Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3234203d3e20323632383139.roa
File:                     3134332e3230322e36382e302f32322d3234203d3e20323632383139.roa (raw, json)
Hash identifier:          ArDTKysqFSgbf8bwLo1dXlyb6hOnFBO2BBewTKn9IJc=
Subject key identifier:   74:EE:E6:02:CE:C8:81:DB:24:A1:A8:C3:F7:AE:39:77:0E:D9:69:41
Certificate issuer:       /CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
Certificate serial:       1B7C949EB873E0AF8EA3BA4F5EA59EEA8338F2C3
Authority key identifier: DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3234203d3e20323632383139.roa
Signing time:             Thu 06 Jul 2023 14:42:28 +0000
ROA not before:           Thu 06 Jul 2023 14:37:28 +0000
ROA not after:            Thu 04 Jul 2024 14:42:28 +0000
asID:                     262819
IP address blocks:        143.202.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7c:94:9e:b8:73:e0:af:8e:a3:ba:4f:5e:a5:9e:ea:83:38:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D
        Validity
            Not Before: Jul  6 14:37:28 2023 GMT
            Not After : Jul  4 14:42:28 2024 GMT
        Subject: CN=74EEE602CEC881DB24A1A8C3F7AE39770ED96941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:af:72:b8:24:dc:72:2e:90:fc:20:31:c8:
                    30:83:85:5d:04:28:6d:d5:9f:f3:25:dd:e1:de:e9:
                    07:01:eb:ff:36:45:70:a8:81:9d:f0:45:59:37:1e:
                    d1:5c:9a:e2:ff:d3:1e:10:48:7e:38:33:11:ce:c4:
                    85:7a:43:5b:44:80:7f:ae:ed:98:0b:aa:35:1c:2f:
                    58:f2:83:b1:7f:93:11:6f:03:23:a6:b6:14:c8:ac:
                    54:c0:7b:bf:c7:76:6f:a0:77:d6:ba:8b:10:a6:c6:
                    66:21:7d:cc:d9:02:5c:9e:d1:6f:fc:9a:df:38:84:
                    68:15:6e:dd:74:10:f3:93:ee:49:a5:a4:21:b7:c6:
                    3b:27:73:4e:59:76:ef:44:2d:e3:7b:a6:a3:e3:ee:
                    87:90:95:fe:2a:39:76:28:42:0b:f1:a0:8a:33:b2:
                    9c:b7:fc:0f:24:e0:0f:a3:93:0f:05:73:9a:94:f5:
                    ef:7b:ae:53:67:1a:7a:79:01:fd:f5:e8:77:82:06:
                    af:ea:68:e7:80:46:ea:ff:48:a8:ed:05:6a:e8:36:
                    d2:3d:5a:ee:64:ba:32:95:c4:15:f2:82:f4:dc:02:
                    a7:30:d0:90:e5:01:fb:62:a0:17:d8:db:e4:f6:a7:
                    f8:97:1c:71:21:2b:93:a9:6e:48:88:f1:2f:37:f3:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:E6:02:CE:C8:81:DB:24:A1:A8:C3:F7:AE:39:77:0E:D9:69:41
            X509v3 Authority Key Identifier:
                keyid:DF:5D:91:96:94:7A:22:D5:30:6A:EC:A8:BF:48:DC:C6:C7:B5:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF5D9196947A22D5306AECA8BF48DCC6C7B54C7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/3134332e3230322e36382e302f32322d3234203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dd:d7:6b:f1:99:0b:48:27:b5:3f:f3:e0:ef:83:36:80:37:7c:
         f4:6c:80:7f:55:7c:a9:69:e8:19:e9:b7:ae:eb:bb:83:03:d6:
         8c:e8:f1:5f:a5:10:e8:df:e0:be:a5:9c:ad:dd:29:bb:3f:28:
         fa:b1:ff:ce:6c:42:03:f6:67:a7:30:22:6b:ec:af:b9:c0:57:
         00:73:78:27:57:76:79:74:71:7a:5e:8f:57:1c:3e:0b:58:35:
         11:0e:ea:5b:42:79:c1:4b:10:3f:4c:dd:43:46:41:66:c2:36:
         44:d4:b8:e6:0a:60:56:f4:10:d6:da:05:05:75:8f:db:90:bb:
         0b:58:59:00:6d:60:fd:0a:40:0b:d1:0f:aa:d7:27:b1:79:43:
         7e:4d:2a:5c:53:7b:bc:91:25:76:0e:37:23:6a:6e:7c:28:ca:
         f0:f0:44:05:82:44:8b:25:3f:2b:be:fd:19:f7:5d:a3:85:de:
         d0:22:9a:15:88:d0:61:7f:ad:a9:79:05:e4:c7:d1:c0:3c:6c:
         b3:7f:db:c4:41:9a:3d:59:41:af:74:3c:c3:46:56:87:69:c5:
         ec:db:47:a1:b9:09:55:f0:7e:48:a1:41:72:34:d1:23:9d:52:
         c1:0b:d4:a7:c5:9b:6a:c3:b5:fe:1a:38:0c:6c:a0:67:b7:5d:
         55:53:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org