c0:ed:68:97:
         fa:b8:c8:b4:b1:cf:17:cb:b8:4d:7d:b4:79:16:cd:97:0e:54:
         d4:e9:28:44:f3:8f:e1:c8:f3:13:25:9e:24:e2:61:f0:3d:de:
         a4:8e:8a:f1:0b:1b:24:8b:78:bf:9d:a1:11:c2:fe:c2:8c:42:
         67:c7:2c:ab:3f:2d:fd:e5:03:3b:06:08:36:0e:a8:97:17:6f:
         17:54:a9:69:09:a8:ec:aa:df:f1:ca:8e:df:99:76:e1:86:17:
         cf:0d:85:77:f1:ce:a2:94:ae:90:7d:55:c8:f8:3f:2e:0f:05:
         76:33:32:38:fd:93:df:3c:c5:e1:7b:4c:1f:6e:a2:1e:e2:bd:
         b5:3d:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:44 2025 by rpki-client