Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
File:                     3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (raw, json)
Hash identifier:          ZyS9fgHApLRhkDvKp0QuSr+CPC8QDImhw648G0yNriw=
Subject key identifier:   60:C7:35:63:A0:4D:C3:D5:B1:25:17:C0:4F:9C:4D:D4:DE:8E:2C:37
Certificate issuer:       /CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
Certificate serial:       2BFDC5C9C54A2D8559725D469B54AEC7D445CA0B
Authority key identifier: D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
Signing time:             Thu 15 Jun 2023 08:52:25 +0000
ROA not before:           Thu 15 Jun 2023 08:47:25 +0000
ROA not after:            Thu 13 Jun 2024 08:52:25 +0000
asID:                     264186
IP address blocks:        143.0.188.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:c5:c9:c5:4a:2d:85:59:72:5d:46:9b:54:ae:c7:d4:45:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D543789826C11DFADC822D25F10DB64BE2AA4B3E
        Validity
            Not Before: Jun 15 08:47:25 2023 GMT
            Not After : Jun 13 08:52:25 2024 GMT
        Subject: CN=60C73563A04DC3D5B12517C04F9C4DD4DE8E2C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2e:b6:85:6a:d4:58:f7:67:b9:0b:ba:69:3c:
                    d8:07:c2:c3:50:8d:05:44:c6:b6:b9:3f:df:c6:48:
                    4e:e3:02:57:27:1d:75:4c:31:e3:43:95:af:08:41:
                    b4:6a:b3:8f:90:dd:44:4e:33:4b:f4:16:93:f1:2c:
                    39:1f:32:0f:40:03:72:13:09:b1:09:9b:f4:1c:46:
                    b7:f0:88:a3:5b:0a:c2:32:6d:35:3d:2c:20:ac:87:
                    64:0a:a1:37:4f:4b:40:8a:0b:78:fa:84:91:99:0f:
                    49:b5:86:28:fd:0a:8d:c4:6d:3f:f6:70:d7:b8:a1:
                    2b:32:7d:9b:ad:66:11:80:35:69:2b:38:a0:20:f0:
                    0b:32:ea:4d:70:9d:0f:1c:ad:03:a0:25:0a:4f:68:
                    8d:3d:94:c5:7a:cf:3e:f7:9e:c1:4c:af:fb:4b:1f:
                    0d:aa:65:48:7d:91:23:50:05:b0:b2:c1:05:a5:4b:
                    8e:37:be:74:23:91:77:7c:a2:c3:10:98:65:bd:61:
                    14:b2:e1:df:bd:ae:63:47:e1:d7:76:45:7d:af:36:
                    7c:e3:3a:89:22:40:e4:f6:30:e3:23:22:75:4a:82:
                    7b:14:b1:fd:4a:00:97:73:06:a9:b1:82:f8:7d:85:
                    b6:be:d3:94:84:1e:f0:ba:33:75:16:19:08:f4:27:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C7:35:63:A0:4D:C3:D5:B1:25:17:C0:4F:9C:4D:D4:DE:8E:2C:37
            X509v3 Authority Key Identifier:
                keyid:D5:43:78:98:26:C1:1D:FA:DC:82:2D:25:F1:0D:B6:4B:E2:AA:4B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D543789826C11DFADC822D25F10DB64BE2AA4B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:19:84:af:38:92:8f:80:ec:58:a2:63:6e:a5:41:9b:01:16:
         c8:08:8a:f2:8e:93:86:41:95:d3:49:9f:bc:d2:7f:2b:0c:29:
         be:29:f3:25:32:b8:d0:ad:8c:05:06:5c:c0:6a:8a:9c:d6:ed:
         55:f8:ce:ca:af:69:c5:e9:84:c9:c6:3d:85:55:c5:0d:9a:29:
         72:fe:b4:b9:e8:f8:1c:02:22:b6:18:1a:72:75:43:92:2b:4b:
         38:b2:dc:78:e1:db:d0:5d:16:33:b9:b4:52:55:0c:80:8a:52:
         97:99:05:1e:f8:22:a6:f5:f2:cb:5c:38:45:43:7c:ab:b8:c9:
         90:71:e4:3b:0f:3e:fe:a2:9f:3c:d4:59:14:56:13:39:9e:2c:
         8d:33:91:9a:ed:a7:f4:95:64:06:11:1a:dc:52:4c:89:cb:a8:
         7c:d9:b9:19:03:d8:f0:08:aa:1d:84:fd:a6:0a:85:94:f2:ee:
         ec:86:81:a4:6d:f2:97:8c:5e:25:7f:d4:4e:05:6f:ad:78:1a:
         7f:31:23:2d:93:a1:a1:aa:e6:c8:90:c6:57:03:8d:ca:43:54:
         48:88:ca:19:44:a5:e3:36:de:9b:55:0e:87:9a:80:bc:19:3f:
         e9:e3:51:25:82:09:c0:d1:0d:c8:e8:63:8d:f5:2f:6b:6c:2c:
         c9:87:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:55 2025 by rpki-client