Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32342d3234203d3e20323634303436.roa
File:                     3134332e3133372e3231362e302f32342d3234203d3e20323634303436.roa (raw, json)
Hash identifier:          Lzd39ZWShzgLf0ir1iAz7493vI7ip5GoWERzNMyrIkY=
Subject key identifier:   A0:37:68:29:00:FA:C9:CA:17:A4:78:32:F7:72:0E:E6:E8:6F:55:83
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       46DB31239A47C6D2B871FDCBF9106EC461A0804E
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32342d3234203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        143.137.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:db:31:23:9a:47:c6:d2:b8:71:fd:cb:f9:10:6e:c4:61:a0:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:60:fa:80:64:8b:f8:00:6b:d1:c5:e7:28:
                    f5:c8:91:b1:49:f1:d6:dd:ee:fb:bb:21:1c:04:ed:
                    cd:22:c4:e0:43:a7:c6:e3:09:3e:c1:16:d6:2d:5b:
                    ba:2b:b8:35:ef:2a:d7:f9:9b:fa:5e:57:22:e8:aa:
                    80:96:71:28:7a:5a:ce:9f:be:56:89:9a:4e:3d:7a:
                    65:d0:01:43:cd:54:0a:a2:23:f3:46:ba:93:5d:2d:
                    c0:8f:aa:7e:49:74:5c:94:b9:21:bb:6b:0d:cf:3f:
                    a4:dd:ad:5d:ba:64:d5:0f:0c:e5:a2:c1:67:4b:96:
                    c2:64:39:ca:57:cf:fd:cb:99:84:cc:07:4a:88:35:
                    79:d3:32:f3:73:43:d0:e0:cd:58:f5:79:75:0d:f5:
                    15:bf:d5:c7:36:14:c8:b1:90:e2:19:8c:31:23:22:
                    d0:6e:d7:4a:38:77:61:5f:51:9e:1c:31:52:f6:7f:
                    40:17:73:42:33:15:c7:f1:6f:ee:12:00:02:10:02:
                    0b:a4:63:08:93:f0:e8:68:32:20:3c:5f:35:65:b5:
                    94:57:3d:94:1b:26:00:20:8a:24:22:96:45:a1:f8:
                    d3:7a:59:05:e3:a1:cd:f5:f9:24:17:90:7b:17:39:
                    04:e2:69:ff:f0:8d:9b:35:58:3a:a4:31:31:ed:9a:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:37:68:29:00:FA:C9:CA:17:A4:78:32:F7:72:0E:E6:E8:6F:55:83
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231362e302f32342d3234203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:88:6a:e1:10:9c:db:d9:c7:01:cc:2f:0f:40:c3:42:b2:7c:
         20:74:f1:ee:83:6d:97:9b:9a:73:e2:cc:55:b0:6f:a2:57:30:
         2f:4e:32:27:94:cd:7b:86:5e:5f:2c:95:a5:94:69:e5:a5:1a:
         0c:2f:16:89:63:b0:27:68:f3:48:62:12:ad:14:7a:44:7a:38:
         1c:50:9e:e4:49:33:08:40:7f:a0:66:6c:73:e5:0a:71:25:03:
         1d:4f:b1:8b:fa:01:e3:c7:03:bf:77:d8:d1:15:f2:fd:45:5c:
         43:cc:7a:8a:36:5d:f8:7e:30:e3:3d:d1:34:20:30:0a:0d:0d:
         3c:ec:a9:ed:0b:9c:cb:c1:23:ef:10:36:14:82:6b:a6:59:c1:
         fc:de:75:7f:5f:43:da:7a:a2:0c:75:45:a5:01:95:c1:cb:62:
         b6:53:27:34:09:bf:1e:28:c9:06:2b:32:55:e6:03:f5:9f:f9:
         59:6b:9b:3f:cc:5b:b6:4b:40:b6:0e:aa:b1:04:70:4a:36:2a:
         eb:88:86:f9:fc:92:3c:d1:6b:84:f3:0c:38:9f:53:7c:0a:20:
         1f:68:ec:6b:f1:56:63:53:33:91:f4:88:6f:8c:73:fa:11:5d:
         2d:0f:5c:23:be:38:f7:10:6e:53:14:22:08:38:a5:90:18:4d:
         94:42:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org