Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa
File:                     3134332e3235352e302e302f32342d3234203d3e20323635313430.roa (raw, json)
Hash identifier:          jc61JADlCnO4yqIvp/BisIksA/G0oH1GcES5M2Lht38=
Subject key identifier:   8B:7E:EC:32:88:33:E6:A9:EC:25:E0:27:0A:4C:04:8B:CC:A6:93:68
Certificate issuer:       /CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
Certificate serial:       398F034C7B97394689598D01A751FBCD00940FF8
Authority key identifier: 51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa
Signing time:             Thu 22 Feb 2024 13:40:43 +0000
ROA not before:           Thu 22 Feb 2024 13:35:43 +0000
ROA not after:            Thu 20 Feb 2025 13:40:43 +0000
asID:                     265140
IP address blocks:        143.255.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8f:03:4c:7b:97:39:46:89:59:8d:01:a7:51:fb:cd:00:94:0f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116EB855CD239DCD4FE641CE53B61BA406A6AB8
        Validity
            Not Before: Feb 22 13:35:43 2024 GMT
            Not After : Feb 20 13:40:43 2025 GMT
        Subject: CN=8B7EEC328833E6A9EC25E0270A4C048BCCA69368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:43:7a:23:e1:d9:81:4a:62:9f:70:e8:d8:
                    aa:32:df:24:0a:5a:4b:18:a3:86:a2:73:c0:9d:8f:
                    c7:ed:95:4e:12:a0:20:e9:68:3d:47:fa:fe:8a:90:
                    74:0f:74:e4:cf:58:1f:af:71:33:0e:20:21:d4:01:
                    31:cb:0f:bd:de:0f:4f:97:de:69:16:7f:5d:1b:69:
                    fd:45:3f:91:ed:9e:09:23:2e:02:ce:c4:c0:14:53:
                    53:7e:12:07:e1:92:2a:ed:d1:48:ab:14:97:db:8b:
                    5f:7d:35:d2:67:79:8e:c2:61:8f:d5:da:08:b7:1c:
                    de:44:88:2d:ba:89:b5:a3:22:d1:bb:b3:af:38:33:
                    3e:71:71:72:09:a8:f2:54:62:2b:cf:c0:ee:45:95:
                    93:b3:61:b0:d2:f9:4a:40:58:6e:c3:ec:18:52:a8:
                    d7:fd:8e:8b:d8:75:f0:12:35:84:67:b6:ef:3b:91:
                    e8:ff:a6:2e:95:a4:d8:fa:3f:ad:9a:19:9b:9a:34:
                    d6:b7:a6:26:82:55:07:ad:4f:48:70:e8:0b:22:59:
                    48:46:48:52:1b:ee:16:50:f2:99:25:a7:29:a2:39:
                    7c:c1:a5:fc:8f:0e:4a:70:e5:d4:ef:b5:e8:dc:0f:
                    1d:9b:93:ae:f3:db:62:85:6c:94:49:91:55:ad:ce:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7E:EC:32:88:33:E6:A9:EC:25:E0:27:0A:4C:04:8B:CC:A6:93:68
            X509v3 Authority Key Identifier:
                keyid:51:16:EB:85:5C:D2:39:DC:D4:FE:64:1C:E5:3B:61:BA:40:6A:6A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5116EB855CD239DCD4FE641CE53B61BA406A6AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:56:2d:1f:e3:b6:75:37:cb:5f:b1:e9:b8:f1:53:db:b2:43:
         1f:3b:7c:d2:24:02:b7:70:3e:74:3d:31:71:22:c6:6f:82:54:
         60:24:36:fb:49:14:31:38:84:e8:e0:a7:e5:33:af:7b:19:80:
         11:7b:d9:3a:9b:d9:e0:5c:52:8b:cc:5e:cf:1d:c2:7a:94:7f:
         c8:bb:d5:8b:d0:e9:0a:45:29:91:1b:f6:c7:ed:b9:ef:07:53:
         d3:cd:7e:44:2f:7d:95:bb:4f:e5:69:e3:78:c4:28:63:40:aa:
         8e:a4:75:b4:a8:30:c7:bb:06:51:ea:a5:c1:03:06:ce:64:9e:
         ca:b1:11:99:0e:ce:34:ff:8d:a3:c0:7a:89:07:16:7d:c9:b8:
         a5:7f:1e:f8:5f:b8:fa:48:6e:88:f8:38:cd:cb:ae:b2:d9:a7:
         e1:be:c7:4b:2f:28:ff:6f:52:8b:9d:fb:5a:1a:94:e4:b0:82:
         72:46:7a:1b:72:89:0f:44:29:60:d4:07:b4:d1:1f:4c:1e:7a:
         8e:15:65:4d:9a:11:90:22:41:77:e1:8c:0f:ee:71:8e:9a:22:
         50:b6:47:26:96:c5:b1:da:89:18:41:5a:82:e0:44:58:6c:47:
         b5:60:4d:9a:49:77:22:ca:07:37:e2:d1:10:25:74:bc:d1:aa:
         f0:52:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:51 2024 by rpki-client on console-fra.rpki-client.org