Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa
File:                     3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          Hbg3KywpKgC7tSN4T7V+VxvP7RtrVLQu0x2ClpHnPkA=
Subject key identifier:   35:CA:F7:35:D5:F6:CC:95:0C:12:BD:6C:C3:85:02:5C:B4:98:42:C7
Certificate issuer:       /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial:       707437E9032A6DBCB10BA85235025800196404E5
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 23 Jan 2023 21:42:20 +0000
ROA not before:           Mon 23 Jan 2023 21:37:20 +0000
ROA not after:            Mon 22 Jan 2024 21:42:20 +0000
asID:                     271724
IP address blocks:        143.255.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:37:e9:03:2a:6d:bc:b1:0b:a8:52:35:02:58:00:19:64:04:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Validity
            Not Before: Jan 23 21:37:20 2023 GMT
            Not After : Jan 22 21:42:20 2024 GMT
        Subject: CN=35CAF735D5F6CC950C12BD6CC385025CB49842C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:81:53:8f:5e:1a:aa:d5:0e:f1:4e:de:e6:
                    39:77:01:7d:46:e7:3a:ee:12:cf:ee:b8:f7:be:6d:
                    88:ab:be:c8:59:b2:89:23:2c:90:89:de:01:2f:d7:
                    fc:42:08:01:38:7e:4d:c3:55:80:dd:79:85:e4:82:
                    35:b5:26:1b:41:e2:0d:06:83:51:79:7b:e7:21:64:
                    9b:3d:66:f3:f4:59:33:01:b3:ce:bc:49:2f:56:96:
                    37:5a:a7:e5:21:d2:23:2e:36:6c:29:40:67:48:92:
                    11:d8:66:a6:d9:d7:af:fa:b7:ba:74:c7:f7:00:f4:
                    04:b9:35:2f:42:85:cf:fa:15:70:51:ba:54:40:04:
                    06:67:83:ce:43:20:c1:c1:89:03:25:fc:ae:1e:79:
                    dc:e3:71:96:65:8d:c9:dc:98:ee:e3:7a:16:90:c2:
                    7a:4b:95:76:71:c7:23:a0:dd:fd:cc:bd:90:0f:34:
                    8a:e1:4b:14:83:59:85:16:21:ee:f4:b6:be:2f:d4:
                    fb:0d:4a:31:c5:7e:9a:fb:2b:f1:a7:a4:0d:21:da:
                    75:e6:98:b5:1c:ca:f1:9b:2a:8d:d5:83:9e:5d:96:
                    a0:32:d7:bc:a8:8b:82:d6:f7:65:3d:68:d6:c4:1f:
                    92:a7:79:13:f3:b7:c6:4d:ec:13:71:15:19:7e:de:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CA:F7:35:D5:F6:CC:95:0C:12:BD:6C:C3:85:02:5C:B4:98:42:C7
            X509v3 Authority Key Identifier:
                keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/3134332e3235352e3131322e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:16:cf:31:9d:1e:ce:f8:a4:85:ea:9c:5a:20:34:3a:79:
         fb:5a:98:d6:5f:3a:f4:b3:ed:3a:f0:bc:27:ef:7e:49:12:5e:
         9c:30:8b:49:f8:5e:c8:cc:9e:e8:ab:6f:07:e9:d9:c5:96:87:
         d9:3b:bc:b1:74:20:dd:e1:60:09:3e:c7:e5:57:de:a2:39:68:
         d3:ac:73:a2:63:ce:57:f1:df:68:53:d3:23:36:08:94:e4:32:
         da:53:7c:7d:65:28:64:49:78:99:6a:52:4f:6e:1e:f7:55:12:
         ca:1f:2f:41:2a:3f:d9:c7:b1:77:15:c7:02:2b:58:71:b8:c4:
         db:89:81:14:90:d9:56:d2:07:8f:c2:d1:48:4a:1b:e2:0f:f4:
         af:b3:73:bb:78:a4:99:6d:62:7d:e3:4e:a4:00:67:d7:b7:b0:
         99:07:d4:86:7b:d1:b4:e3:1a:67:e9:38:8b:2c:04:12:b1:1c:
         a9:40:e4:ab:b3:44:3e:cd:42:bb:53:8d:34:f7:10:64:53:8b:
         56:37:16:3f:ca:c6:e9:98:1c:cf:19:9d:07:b2:bd:04:09:64:
         6e:7b:5b:44:e4:39:c7:69:c6:19:8d:24:36:10:4c:1d:d4:87:
         53:67:dd:56:e6:f4:d0:20:dc:bb:2d:b8:0a:85:d6:83:a3:bc:
         89:75:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org