Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32322d3232203d3e20323634303436.roa
File:                     3134332e3133372e3231362e302f32322d3232203d3e20323634303436.roa (raw, json)
Hash identifier:          PduJ2mn1GkVNe0BaZb18YvUMdmZYhFq5cXjPN+cOOrY=
Subject key identifier:   FC:92:39:AD:63:E9:00:C8:48:8A:2E:C0:25:6D:2F:8C:C3:2B:0B:9C
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       767E7B7A1B169F24B49834BC565EF73763D1C349
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32322d3232203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        143.137.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7e:7b:7a:1b:16:9f:24:b4:98:34:bc:56:5e:f7:37:63:d1:c3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:11:cc:30:d1:1c:b2:78:e7:13:dd:64:60:
                    47:21:56:be:c0:c8:68:1a:6e:8b:71:24:e6:14:1a:
                    0d:9c:86:69:dd:68:39:bf:c0:87:31:74:1f:40:3e:
                    32:09:28:b0:99:d8:1a:62:25:74:a1:9d:90:b5:8d:
                    51:38:90:89:8c:b0:e5:cc:18:b0:01:18:7e:56:ac:
                    41:dc:e4:ac:c2:f7:ef:6d:d5:33:34:37:f2:22:a9:
                    ec:16:39:7b:95:25:0f:71:93:ba:a2:35:8e:69:f7:
                    49:89:09:3e:52:94:0f:ca:d9:b5:06:fd:bc:2c:96:
                    db:65:47:9a:a6:26:15:c6:b6:ae:93:29:5c:56:6b:
                    79:09:fd:19:1e:36:52:3c:04:32:4c:b6:39:b5:f5:
                    f9:8f:5d:ba:09:39:bf:c2:fc:af:c1:0e:96:a0:ff:
                    da:f2:40:c2:db:80:8a:da:a2:97:02:11:56:10:c2:
                    d1:a1:42:87:c4:dd:2c:5d:75:1a:21:fb:71:28:62:
                    05:d3:fc:3c:c8:fe:81:fc:8b:c7:ec:b3:1d:d6:e6:
                    03:0e:a3:c7:7d:fa:0d:23:f5:a1:88:99:d4:49:1a:
                    ed:df:2e:06:4a:ef:d0:27:56:e7:76:1c:74:b6:4f:
                    c3:f5:b1:d8:93:65:0c:70:9a:8b:4a:e1:0d:f3:09:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:92:39:AD:63:E9:00:C8:48:8A:2E:C0:25:6D:2F:8C:C3:2B:0B:9C
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32322d3232203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:4a:cb:80:b1:c4:64:5e:26:69:72:81:af:44:96:e2:d9:
         76:3e:45:62:5b:e2:b1:7f:f9:ce:c9:6e:f9:cb:5c:c3:4d:8c:
         17:1d:74:0f:58:19:8d:e7:cc:fd:e1:2a:58:2b:fa:22:33:76:
         d5:91:f6:a1:15:e9:1d:e5:2f:9a:b8:61:eb:48:1a:a2:c2:e5:
         2a:5b:be:fa:79:0d:6b:62:3a:27:4d:e1:03:40:91:d9:30:59:
         01:b6:85:91:f9:67:92:29:f6:e0:42:ac:cb:69:d2:2a:a9:79:
         8e:a2:ea:71:71:8e:0f:80:a0:11:d4:7b:bc:3c:ac:d0:ef:08:
         38:30:b8:18:fa:3e:99:6c:ef:49:35:fa:cd:45:55:fe:27:63:
         70:79:85:87:58:38:4f:f6:1b:40:2e:12:00:b9:f2:69:e1:bf:
         d3:81:a3:06:80:88:27:be:e4:0c:5c:88:da:22:75:b5:98:23:
         85:71:16:5a:11:b9:1a:99:16:16:ae:98:ac:06:19:d3:a1:22:
         61:70:6d:29:f9:29:e9:94:2f:7a:04:42:54:f1:4e:02:db:9b:
         4b:10:1b:01:fd:35:3a:4e:fc:08:eb:6e:a2:a2:b6:03:f5:ad:
         13:77:11:0b:a9:78:3b:a3:0c:a2:2f:1a:ab:3e:b7:a9:8b:fd:
         16:1b:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org