Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32332d3233203d3e20323634303436.roa
File:                     3134332e3133372e3231362e302f32332d3233203d3e20323634303436.roa (raw, json)
Hash identifier:          60VXlSRI9nNO2ScdDBG3CIcSxuHYTBTq0dvpAUtjGG0=
Subject key identifier:   7B:63:3B:D7:FA:4C:4E:94:D9:AD:84:B3:FD:8E:F3:E6:B4:58:69:6E
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       0EAD941173714BF805A292D99DD67B1C6627D014
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32332d3233203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 11:55:00 +0000
ROA not after:            Fri 14 Jul 2023 12:00:00 +0000
asID:                     264046
IP address blocks:        143.137.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:94:11:73:71:4b:f8:05:a2:92:d9:9d:d6:7b:1c:66:27:d0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:00 2022 GMT
            Not After : Jul 14 12:00:00 2023 GMT
        Subject: CN=3082010A0282010100BB00D491B0F6EFA79C37E1A2DA9A6DBF13DC93C6D5007DF84C4D0B0141C815700A8F23A3141267C65604DA1617C7BB9C85D2198518500687C461CC54F544FE2EE839C1DCB53377AAEF1CB8DD34FAB2585EE32D9569C250EBBE954755D14E11CAE837DD419579C2ABD4B62FD1794E06FD447AA6CAA701FE662A72271650B13E80A86EF8E9EBDD151ABB725860CA62E0425AF7C6F644E5C9F796020C0455ECF77758B39AD37B24B81D70B7FA84E6B7063B743DB393457F7512E69822960546C2C475B7D30C541DD9B553C6FEEF85C448A0A474953BC8EF900F32FA827789DC620F979BFF6B780551BC3B20B3A81C232F9E04FEC9B70B992F0638F576DD16E5C00F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:d4:91:b0:f6:ef:a7:9c:37:e1:a2:da:9a:
                    6d:bf:13:dc:93:c6:d5:00:7d:f8:4c:4d:0b:01:41:
                    c8:15:70:0a:8f:23:a3:14:12:67:c6:56:04:da:16:
                    17:c7:bb:9c:85:d2:19:85:18:50:06:87:c4:61:cc:
                    54:f5:44:fe:2e:e8:39:c1:dc:b5:33:77:aa:ef:1c:
                    b8:dd:34:fa:b2:58:5e:e3:2d:95:69:c2:50:eb:be:
                    95:47:55:d1:4e:11:ca:e8:37:dd:41:95:79:c2:ab:
                    d4:b6:2f:d1:79:4e:06:fd:44:7a:a6:ca:a7:01:fe:
                    66:2a:72:27:16:50:b1:3e:80:a8:6e:f8:e9:eb:dd:
                    15:1a:bb:72:58:60:ca:62:e0:42:5a:f7:c6:f6:44:
                    e5:c9:f7:96:02:0c:04:55:ec:f7:77:58:b3:9a:d3:
                    7b:24:b8:1d:70:b7:fa:84:e6:b7:06:3b:74:3d:b3:
                    93:45:7f:75:12:e6:98:22:96:05:46:c2:c4:75:b7:
                    d3:0c:54:1d:d9:b5:53:c6:fe:ef:85:c4:48:a0:a4:
                    74:95:3b:c8:ef:90:0f:32:fa:82:77:89:dc:62:0f:
                    97:9b:ff:6b:78:05:51:bc:3b:20:b3:a8:1c:23:2f:
                    9e:04:fe:c9:b7:0b:99:2f:06:38:f5:76:dd:16:e5:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:63:3B:D7:FA:4C:4E:94:D9:AD:84:B3:FD:8E:F3:E6:B4:58:69:6E
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32332d3233203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:95:dc:59:89:c6:45:2a:f7:41:a8:f3:54:5f:6c:9b:f6:9c:
         bc:4a:1e:ba:03:d3:38:ce:71:dc:a9:72:fc:8f:2a:81:15:4a:
         63:89:25:ab:81:66:8f:3e:85:48:11:a4:40:e9:95:99:75:0c:
         c6:01:7c:e1:7f:b3:93:74:30:aa:92:19:fc:3c:91:46:ab:6d:
         5b:30:2a:e9:49:da:19:f1:6e:c9:d2:6b:2f:18:d7:d0:7f:d7:
         b7:36:ce:1e:53:39:fa:8b:31:47:17:b1:c3:92:59:4f:9b:30:
         1e:4a:55:6d:e7:57:01:49:ea:c6:64:11:ce:bb:1b:e0:ca:df:
         df:c3:9f:59:0b:44:d1:bf:4f:10:9d:be:82:d3:d2:37:e6:23:
         33:ae:6c:ea:58:92:38:f2:f5:7c:55:da:96:83:05:fc:25:30:
         df:14:16:5a:45:ab:8e:74:b5:a1:17:4b:e3:84:1f:93:5a:71:
         aa:58:5d:51:20:ec:30:32:2f:9a:fd:bc:75:d2:f0:53:89:45:
         75:69:53:3b:14:4d:d0:4f:5b:e6:37:b4:a0:9a:e4:6d:49:35:
         ec:16:3d:5c:4f:0b:da:49:7c:77:f6:3b:00:fd:ec:50:43:5a:
         c7:5f:61:d5:40:21:2b:d6:32:c9:42:4f:8d:5e:51:06:67:d3:
         45:cf:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org