Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa
File:                     3134332e3235352e302e302f32332d3233203d3e20323635313430.roa (raw, json)
Hash identifier:          HttFe8yNn9WHrVRt1Y5oR53KEFGFv+OmmKtPKtCo4QM=
Subject key identifier:   EE:1B:AE:C4:2B:35:62:EC:9C:31:E1:12:51:9D:EB:9A:EF:7F:08:11
Certificate issuer:       /CN=D7D91C254433170BCBEE3E88D95242D23B207E56
Certificate serial:       11299477B8253F801CA31B4735986574A099A470
Authority key identifier: D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D91C254433170BCBEE3E88D95242D23B207E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa
Signing time:             Mon 29 Jan 2024 14:25:15 +0000
ROA not before:           Mon 29 Jan 2024 14:20:15 +0000
ROA not after:            Mon 27 Jan 2025 14:25:15 +0000
asID:                     265140
IP address blocks:        143.255.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:94:77:b8:25:3f:80:1c:a3:1b:47:35:98:65:74:a0:99:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D91C254433170BCBEE3E88D95242D23B207E56
        Validity
            Not Before: Jan 29 14:20:15 2024 GMT
            Not After : Jan 27 14:25:15 2025 GMT
        Subject: CN=EE1BAEC42B3562EC9C31E112519DEB9AEF7F0811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:99:eb:24:4c:db:a6:67:1d:77:c1:41:22:
                    38:76:f3:47:28:f8:79:f9:22:06:37:cd:1a:eb:4c:
                    19:2a:d7:f4:84:2e:5a:b7:3d:43:89:28:1f:a5:2c:
                    1b:87:69:2b:e8:24:96:d9:1d:fe:7d:09:39:c4:ec:
                    c8:5e:f2:56:e2:b1:ff:7b:9c:73:f7:cd:0e:50:cb:
                    b6:f6:e8:47:a2:ba:e7:8e:1c:43:3f:93:e0:d3:73:
                    b6:9c:95:fc:d2:67:01:de:4c:ff:65:40:56:7c:08:
                    9a:38:27:00:d6:b3:e0:6d:46:21:95:be:a2:e0:e1:
                    2c:cc:bf:69:93:de:fb:38:c1:58:5e:7f:9d:5b:ff:
                    dc:e6:b8:2a:f8:ce:6d:e2:b8:56:f6:02:84:62:75:
                    4c:9e:19:b7:88:70:a0:ec:5e:0a:03:3b:8a:11:d4:
                    d8:85:35:10:18:8e:1b:cf:0e:53:77:d2:3f:64:01:
                    ed:06:84:e6:a7:85:9a:a8:a2:6c:68:6c:e9:0f:ad:
                    7c:34:8d:3e:35:43:30:64:b0:9f:ce:09:53:e1:bf:
                    39:38:8d:b6:e1:8e:c0:f8:39:e6:fb:ab:ed:00:f8:
                    01:01:85:6e:e0:a7:77:fd:0c:d0:e7:26:24:9c:19:
                    0c:89:79:b1:16:55:62:59:5e:67:c4:7c:61:6c:1e:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:AE:C4:2B:35:62:EC:9C:31:E1:12:51:9D:EB:9A:EF:7F:08:11
            X509v3 Authority Key Identifier:
                keyid:D7:D9:1C:25:44:33:17:0B:CB:EE:3E:88:D9:52:42:D2:3B:20:7E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/D7D91C254433170BCBEE3E88D95242D23B207E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D91C254433170BCBEE3E88D95242D23B207E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32332d3233203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:ea:7d:d9:59:1f:96:94:97:c3:a7:ee:36:68:35:17:cb:ba:
         45:3b:36:7c:79:69:ed:22:cf:fb:1b:1f:bd:42:e7:ac:aa:aa:
         1f:69:37:43:12:f1:fd:5f:14:2b:f1:df:85:a1:2d:71:33:41:
         26:69:42:83:e0:11:e9:35:22:d8:9e:9c:ec:a2:2b:10:d9:2e:
         8f:82:a1:63:d2:f2:0a:94:93:d5:28:5f:ff:33:f3:eb:bd:c1:
         fb:ff:43:97:47:0d:e4:b4:0f:f9:8e:0f:87:5c:26:92:2c:aa:
         bb:6c:36:b6:b5:2e:ec:f3:3a:b0:1e:66:a5:c4:6f:59:f0:db:
         f2:c6:6c:3a:18:7f:93:a5:2d:cd:5e:69:a0:86:a9:13:32:54:
         4c:09:24:cd:f1:b1:0e:de:ef:60:5c:2a:3b:6c:5a:8a:7a:70:
         90:24:c6:c7:e4:19:1b:68:b4:0f:59:68:80:5d:c1:41:82:b6:
         52:b1:49:2e:34:75:f7:df:e4:2f:1b:fd:f3:2d:d2:1b:9b:1f:
         89:d9:ff:89:3c:21:65:b1:9d:17:33:90:9d:ba:da:34:4c:8c:
         91:2d:0c:ea:8a:06:c2:db:1d:c7:80:3e:b3:21:20:63:ea:c6:
         6b:e6:85:b2:c0:72:72:6c:f3:a4:bd:47:d7:12:ea:0f:68:bf:
         25:b4:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org