Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa
File:                     3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa (raw, json)
Hash identifier:          0J76wlwS29NhBgV3hFdCD5GEbCpWLr60Ewv1VF2r9AM=
Subject key identifier:   6F:AA:72:C2:37:14:6E:E6:6E:6E:28:4A:DA:34:B4:4F:DC:D5:1E:AB
Certificate issuer:       /CN=BB7D1E6467E86332D6E54F5DC4F11444142F3342
Certificate serial:       5A40CCA9368B7FABF6E346C6EC006178C6C72758
Authority key identifier: BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa
Signing time:             Thu 05 Aug 2021 18:26:34 +0000
ROA not before:           Thu 05 Aug 2021 18:21:34 +0000
ROA not after:            Thu 04 Aug 2022 18:26:34 +0000
asID:                     263405
IP address blocks:        143.255.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:cc:a9:36:8b:7f:ab:f6:e3:46:c6:ec:00:61:78:c6:c7:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB7D1E6467E86332D6E54F5DC4F11444142F3342
        Validity
            Not Before: Aug  5 18:21:34 2021 GMT
            Not After : Aug  4 18:26:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:64:36:07:ac:33:7d:0b:b9:f2:24:bf:f6:
                    09:a3:45:8c:4b:3a:d6:60:8a:18:53:a8:d1:53:3c:
                    00:4c:93:22:42:5e:c9:26:76:95:52:90:02:4d:9e:
                    e7:3b:b2:23:31:44:6a:4d:29:01:ef:d5:50:dc:28:
                    a1:f3:e8:40:36:dd:bf:d1:3d:bb:fe:7b:9d:22:7e:
                    57:5e:ef:3d:16:26:c2:8b:16:4b:f1:06:47:27:a1:
                    23:70:80:ac:7c:38:7c:17:42:d5:e5:32:4c:5b:d9:
                    bd:7a:66:fe:6a:a1:04:75:9b:25:a0:d9:da:d2:a2:
                    1e:35:c4:26:dc:13:3b:cb:19:f1:6a:bf:6f:d8:e0:
                    21:ed:ba:86:ce:05:da:7b:35:f0:85:5d:7d:47:35:
                    29:16:9c:a2:ad:f6:21:b9:94:6b:bf:2a:c1:3c:ee:
                    e8:b8:14:22:70:66:00:8d:cd:24:6a:e8:73:5c:11:
                    20:4d:ff:ce:fe:bb:d2:a7:b9:20:42:a4:7d:01:3c:
                    c5:52:20:08:92:4b:9e:bd:92:46:89:2f:eb:f1:80:
                    ac:04:c6:0c:40:15:86:76:a1:30:d6:65:ba:4b:dc:
                    70:15:e4:6e:00:8d:b9:1a:a6:06:02:a3:0d:db:08:
                    9f:8d:1c:cb:da:62:6e:ab:3d:6b:c3:48:cc:b5:6f:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AA:72:C2:37:14:6E:E6:6E:6E:28:4A:DA:34:B4:4F:DC:D5:1E:AB
            X509v3 Authority Key Identifier:
                keyid:BB:7D:1E:64:67:E8:63:32:D6:E5:4F:5D:C4:F1:14:44:14:2F:33:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB7D1E6467E86332D6E54F5DC4F11444142F3342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9EE9hjFDwTRpzWnfyKgwkvPu42Ed7MS4dXZhDbBkmzid/0/3134332e3235352e3235322e302f32322d3234203d3e20323633343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:db:cf:37:71:62:01:8a:21:7a:d5:ff:4e:da:35:e5:b8:1f:
         11:4c:aa:db:34:66:72:14:f5:1b:dc:c6:2a:eb:c9:5f:a0:90:
         c5:dc:6e:91:8b:1d:b3:72:cd:de:bf:30:7a:c9:6f:0d:0d:ae:
         0b:7c:84:3e:e1:a5:ab:af:52:d9:69:9f:0c:6c:51:c4:69:0d:
         10:e4:ec:e2:dc:c6:df:72:5f:45:e3:5d:52:06:69:54:5a:c0:
         09:c9:7e:46:d2:22:c9:f4:73:36:8a:bf:16:3d:c7:59:26:cc:
         34:f1:b1:29:37:94:60:a4:38:e6:2a:b6:53:b3:94:20:c2:17:
         9f:25:4a:60:f5:4e:ff:ea:17:f8:ab:0d:c1:69:ba:e5:c9:3f:
         0d:69:4b:22:a5:6c:8e:bd:7d:8d:10:88:9e:d3:b3:d8:cf:e7:
         d7:6b:cc:1d:fc:cf:35:17:0d:85:8e:43:a3:83:fe:6d:d0:b3:
         04:ce:a4:b7:bb:2e:5c:96:3f:28:1a:bd:c5:7c:ef:28:b0:16:
         dd:d5:78:9c:ac:ef:69:ed:35:0f:33:a4:d0:c3:7a:99:33:a6:
         11:1a:1d:f1:94:62:b9:dd:0c:1d:91:da:8b:25:eb:d8:7a:25:
         82:17:cb:5e:a7:8c:52:ed:3b:56:7c:9c:c6:eb:ac:ff:8d:30:
         fd:1c:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org