Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3134332e35342e302e302f31362d3136203d3e203139323030.roa
File:                     3134332e35342e302e302f31362d3136203d3e203139323030.roa (raw, json)
Hash identifier:          izehsBKJNL4/1wcEamfIh/kbYX48G4z+pvlLTpT7Gl4=
Subject key identifier:   72:4F:40:32:87:E9:D6:81:47:D2:E1:11:36:2D:BC:F0:83:D7:0B:7D
Certificate issuer:       /CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
Certificate serial:       76C68C7EB152831EF98BDB31689D2D489E412DEF
Authority key identifier: EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3134332e35342e302e302f31362d3136203d3e203139323030.roa
Signing time:             Fri 30 Jun 2023 19:00:00 +0000
ROA not before:           Fri 30 Jun 2023 18:55:00 +0000
ROA not after:            Fri 28 Jun 2024 19:00:00 +0000
asID:                     19200
IP address blocks:        143.54.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c6:8c:7e:b1:52:83:1e:f9:8b:db:31:68:9d:2d:48:9e:41:2d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECEBEB7C0E0F4639015227747394BADA3C6E75D5
        Validity
            Not Before: Jun 30 18:55:00 2023 GMT
            Not After : Jun 28 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3f:2d:60:06:57:09:b5:9e:49:c2:d0:b4:77:
                    de:ef:3f:52:16:0b:a7:7e:c4:38:c7:ef:0f:d0:75:
                    7f:92:b8:96:d8:07:69:f6:bf:71:c9:af:fb:37:80:
                    c7:c9:69:a9:12:43:5e:53:f9:95:e0:89:81:64:6a:
                    85:f7:c8:81:f2:2d:14:fe:d1:97:11:f6:07:d4:a6:
                    1c:78:09:03:5c:35:81:aa:80:00:e1:f6:b0:e4:62:
                    0d:2b:41:20:5e:24:b2:bf:97:bf:14:4c:c2:57:87:
                    e6:64:a1:96:2a:e9:37:c7:06:80:01:87:8b:15:d3:
                    2d:49:07:ac:86:a7:3a:37:72:b7:aa:59:bb:2c:a3:
                    df:3b:62:92:75:35:c8:cf:79:d8:25:10:b1:ae:0a:
                    55:f5:a6:25:58:fd:d5:4d:b9:db:13:97:20:f7:41:
                    dd:57:97:39:ff:47:93:1a:75:71:31:8c:b6:30:4d:
                    34:09:40:d4:c8:43:7d:e6:f3:ba:51:78:11:8f:ba:
                    ed:c0:2d:53:c3:9c:f2:4f:36:71:8e:b1:b0:b2:e8:
                    4f:d9:c0:2d:13:b7:ad:18:8b:f6:5d:89:e1:4c:7f:
                    de:c2:b7:65:cf:40:22:fb:c6:6f:10:d3:05:75:bc:
                    3d:5a:f3:d0:aa:2a:97:fa:b8:4d:70:bb:23:c3:b9:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:40:32:87:E9:D6:81:47:D2:E1:11:36:2D:BC:F0:83:D7:0B:7D
            X509v3 Authority Key Identifier:
                keyid:EC:EB:EB:7C:0E:0F:46:39:01:52:27:74:73:94:BA:DA:3C:6E:75:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECEBEB7C0E0F4639015227747394BADA3C6E75D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3134332e35342e302e302f31362d3136203d3e203139323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:27:68:28:ef:f7:44:76:44:ad:72:a7:3a:52:30:6e:ff:
         1d:36:3d:89:cc:e0:2a:cd:8c:3a:3a:e0:86:8f:33:9a:c8:3c:
         f2:a3:83:e8:fd:4b:44:04:d9:5f:61:9a:99:7e:c3:95:0b:3f:
         0a:47:e8:d0:c3:46:fe:d1:8e:68:50:52:ff:06:18:8d:12:45:
         5d:6e:61:8a:05:5e:ba:ef:82:2a:7a:91:e0:80:15:a2:12:cc:
         8b:6d:8c:48:6a:ef:a6:e9:29:da:bc:93:2c:3a:33:d6:ce:e6:
         3c:c4:27:87:74:ec:d2:de:11:c8:d9:89:7e:52:73:32:bf:bd:
         2d:ae:15:d6:fc:c2:84:57:93:88:d0:bc:99:24:24:3a:93:71:
         3c:1f:de:fc:65:f9:7e:fe:d1:39:89:95:a5:fa:9a:da:20:51:
         e7:bd:3b:10:b2:8b:76:42:ab:e7:ef:c0:99:89:eb:35:45:0b:
         c5:99:11:ce:44:e7:39:84:27:a9:3f:09:1e:17:b1:66:22:7d:
         8e:d8:94:92:c6:5a:33:f2:e1:7d:e3:61:35:ab:f6:60:7c:e9:
         a8:d7:c7:01:84:f4:55:65:1d:ba:ee:29:17:f0:b9:9e:09:21:
         ec:74:0b:63:74:da:81:7b:6c:90:5d:e9:1c:a1:de:40:65:fc:
         22:88:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org