Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
File:                     3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa (raw, json)
Hash identifier:          H0zAwtohVy/tsQDNHL9FYuK4TvxUNrxIPAvmpdatYJU=
Subject key identifier:   07:5C:37:BB:86:B5:14:60:58:02:AE:04:3F:BF:00:B2:63:BF:D4:FE
Certificate issuer:       /CN=9723508999E6E6042E07B57FC49918FDD5C8CDDC
Certificate serial:       561B32C92737A10C16DA1583E59F5184D515D967
Authority key identifier: 97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
Signing time:             Tue 22 Aug 2023 15:25:38 +0000
ROA not before:           Tue 22 Aug 2023 15:20:38 +0000
ROA not after:            Tue 20 Aug 2024 15:25:38 +0000
asID:                     265130
IP address blocks:        143.208.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1b:32:c9:27:37:a1:0c:16:da:15:83:e5:9f:51:84:d5:15:d9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9723508999E6E6042E07B57FC49918FDD5C8CDDC
        Validity
            Not Before: Aug 22 15:20:38 2023 GMT
            Not After : Aug 20 15:25:38 2024 GMT
        Subject: CN=075C37BB86B514605802AE043FBF00B263BFD4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:cb:50:c5:bf:fc:6b:27:8e:b8:4a:7a:28:
                    cf:cb:60:31:f1:15:b2:e6:45:84:ed:c2:f3:85:6e:
                    86:b0:70:e3:f6:23:79:cb:20:92:d6:23:37:ce:b7:
                    6d:2c:68:bc:fa:ef:cd:04:43:7b:d2:5e:c0:e3:f1:
                    61:7d:4e:b7:9a:c7:81:9b:6c:77:f9:1b:a9:cf:45:
                    a1:70:f7:67:9b:93:21:34:d7:fb:d0:48:4d:32:52:
                    91:cf:fb:2b:26:21:24:be:03:b2:1e:af:91:10:14:
                    3e:fa:14:e6:be:20:b5:f8:0e:ab:22:d9:d0:c0:09:
                    67:db:f7:6a:05:9e:ba:2c:6c:10:22:8d:e2:ef:3e:
                    da:20:93:06:4c:84:23:85:39:e2:a1:af:fd:9d:23:
                    17:19:e3:95:b3:d4:2c:5a:6b:2a:35:a7:16:6d:71:
                    9f:3c:77:a1:a4:ad:c2:43:00:20:fd:41:c5:1a:61:
                    69:ae:0f:21:89:ed:28:23:08:8b:78:e8:0f:2e:29:
                    bc:56:2b:e6:c2:f3:0c:0f:fb:d7:9b:8f:fe:22:18:
                    ea:60:fd:fe:69:29:ca:fd:8c:74:3c:eb:3f:53:0d:
                    ac:52:81:9c:06:62:5a:96:05:3a:7e:ae:8f:26:a8:
                    47:4d:61:2e:b1:0e:e4:d9:2f:1c:53:9a:c2:7a:8b:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:37:BB:86:B5:14:60:58:02:AE:04:3F:BF:00:B2:63:BF:D4:FE
            X509v3 Authority Key Identifier:
                keyid:97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:28:dd:14:c4:68:6d:94:e4:38:c5:b3:e5:9d:33:d9:d4:
         92:c7:03:97:66:b1:16:c5:b3:da:f9:87:ea:8b:83:92:9d:de:
         b0:f4:ae:bf:22:c6:52:b3:ef:42:1d:61:54:8c:58:a9:7a:40:
         7e:2b:36:68:89:c9:23:64:37:4b:d6:02:ca:69:72:bd:7b:1e:
         14:d3:99:fa:e8:98:6b:c9:62:97:2b:8f:f8:24:24:5d:b1:49:
         28:34:b4:27:65:30:e5:24:5a:1e:5d:12:90:49:82:bf:6c:b2:
         8c:a9:68:73:d0:9f:13:e8:c4:89:4b:74:a8:58:85:d0:a5:1a:
         23:19:db:4e:e5:a3:b5:87:fc:10:10:e1:4b:30:35:32:b8:f6:
         50:5e:cb:b1:cb:48:aa:91:ba:02:f3:9e:d6:45:0f:6e:80:62:
         97:fc:2c:f3:a7:9f:6a:83:d8:d8:d7:91:92:d9:dd:68:c0:c0:
         fd:cd:54:ea:38:cc:c3:8b:03:81:1b:c3:36:e6:ad:7f:44:ce:
         0e:97:0a:e3:b3:a9:b6:9a:14:85:9b:86:4a:80:62:d2:6b:e9:
         18:45:59:2f:8e:f1:41:ce:f2:da:31:83:40:1d:6a:26:e2:98:
         ef:e0:a4:89:22:29:d1:c8:62:74:f8:0b:51:e5:78:e0:a4:23:
         48:43:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org