Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa
File:                     3134332e3235352e302e302f32342d3234203d3e20323635313430.roa (raw, json)
Hash identifier:          IFafeSb9dsS/iliafoy9naHYY99zneZ7xLOIcE2JU/M=
Subject key identifier:   56:7A:ED:7A:A4:69:AC:C1:F2:CE:64:29:31:B1:EC:73:E5:EA:C3:BE
Certificate issuer:       /CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
Certificate serial:       01774DE1ADCABE3855D9E2676C630E55C6243817
Authority key identifier: AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa
Signing time:             Thu 04 Apr 2024 15:20:51 +0000
ROA not before:           Thu 04 Apr 2024 15:15:51 +0000
ROA not after:            Thu 03 Apr 2025 15:20:51 +0000
asID:                     265140
IP address blocks:        143.255.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:4d:e1:ad:ca:be:38:55:d9:e2:67:6c:63:0e:55:c6:24:38:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB74D1409E020E9FC44ACD2821DE9138F94DD415
        Validity
            Not Before: Apr  4 15:15:51 2024 GMT
            Not After : Apr  3 15:20:51 2025 GMT
        Subject: CN=567AED7AA469ACC1F2CE642931B1EC73E5EAC3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:8c:61:34:8f:23:93:97:93:4f:9b:02:b4:
                    79:0d:dc:44:f8:78:3d:8a:da:41:bc:6e:20:c7:d3:
                    7b:3a:7c:30:ba:23:e8:47:29:be:bb:f5:f3:fc:6a:
                    92:88:05:6c:a0:65:1c:64:f5:98:e7:e6:64:e8:68:
                    a0:83:40:fa:3d:6e:35:07:e5:6d:22:51:da:3e:9e:
                    b8:bd:83:13:82:6d:f6:65:a1:b8:e2:f6:e7:df:2a:
                    bf:af:8d:9e:e7:a1:c2:fb:db:9e:84:1c:46:cd:f1:
                    25:fe:cc:a3:94:76:87:12:73:d1:77:b2:0c:0e:67:
                    26:33:71:1b:25:0b:36:aa:c6:91:a4:d1:2c:39:c2:
                    e1:8f:ba:e3:98:9c:d5:98:76:40:eb:1a:f0:96:44:
                    b1:3a:d8:7e:71:52:58:7f:f1:47:7e:a9:01:09:8e:
                    6e:bf:a2:21:c0:e1:30:b4:82:82:b0:24:2c:4f:ea:
                    a1:9f:74:06:89:cc:ae:00:5d:64:73:9b:d4:3a:93:
                    0b:c2:b6:2e:c3:9b:33:56:d7:6f:2f:aa:9b:89:d4:
                    e2:bd:c9:00:98:3d:eb:fb:e5:ea:e8:c3:be:de:14:
                    34:05:27:f0:07:28:a1:73:5f:fe:dc:48:1a:5c:4f:
                    14:7f:f3:34:d3:19:fb:58:c3:ec:18:52:34:05:66:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7A:ED:7A:A4:69:AC:C1:F2:CE:64:29:31:B1:EC:73:E5:EA:C3:BE
            X509v3 Authority Key Identifier:
                keyid:AB:74:D1:40:9E:02:0E:9F:C4:4A:CD:28:21:DE:91:38:F9:4D:D4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB74D1409E020E9FC44ACD2821DE9138F94DD415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/1/3134332e3235352e302e302f32342d3234203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:53:b8:9b:61:ca:5e:1e:55:4b:28:f8:13:de:a9:df:ba:
         50:0b:46:46:f0:9a:10:3e:01:a3:39:a7:23:94:1d:1a:a1:c6:
         ec:0b:06:ea:4e:be:73:3b:50:f1:64:51:9c:23:bf:6e:46:2b:
         e3:4d:3c:d9:b4:2e:50:45:47:66:00:42:d4:57:ff:69:c0:0c:
         0e:94:99:d5:f7:48:3e:f4:cf:79:ab:85:8b:8c:ab:96:35:b6:
         99:5a:03:4a:fc:1d:bd:fb:67:5c:8a:4d:55:04:e4:30:cc:b2:
         03:2e:9a:ac:46:e9:60:ff:c4:53:56:01:34:9c:1c:fd:ac:53:
         42:c0:23:02:0e:bb:14:45:e8:56:23:71:68:5e:2b:96:d6:34:
         fd:8e:70:de:33:2f:4f:83:da:b7:9e:89:9b:26:94:4d:d9:dd:
         86:b9:5b:80:71:13:df:6b:2d:c2:b5:81:2d:42:6e:3b:c7:03:
         c9:0d:1d:2a:ff:bf:42:6f:96:05:3f:46:52:5f:91:ba:6e:47:
         fb:6d:46:5f:fa:1f:73:7b:56:6f:9b:a8:f8:76:64:06:20:3a:
         e3:56:66:86:ea:93:46:1e:af:a3:1c:61:6b:a4:e4:2e:8e:5a:
         44:8f:a9:f8:14:b9:26:b4:1d:1b:0e:d6:43:bf:90:24:1c:f2:
         42:1a:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org