Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
File:                     3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa (raw, json)
Hash identifier:          J4o02VO0qr4ERn+CVyRHrBKuQwczL3C1ESHnCxshXFs=
Subject key identifier:   14:A0:5A:01:AA:AA:96:2E:6E:39:0B:6D:BF:F6:B6:4F:16:30:57:5A
Certificate issuer:       /CN=2F7A4FD2065A1C732A7417998C1B8FAC75226544
Certificate serial:       1C3B936557BDCF16F246AF48676FC56F02A3200F
Authority key identifier: 2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
Signing time:             Fri 02 Jun 2023 00:36:19 +0000
ROA not before:           Fri 02 Jun 2023 00:31:19 +0000
ROA not after:            Fri 31 May 2024 00:36:19 +0000
asID:                     265143
IP address blocks:        143.255.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:93:65:57:bd:cf:16:f2:46:af:48:67:6f:c5:6f:02:a3:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F7A4FD2065A1C732A7417998C1B8FAC75226544
        Validity
            Not Before: Jun  2 00:31:19 2023 GMT
            Not After : May 31 00:36:19 2024 GMT
        Subject: CN=14A05A01AAAA962E6E390B6DBFF6B64F1630575A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:fa:9c:c8:83:4b:b6:db:e1:6b:43:d6:e7:
                    86:57:93:a8:eb:f9:bb:49:a4:50:9c:5f:e4:5c:3d:
                    f7:cd:43:88:76:dc:fb:76:79:c5:99:c0:67:af:59:
                    51:95:52:90:51:4a:41:57:dd:ea:fe:e2:aa:21:d3:
                    9c:45:ce:c6:d4:f3:88:2f:7b:e5:1b:40:21:03:28:
                    44:90:0a:6f:bf:9a:47:48:ab:b7:99:ed:af:ea:e6:
                    91:35:a6:e6:ad:de:1e:37:94:d5:a0:8f:16:37:f3:
                    61:a5:4d:51:db:cc:c4:a8:d2:00:63:fa:e8:bd:6d:
                    42:a1:66:55:e7:d9:ce:46:27:f0:75:67:2f:7f:31:
                    91:85:26:a2:f9:b7:c6:ca:bd:1f:90:cb:02:c6:92:
                    74:01:e0:9d:da:e6:b5:66:8e:7f:c4:c3:4a:de:32:
                    23:17:81:8a:1c:bf:91:e6:b3:52:11:c1:43:1b:8e:
                    b8:6f:f8:6b:68:2d:99:ad:33:4c:4c:d1:0f:19:4c:
                    68:96:e7:60:76:43:db:7b:ac:fc:ae:bd:99:a2:1c:
                    9e:50:eb:90:9e:02:bb:7e:d4:73:8c:ac:22:b7:cf:
                    07:30:a7:e0:14:ac:ed:66:3a:26:cb:ef:b1:c3:14:
                    e7:3d:5a:fa:50:9f:71:81:9f:be:6a:c8:4b:dd:27:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A0:5A:01:AA:AA:96:2E:6E:39:0B:6D:BF:F6:B6:4F:16:30:57:5A
            X509v3 Authority Key Identifier:
                keyid:2F:7A:4F:D2:06:5A:1C:73:2A:74:17:99:8C:1B:8F:AC:75:22:65:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F7A4FD2065A1C732A7417998C1B8FAC75226544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:13:54:98:11:0f:02:cb:a3:f2:37:65:aa:a8:72:13:41:
         21:58:fb:89:9d:9d:a8:48:50:4a:2c:af:06:20:6d:94:0b:eb:
         3e:32:f2:54:8b:93:bf:c1:d7:ca:24:ea:ba:f4:f3:80:65:b7:
         6e:bb:43:de:06:84:a1:53:a5:f9:6f:3c:17:d7:43:74:7f:13:
         53:e8:06:df:10:98:eb:7a:fc:e2:f7:7c:e7:ae:2e:84:94:cd:
         71:56:dc:3b:65:6e:5c:ae:07:a4:9e:6f:cc:55:69:de:b7:cb:
         f0:e3:85:73:17:7b:53:af:3f:84:3f:d4:45:30:33:e3:bf:9b:
         6b:ce:da:90:32:30:05:dd:eb:ca:a7:2a:08:2c:b4:c2:c9:82:
         23:4a:a7:df:9a:98:96:7f:22:b4:26:7f:8f:20:0c:cd:b4:c1:
         98:a4:af:69:d3:63:16:63:72:87:b7:e7:ee:c1:0e:3f:85:4c:
         17:2b:12:8d:57:45:37:fb:8b:55:2d:05:a7:17:ac:5c:f3:75:
         f9:78:46:74:dd:fd:f9:9e:74:ac:ef:c4:60:c9:16:c4:f2:83:
         ef:bb:9c:f6:9d:4a:00:49:a8:9e:c6:7a:90:8c:c8:d7:9f:3c:
         23:3a:af:a9:3f:e2:b0:44:c3:e5:34:42:7f:54:2a:26:b5:71:
         71:49:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org