Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138382e302f32342d3234203d3e20323634303236.roa
File:                     3134332e302e3138382e302f32342d3234203d3e20323634303236.roa (raw, json)
Hash identifier:          ai3CSCm0PEZD+R4TS1b1YyYGXBO/cgtdyhe53dkVIOA=
Subject key identifier:   04:ED:D0:D6:03:12:94:C0:36:60:18:2E:D9:C5:F2:73:23:52:13:AE
Certificate issuer:       /CN=40E329E137ACE9C947E72E009F44D35DDC786723
Certificate serial:       3306047A730EB54BA666280291D514A96ED6118D
Authority key identifier: 40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138382e302f32342d3234203d3e20323634303236.roa
Signing time:             Sun 20 Nov 2022 13:29:52 +0000
ROA not before:           Sun 20 Nov 2022 13:24:52 +0000
ROA not after:            Sun 19 Nov 2023 13:29:52 +0000
asID:                     264026
IP address blocks:        143.0.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:06:04:7a:73:0e:b5:4b:a6:66:28:02:91:d5:14:a9:6e:d6:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E329E137ACE9C947E72E009F44D35DDC786723
        Validity
            Not Before: Nov 20 13:24:52 2022 GMT
            Not After : Nov 19 13:29:52 2023 GMT
        Subject: CN=04EDD0D6031294C03660182ED9C5F273235213AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:63:21:01:10:cb:55:14:d6:1a:44:fe:18:
                    01:12:96:ad:6d:71:73:26:7b:6e:17:66:a1:4c:d5:
                    39:a6:69:65:e2:40:f0:53:0d:72:97:f8:a2:9c:09:
                    57:04:ae:e9:bd:f3:1b:d7:53:58:17:fa:91:d7:7c:
                    9f:d0:cd:20:52:24:74:1f:7d:37:82:5f:47:b6:aa:
                    a8:fa:6b:8e:55:12:70:c0:f1:99:b1:dd:69:2b:3d:
                    e7:42:1b:fa:95:97:a6:fa:75:78:b4:3b:c0:2c:68:
                    90:01:f1:27:d0:3f:ff:62:4b:d6:f3:bf:fb:58:c3:
                    5c:f0:5d:2c:de:fc:e5:37:0e:aa:3a:6d:ca:47:17:
                    c3:49:5e:9e:06:df:22:dd:22:eb:bd:c6:45:62:01:
                    29:0a:b0:8e:ec:09:95:6a:ee:ec:ec:a4:44:eb:4e:
                    f2:c3:63:ac:20:23:20:30:b3:d8:c3:30:f5:7a:b5:
                    5e:da:4a:eb:ed:8d:97:98:7d:ea:ae:44:ac:ac:7a:
                    21:27:cb:95:b2:ad:ac:50:42:28:2f:3d:f2:5d:fe:
                    8a:29:cb:bb:e8:ec:e4:c8:90:2a:7f:49:5f:81:e1:
                    1f:20:6b:54:cc:16:6c:b0:2d:5a:22:60:19:33:b9:
                    e8:56:c0:d2:63:ce:5a:56:54:96:f1:92:7f:22:3c:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:ED:D0:D6:03:12:94:C0:36:60:18:2E:D9:C5:F2:73:23:52:13:AE
            X509v3 Authority Key Identifier:
                keyid:40:E3:29:E1:37:AC:E9:C9:47:E7:2E:00:9F:44:D3:5D:DC:78:67:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/40E329E137ACE9C947E72E009F44D35DDC786723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E329E137ACE9C947E72E009F44D35DDC786723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/96oBWju37PvrxkCthMwqU8pZReezqYsSr6ScyVFY8Jc3/0/3134332e302e3138382e302f32342d3234203d3e20323634303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:77:97:37:d3:fa:47:5e:d3:bd:b8:fb:0b:e8:c4:c6:b2:bd:
         e4:fb:ec:c3:f3:c0:de:a1:c4:3e:90:c7:c6:cd:9a:f2:fb:e9:
         aa:b3:58:38:c3:bd:1a:ba:c1:28:76:24:0d:40:a9:00:ee:3b:
         7f:80:13:b8:39:69:ff:24:1c:35:1c:86:37:e8:80:8f:b3:b2:
         35:1d:76:85:f9:58:8b:79:28:ae:d4:43:33:9f:59:85:79:fd:
         a7:3e:4e:4a:12:68:bf:b1:82:cb:8d:ed:ee:e9:69:5d:ae:89:
         45:44:7c:06:c8:d7:98:9f:cd:f0:ec:82:ff:45:74:c7:88:8d:
         99:66:38:26:ec:d2:56:fc:2c:30:1e:05:49:46:60:5e:90:6e:
         6c:eb:64:c4:5f:dc:63:9a:25:d5:83:31:39:c2:42:47:38:38:
         22:26:f3:4c:79:73:8d:af:3f:3f:85:ac:47:34:bb:78:1d:56:
         d7:d0:22:59:73:df:26:6d:bf:94:61:80:48:46:b2:c2:63:f2:
         c4:34:bb:67:03:3c:f7:83:b6:e7:b0:73:3f:36:d8:36:02:d2:
         00:32:89:53:01:69:87:b4:3d:71:86:80:a3:f1:26:3e:98:1c:
         08:ad:1e:36:e0:b8:f9:61:0b:3f:21:b1:5d:79:5e:de:8b:02:
         39:7f:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org