Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3233203d3e20323635313430.roa
File:                     3134332e3235352e302e302f32322d3233203d3e20323635313430.roa (raw, json)
Hash identifier:          +0kzkTROodkMLPbuy8YwzU0W1T0rWDonPURej6fEQCs=
Subject key identifier:   9F:59:D7:F0:2E:01:00:20:01:EA:76:CE:62:59:49:A6:22:F4:AF:AF
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       49970EEFEA3F2FED9E35AF6D70716C317F3775E0
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3233203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:40:29 +0000
ROA not before:           Thu 22 Feb 2024 13:35:29 +0000
ROA not after:            Thu 20 Feb 2025 13:40:29 +0000
asID:                     265140
IP address blocks:        143.255.0.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:97:0e:ef:ea:3f:2f:ed:9e:35:af:6d:70:71:6c:31:7f:37:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:35:29 2024 GMT
            Not After : Feb 20 13:40:29 2025 GMT
        Subject: CN=9F59D7F02E01002001EA76CE625949A622F4AFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b2:d7:6b:3f:75:8f:6d:26:b9:b3:86:19:5a:
                    2c:ad:59:1a:d8:02:74:a3:40:e0:78:68:28:f0:7b:
                    a5:59:a8:a1:09:ff:61:63:a3:bc:aa:5c:7c:7a:61:
                    f3:93:96:98:b4:40:0f:7f:4b:46:ef:43:ed:59:92:
                    30:0c:d4:8d:84:77:4b:0a:ff:96:0c:50:38:37:56:
                    da:85:26:52:7c:49:9c:b2:ce:33:3b:c4:3e:8a:b2:
                    47:28:a3:7d:01:d3:9b:da:55:fc:81:09:dc:82:e0:
                    af:4d:f7:ca:e8:b0:59:a9:81:69:61:89:94:fd:57:
                    0f:4c:78:77:cd:dc:11:f6:da:fb:ed:74:dd:cb:09:
                    01:e1:e4:f9:24:b3:d9:f7:75:5a:7c:fd:da:81:82:
                    54:a0:bc:05:74:14:7d:5e:85:46:4d:1d:ec:64:13:
                    79:12:c7:83:23:b4:0e:00:60:37:49:06:19:50:60:
                    5e:cb:d3:74:c2:20:80:3c:91:44:aa:a7:9a:bf:38:
                    fb:e7:15:15:01:24:6f:55:b8:ae:98:c6:e4:d9:2f:
                    e9:c4:84:8c:e6:28:f8:34:8d:35:be:b6:80:e6:35:
                    72:1c:21:55:77:c3:4a:e0:04:af:5d:ca:ec:c7:ac:
                    8c:1c:a4:c0:21:71:e4:31:0e:4e:20:be:4a:73:e6:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:D7:F0:2E:01:00:20:01:EA:76:CE:62:59:49:A6:22:F4:AF:AF
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3233203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:d5:ee:ea:7e:b3:bb:6c:ee:9c:75:33:a7:45:76:ab:3b:
         7a:69:9f:25:e9:08:85:60:0b:56:19:00:80:1b:2e:79:8b:11:
         7c:e8:36:f6:54:86:30:95:55:ca:4e:c8:d2:8a:7e:57:f6:2e:
         7a:12:c9:aa:aa:45:48:3b:50:44:9b:8a:e8:37:d9:63:ec:dd:
         ce:d8:cd:ec:df:07:dc:6b:3a:23:0d:20:d9:58:d0:03:09:11:
         d6:d0:a4:d2:b6:6b:91:ba:28:9c:05:48:87:c4:c0:72:0c:97:
         95:2a:da:c5:16:31:51:c7:6b:5b:5e:08:b5:b3:94:1c:b0:f6:
         cd:b8:e1:db:b5:e6:22:0b:85:26:79:b7:11:bd:fc:35:4a:f4:
         e8:63:ce:be:e9:91:85:20:ee:8c:31:26:bc:bb:b7:0f:05:5b:
         30:4e:22:fd:54:b7:18:f2:5c:0a:4f:9c:35:54:dc:39:eb:1a:
         9d:83:e4:ba:46:89:c6:7d:20:aa:fd:52:e7:af:52:e1:f2:a5:
         a0:1c:6a:86:c3:a4:88:74:82:8f:69:53:d4:ec:bb:9b:a8:db:
         26:4a:fd:45:c7:88:15:20:7b:3e:c0:66:7d:ac:22:45:83:5d:
         59:8d:d4:a8:f6:9b:a2:21:09:ae:3a:fe:f0:e8:b2:3b:79:7a:
         3f:0d:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org