Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa
File:                     3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          FlROM2G3OOJ4/j3fmBwBZtYv/IU+fO4MPD6hKD5I5OA=
Subject key identifier:   67:74:5F:C7:73:00:AF:AD:FD:52:AE:27:75:FA:EB:61:C2:E9:20:9D
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       4ADC58319C8E41836A2CE276E8A44E344D904B6A
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa
Signing time:             Tue 12 Mar 2024 16:30:44 +0000
ROA not before:           Tue 12 Mar 2024 16:25:44 +0000
ROA not after:            Tue 11 Mar 2025 16:30:44 +0000
asID:                     264025
IP address blocks:        143.137.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dc:58:31:9c:8e:41:83:6a:2c:e2:76:e8:a4:4e:34:4d:90:4b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 12 16:25:44 2024 GMT
            Not After : Mar 11 16:30:44 2025 GMT
        Subject: CN=67745FC77300AFADFD52AE2775FAEB61C2E9209D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:98:34:8c:f6:b1:3a:85:ad:53:e5:eb:7b:
                    f9:b1:a6:02:b9:35:95:8c:d1:4d:1e:78:12:cb:85:
                    26:3a:52:3f:80:ff:14:cb:1a:3d:08:be:2b:45:09:
                    50:89:5a:31:61:22:7b:56:48:2d:3d:ee:e4:3c:42:
                    b2:0e:e5:20:95:ca:7a:41:85:24:b1:a5:9a:1b:da:
                    d4:54:2c:65:6f:2b:53:ea:02:e7:a2:8b:20:97:93:
                    77:85:bd:57:34:a5:a7:b5:b4:a1:5f:9f:53:c9:6f:
                    32:2e:9c:79:03:54:4e:f1:c8:e9:ee:78:f2:fe:d1:
                    e1:44:80:2e:75:3e:ff:53:0e:6d:8c:44:29:0d:c1:
                    87:de:39:4e:c6:7e:90:ab:da:c2:e0:c2:15:3e:f4:
                    da:65:1d:90:f8:bb:a4:1f:c1:a2:b6:e0:ba:a7:97:
                    ea:9b:05:0f:5e:49:01:16:7f:91:af:33:5c:10:f6:
                    7d:7a:fe:ac:5f:80:71:f4:0d:e8:d2:d2:92:88:b1:
                    be:f9:f2:59:58:58:0f:14:cc:ed:11:7a:ce:01:79:
                    d7:0d:84:18:5f:8f:a0:df:4a:fa:60:64:77:c7:9a:
                    d0:9f:8f:e5:58:9c:09:4d:3b:08:df:a7:db:61:24:
                    60:4f:79:8d:bb:5f:e4:5d:a2:6f:38:47:86:0c:8a:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:5F:C7:73:00:AF:AD:FD:52:AE:27:75:FA:EB:61:C2:E9:20:9D
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:bc:4c:a0:19:62:3c:e0:db:fd:ea:b0:78:b4:71:a2:be:
         ca:46:e5:be:7e:52:54:b1:50:b1:2f:19:52:4b:99:a4:62:c8:
         6c:c1:e8:0d:79:2b:dc:2e:ae:d6:9d:96:2d:4d:0d:20:ac:6f:
         42:04:0e:9c:a2:8b:ad:41:e0:00:f9:5e:33:bb:12:0b:f2:84:
         61:69:64:fd:27:a5:fe:04:03:29:b1:4e:16:cc:20:67:f1:24:
         46:b0:f5:d1:f3:e1:2d:bb:25:5a:57:97:60:31:e3:b0:ee:a1:
         ff:35:aa:08:39:95:c1:a3:d1:b8:c6:31:dd:e4:3f:c0:b2:57:
         9b:fa:4b:9e:14:8e:21:d7:b8:df:05:a8:0f:52:8f:96:5e:88:
         86:55:cc:59:13:8c:aa:a8:28:40:5f:37:2f:7a:7e:f5:58:71:
         50:cc:c4:21:2b:a6:0c:1a:9d:c8:19:03:8f:fe:d4:db:46:4a:
         fe:dd:84:ef:fc:a9:98:08:3b:db:9b:cd:f2:c9:f4:c4:5f:4b:
         e6:42:9f:3b:3e:c6:74:4b:f5:f1:d0:bd:1f:23:dc:8f:38:3a:
         f8:88:b3:26:ef:76:f1:7a:a4:af:de:6e:75:24:3d:b4:df:7d:
         73:f2:2e:87:37:1c:81:f1:d5:1d:cf:10:fd:aa:42:04:8e:c0:
         15:14:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org