Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa
File:                     3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa (raw, json)
Hash identifier:          enfz2aKJAsq03BLnqh4BF28hAC4ZpTk3dWIx1a0Ulfw=
Subject key identifier:   4E:E8:20:D0:C0:6D:C1:8D:02:A9:79:1D:30:AB:D5:B3:41:4E:E4:8F
Certificate issuer:       /CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
Certificate serial:       2F38B345105585C7554761015334963043D1AE76
Authority key identifier: 8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa
Signing time:             Mon 16 Oct 2023 17:00:00 +0000
ROA not before:           Mon 16 Oct 2023 16:55:00 +0000
ROA not after:            Mon 14 Oct 2024 17:00:00 +0000
asID:                     263530
IP address blocks:        143.137.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:38:b3:45:10:55:85:c7:55:47:61:01:53:34:96:30:43:d1:ae:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C4B870CE1B8CA58C4F05E954547788D89A7BDE1
        Validity
            Not Before: Oct 16 16:55:00 2023 GMT
            Not After : Oct 14 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:a9:84:d0:b2:49:1b:67:c1:bd:13:99:a3:
                    41:d5:66:d3:3d:0c:b1:8d:64:b4:0f:02:97:70:37:
                    39:4c:b9:ca:ad:27:eb:aa:06:d8:ee:53:fd:62:ea:
                    3f:5c:c9:fd:03:d8:42:0e:78:83:43:a4:61:88:07:
                    53:32:90:2c:0d:ea:93:5d:58:a4:0d:66:63:62:b7:
                    e5:ea:35:19:d5:5e:f2:8d:40:34:6d:77:2a:83:5e:
                    7e:94:b8:39:b3:7e:16:09:ce:d2:71:61:57:4d:6a:
                    12:cb:db:b4:96:d0:45:e2:70:a1:be:e7:72:a4:1b:
                    68:bd:e5:6c:9a:94:87:52:0d:8c:8a:20:2b:e6:03:
                    aa:81:f3:72:5e:c1:13:a2:02:0d:2c:4a:3e:ae:23:
                    31:0d:ba:1a:da:e0:c3:e8:99:93:d9:45:ef:47:d1:
                    e7:67:fe:4a:a0:5f:15:f4:d4:fc:06:6b:53:6f:fe:
                    90:e3:24:df:17:80:72:7e:ed:dc:32:82:3c:91:e7:
                    07:3f:7c:f9:a4:f4:90:57:94:a2:2e:7c:10:9f:d9:
                    c6:eb:12:db:aa:73:ad:16:8c:1e:9f:1d:31:f2:02:
                    7c:e8:e5:bd:27:1e:01:4c:a3:0b:45:5c:de:19:4b:
                    1b:dd:76:d8:99:7d:6a:69:3a:01:bd:b5:31:8c:e1:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:20:D0:C0:6D:C1:8D:02:A9:79:1D:30:AB:D5:B3:41:4E:E4:8F
            X509v3 Authority Key Identifier:
                keyid:8C:4B:87:0C:E1:B8:CA:58:C4:F0:5E:95:45:47:78:8D:89:A7:BD:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C4B870CE1B8CA58C4F05E954547788D89A7BDE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/0/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:fb:fa:a0:12:3a:c3:45:45:e6:b9:9f:a0:ef:ef:7e:92:
         ff:b7:bc:28:27:59:8c:08:fc:6f:27:7c:33:f3:0d:1d:2c:a3:
         11:f2:c4:e5:c5:d4:8e:a5:84:44:68:7d:1d:0b:08:12:ed:30:
         58:97:c9:67:d9:43:4a:66:2e:b2:03:48:97:20:60:67:d9:51:
         c9:4c:ec:6c:81:91:07:dc:61:35:d8:3c:7c:03:b1:c0:82:fc:
         a8:3d:e2:ba:ab:c9:34:3f:66:b5:66:82:75:ab:14:bd:15:fa:
         5c:56:72:1e:96:d3:80:68:8f:68:8c:a9:83:5f:fe:4a:62:72:
         8e:0e:63:06:ae:d8:5f:00:06:37:67:4e:24:a6:85:ea:5f:0c:
         9e:ae:5c:3d:14:a5:ad:c2:5f:6b:6d:0f:a6:dc:d6:6c:f1:87:
         a5:a4:8e:33:0a:d4:6d:c2:e2:17:eb:b0:41:b3:e5:03:07:68:
         f1:2c:73:07:69:71:e2:fb:38:7b:8c:c5:9e:92:d2:5a:c3:5e:
         86:70:75:5c:e7:c3:9e:98:e4:3e:69:6d:53:e5:55:9f:76:69:
         54:b1:c7:b4:a5:57:e6:89:80:39:85:f3:62:0b:a4:eb:f0:45:
         a9:25:5d:de:38:94:bd:15:60:fc:94:63:23:62:8f:b8:5d:7d:
         1d:ce:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org