Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231372e302f32342d3234203d3e20323634303436.roa
File:                     3134332e3133372e3231372e302f32342d3234203d3e20323634303436.roa (raw, json)
Hash identifier:          EIMd35ah4s14lI58PihUSco3uHOmZYtx5cvlbqZdFlw=
Subject key identifier:   7D:24:BE:B3:0C:C8:56:B9:23:BF:94:C4:3A:DE:EB:61:DE:6A:79:DF
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       33D41EFD759DE752204505ACA824CE9BA75D0128
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231372e302f32342d3234203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 13:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:55:00 +0000
ROA not after:            Fri 14 Jul 2023 13:00:00 +0000
asID:                     264046
IP address blocks:        143.137.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d4:1e:fd:75:9d:e7:52:20:45:05:ac:a8:24:ce:9b:a7:5d:01:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 12:55:00 2022 GMT
            Not After : Jul 14 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:88:d1:86:88:36:c1:c9:1c:de:78:87:f5:
                    29:80:3b:b7:49:e5:0c:fc:44:a8:8e:3f:6f:8f:ba:
                    67:07:53:56:97:31:f4:77:45:b7:1e:d0:e3:2c:57:
                    c0:55:f9:04:51:b3:9c:fd:fb:90:ce:ba:32:eb:4f:
                    20:81:8a:97:c4:3c:f1:ba:8e:a7:eb:b7:8d:cb:0e:
                    ee:61:94:aa:cb:c3:8c:ce:07:e3:d0:f1:81:14:3e:
                    cb:aa:19:34:31:f2:5d:a1:7b:ea:82:9b:6d:34:d9:
                    cb:fe:e6:21:e0:52:d0:b7:e9:83:04:35:63:66:41:
                    83:4e:bc:2e:d6:6e:b8:8f:68:54:99:e0:5b:86:6b:
                    a7:26:24:17:e0:a6:89:a9:eb:98:bf:88:4f:3e:b3:
                    16:ca:c7:ba:a6:18:aa:bf:85:b2:4a:e1:42:bb:5f:
                    f5:6b:50:27:33:49:c2:5e:35:93:c4:ad:d7:30:f7:
                    dc:68:ef:78:78:ab:00:8c:18:f4:79:3c:62:83:87:
                    45:d1:81:40:af:3a:bd:0a:9b:63:c7:61:4a:94:91:
                    f3:09:fa:39:9f:dd:bc:0f:c1:bb:57:86:10:de:a0:
                    35:8b:98:10:a8:eb:b2:8a:64:5e:4b:ff:44:4d:99:
                    91:15:f4:45:8a:e3:58:e4:2b:59:41:7c:67:65:bd:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:24:BE:B3:0C:C8:56:B9:23:BF:94:C4:3A:DE:EB:61:DE:6A:79:DF
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231372e302f32342d3234203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:a1:a1:8f:1b:97:e0:07:ee:f3:6c:c5:48:b9:94:cd:b0:
         69:19:a4:50:39:38:0c:14:88:3a:aa:6c:7a:99:1e:ef:7a:4d:
         79:1b:ff:d6:58:b2:81:f1:50:54:29:0e:72:be:cf:52:28:f9:
         08:88:ff:eb:54:93:77:9a:ab:70:e2:09:cd:91:c1:ec:e6:5b:
         bd:fb:87:08:82:47:68:d7:29:1a:71:01:b9:68:2a:03:3e:bd:
         ce:08:30:3e:8c:51:e2:31:bb:e1:01:e4:b0:42:21:e0:f0:60:
         e8:07:f4:a5:fe:53:34:91:56:4c:c8:bb:ea:4f:2d:33:09:ad:
         62:13:53:24:c7:c2:a1:54:0c:f5:f0:cd:7b:8b:80:4b:ab:27:
         ad:6f:fe:f5:bf:b3:da:7a:01:78:d7:7a:89:e2:3d:1c:cd:60:
         e6:93:26:78:e5:9c:a0:ef:24:bc:20:80:aa:28:b9:a1:e7:5d:
         95:3d:13:b6:78:94:f3:c5:30:a7:1f:75:37:42:50:9d:6b:a6:
         28:f4:c0:a2:35:1a:46:ef:1c:f4:3c:6a:f6:6e:da:5e:4e:b0:
         ee:88:e4:e0:86:e3:7b:36:19:7b:70:0c:84:05:93:7a:69:77:
         0e:01:d9:6e:af:c9:bd:92:83:cd:de:1f:5d:a0:32:e9:69:7e:
         3a:4f:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org