Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32332d3233203d3e20323634303436.roa
File:                     3134332e3133372e3231382e302f32332d3233203d3e20323634303436.roa (raw, json)
Hash identifier:          sI8ZJ4tlg7dBo1CYBBUKg9iVXZ7DUYymB5E8CvCQO2Y=
Subject key identifier:   FF:E5:72:34:F6:32:92:C8:00:1B:BA:83:9C:A0:7A:F9:B6:A7:88:CC
Certificate issuer:       /CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
Certificate serial:       5F9F535DD9822ABE0C15BCBC827AB23F4A04E157
Authority key identifier: F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32332d3233203d3e20323634303436.roa
Signing time:             Thu 14 Jul 2022 12:00:01 +0000
ROA not before:           Thu 14 Jul 2022 11:55:01 +0000
ROA not after:            Fri 14 Jul 2023 12:00:01 +0000
asID:                     264046
IP address blocks:        143.137.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9f:53:5d:d9:82:2a:be:0c:15:bc:bc:82:7a:b2:3f:4a:04:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B0BA2725A8409FB3A503073DAEA4474CF2C54F
        Validity
            Not Before: Jul 14 11:55:01 2022 GMT
            Not After : Jul 14 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:ec:13:88:b8:3e:a8:cb:9c:4e:b4:25:2b:
                    40:16:31:29:c9:a6:84:7f:e3:98:16:66:f3:d1:7f:
                    90:71:9f:1b:7d:83:d5:70:0f:99:57:9b:ad:a5:e8:
                    8e:60:84:74:25:43:41:f0:c4:51:31:c4:45:cf:83:
                    f5:39:5e:34:ee:ec:45:da:4f:ce:ad:ef:88:54:0d:
                    e4:ed:5e:6d:96:f4:15:09:0d:38:72:f0:dc:47:a2:
                    87:3f:b9:38:12:d9:12:9e:fd:66:cf:2b:a5:24:12:
                    e9:47:ff:ca:46:65:5b:89:fd:46:0a:eb:98:85:34:
                    4a:3d:88:c1:8f:41:67:79:6c:b3:4b:ad:bc:69:33:
                    b7:3d:cd:18:da:2b:68:e5:71:92:03:51:b3:b1:02:
                    9c:16:c2:ad:1b:ee:bc:7d:a7:53:f5:4e:d6:08:2e:
                    4c:24:11:f3:9d:04:b0:e1:e4:14:47:da:6b:b8:9f:
                    d8:9f:9a:07:38:e9:bd:58:a9:56:75:c0:7a:4f:10:
                    26:e4:3b:b6:ae:1b:ad:9a:c5:45:3b:a7:a6:c6:76:
                    fd:42:4e:b0:91:70:7b:de:82:c5:f8:ef:82:94:f4:
                    28:b9:60:ab:b2:18:37:b8:da:df:17:a8:38:73:e3:
                    96:41:bd:ee:04:a8:79:fa:bd:2b:aa:68:25:f0:a3:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E5:72:34:F6:32:92:C8:00:1B:BA:83:9C:A0:7A:F9:B6:A7:88:CC
            X509v3 Authority Key Identifier:
                keyid:F0:B0:BA:27:25:A8:40:9F:B3:A5:03:07:3D:AE:A4:47:4C:F2:C5:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0B0BA2725A8409FB3A503073DAEA4474CF2C54F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/3134332e3133372e3231382e302f32332d3233203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:3f:40:09:3d:b0:69:6a:f1:6b:e2:2b:59:90:80:de:a4:8a:
         a0:5a:96:ed:63:06:a2:3f:ec:51:2b:3a:f9:5a:76:78:ad:1b:
         8d:23:74:45:28:fe:c9:c3:45:51:68:1c:14:68:69:e3:e5:24:
         df:44:0e:21:d9:68:61:ed:db:36:65:81:32:a4:a4:ae:8a:ea:
         c0:f0:8c:92:96:4a:b9:3e:ab:8b:88:f3:e6:35:a4:72:a4:12:
         04:f9:12:10:45:53:0d:d6:1d:98:06:62:54:5e:ef:ea:01:b0:
         ce:9e:16:6c:97:26:01:2a:86:7d:ea:11:cd:ec:57:13:d9:06:
         7f:3d:42:5a:8b:f3:76:23:ab:52:e9:1f:e7:f0:de:52:78:8f:
         7d:19:36:d3:25:f8:37:ec:81:ea:e7:60:f6:ae:98:35:53:4f:
         f8:70:80:c1:72:aa:30:1e:f4:b8:52:fa:5b:cf:be:21:e1:09:
         db:b2:45:78:89:c0:b6:a8:af:56:f1:b8:3e:42:09:5f:72:7a:
         c0:09:8c:5c:f7:4b:e4:ea:13:78:cf:92:27:57:bc:3d:09:42:
         17:a5:38:37:49:dd:bd:31:f5:31:28:68:12:72:43:61:ac:d4:
         1d:9c:a6:d0:ea:80:2d:83:00:fc:b9:07:ea:21:f8:fd:59:68:
         59:10:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org