Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3134332e3235352e3130302e302f32322d3234203d3e203238313436.roa
File:                     3134332e3235352e3130302e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          GuGtT8OBRvdJhQKvtm3U6x944jh/LDKCsI3JCy/IYrE=
Subject key identifier:   7B:7D:7D:B5:59:EE:E1:1C:3E:48:92:D4:CD:7F:44:0D:5D:C8:00:E4
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       02FCBD6F4A77FF1672B69E3CDD0AC3FD075F0F6E
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3134332e3235352e3130302e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:46 +0000
ROA not before:           Wed 21 Dec 2022 17:11:46 +0000
ROA not after:            Wed 20 Dec 2023 17:16:46 +0000
asID:                     28146
IP address blocks:        143.255.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fc:bd:6f:4a:77:ff:16:72:b6:9e:3c:dd:0a:c3:fd:07:5f:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:46 2022 GMT
            Not After : Dec 20 17:16:46 2023 GMT
        Subject: CN=7B7D7DB559EEE11C3E4892D4CD7F440D5DC800E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:35:0f:60:a8:81:30:43:94:7b:6b:5f:3e:
                    67:ad:a3:cb:de:cf:12:f6:e3:a6:39:c6:28:95:41:
                    33:0f:e5:e7:06:81:53:51:fb:93:ad:d5:5c:41:b0:
                    c8:cb:5b:78:bf:48:46:6a:5b:80:5b:8d:66:06:79:
                    03:b5:b1:cc:18:5b:1c:51:16:86:ee:87:14:24:cb:
                    22:6e:60:37:4a:59:be:9a:ec:b1:07:11:e7:16:4a:
                    27:5b:38:16:1e:ec:7c:42:ca:15:24:59:a4:93:a7:
                    40:d0:f7:f5:ce:64:f8:01:58:2c:e2:6e:3a:5e:32:
                    81:54:f9:e4:dc:b8:a1:89:86:e3:ca:39:2e:0c:b1:
                    d5:c9:d4:dc:8d:da:dc:17:3d:fe:18:e2:22:8f:b9:
                    3e:b5:07:cb:b4:10:46:7f:5e:a4:68:84:74:ac:93:
                    b1:b2:10:7f:67:1d:f8:74:9e:11:1f:66:29:aa:92:
                    9a:36:96:03:bd:3c:e7:2a:52:29:a4:97:3a:5a:c0:
                    d2:f2:65:4f:98:16:91:da:22:75:6c:69:b0:a1:ec:
                    c9:b6:f1:3d:30:d4:28:09:46:32:45:e2:3c:60:4c:
                    9f:13:10:c4:76:d1:5f:b2:97:94:34:5e:49:c0:23:
                    00:d9:18:ec:a6:ae:3a:5c:02:15:97:e4:23:36:6b:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:7D:B5:59:EE:E1:1C:3E:48:92:D4:CD:7F:44:0D:5D:C8:00:E4
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3134332e3235352e3130302e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:78:f5:ff:e0:29:2a:ad:37:c9:4d:96:bf:c5:2a:50:e6:97:
         2c:00:92:a3:e9:11:32:71:1a:cd:fe:60:b6:fe:47:6e:0e:eb:
         92:0c:b8:16:70:39:be:c4:52:73:1e:6b:38:7b:1c:c6:4d:3f:
         15:64:ae:c3:1f:bf:ee:89:f2:f8:67:ef:6a:0f:14:d6:6a:46:
         16:03:32:70:db:fb:10:62:f0:5d:57:4c:bd:c2:14:52:24:1e:
         d5:36:04:72:f8:7d:5b:03:b8:7e:d9:a7:6d:a8:d1:02:ca:c6:
         ee:d9:21:f8:db:6b:54:a0:9a:5f:4f:b5:37:09:88:26:12:24:
         07:82:ef:8e:d7:3e:fb:5a:5b:6a:e2:d4:c5:04:c3:3e:46:18:
         bf:1e:3e:09:f7:9d:95:4c:28:1f:d6:45:2c:b9:9a:29:fe:86:
         4e:88:bc:6e:c3:82:e6:55:70:7e:8a:9a:ef:71:9b:59:60:a0:
         56:99:c5:30:3f:56:6b:d7:98:20:67:d6:89:aa:19:42:a0:27:
         8b:80:ed:92:e8:7d:fd:dd:01:4c:2b:35:41:05:d5:e8:0d:20:
         67:f8:7f:2e:4c:4a:08:03:08:db:f6:bb:c5:04:32:69:14:67:
         20:41:d9:d5:69:55:cb:81:37:47:70:b5:63:fe:72:d7:9e:7a:
         8f:34:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org