Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31372e302f32342d3234203d3e20323633393930.roa
File:                     3134332e302e31372e302f32342d3234203d3e20323633393930.roa (raw, json)
Hash identifier:          Rv87xiAV2yQY0odT/1sc6Rc36cmnet5AZW3BT6N5C5c=
Subject key identifier:   EC:99:37:A6:47:77:6F:6C:03:7A:3B:20:40:E5:68:7B:4D:7D:DD:F2
Certificate issuer:       /CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
Certificate serial:       54A24A4F1301A49C8D46B894D37BD4ECB566E82E
Authority key identifier: 75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31372e302f32342d3234203d3e20323633393930.roa
Signing time:             Sat 13 Apr 2024 16:13:20 +0000
ROA not before:           Sat 13 Apr 2024 16:08:20 +0000
ROA not after:            Sat 12 Apr 2025 16:13:20 +0000
asID:                     263990
IP address blocks:        143.0.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a2:4a:4f:13:01:a4:9c:8d:46:b8:94:d3:7b:d4:ec:b5:66:e8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5
        Validity
            Not Before: Apr 13 16:08:20 2024 GMT
            Not After : Apr 12 16:13:20 2025 GMT
        Subject: CN=EC9937A647776F6C037A3B2040E5687B4D7DDDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:2c:a5:52:6e:8e:5b:ea:0f:ec:5b:d1:80:
                    15:fe:b9:4b:d2:a2:70:24:57:2f:2c:ec:0e:bc:67:
                    de:33:37:d8:5d:84:05:47:3e:70:fe:29:5c:43:ef:
                    e7:a3:29:36:98:c7:b7:5f:d9:47:64:c9:ff:a4:be:
                    57:72:0c:e7:d7:c1:20:ba:c5:34:03:c6:fb:01:25:
                    32:02:4e:22:a6:b1:27:11:e1:0d:a4:6e:5f:14:7b:
                    79:a4:10:cc:98:bc:f7:ad:49:51:8b:03:a0:bf:11:
                    ca:07:f4:84:91:b1:98:45:e2:e2:ab:1c:08:20:65:
                    6e:2b:ac:2c:28:a5:4a:0c:51:9f:2c:9b:7a:20:13:
                    de:d3:d7:8a:fc:84:6e:a7:a8:d5:a0:03:97:ef:c9:
                    ec:67:cc:f0:be:56:f7:79:9d:10:27:5d:87:d7:44:
                    c7:35:bb:e6:22:09:3b:cd:e6:19:9c:d7:d4:ff:db:
                    f3:16:ea:7f:62:5d:eb:7a:7f:27:ab:29:a0:c4:3f:
                    f9:b7:6c:42:8a:6c:77:48:fb:bc:e9:87:f3:ad:b8:
                    0b:40:ba:e0:f5:78:ed:a2:b5:72:4b:90:ed:7e:3d:
                    ef:0f:3a:fe:5a:6a:1a:01:3c:7c:6b:34:cc:b0:42:
                    6e:a2:d1:a0:31:58:8f:b8:af:4c:3f:d4:51:d4:9b:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:99:37:A6:47:77:6F:6C:03:7A:3B:20:40:E5:68:7B:4D:7D:DD:F2
            X509v3 Authority Key Identifier:
                keyid:75:C3:27:CB:0D:2E:47:2E:0C:DE:43:B4:A6:C0:86:06:CB:0E:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75C327CB0D2E472E0CDE43B4A6C08606CB0EB0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kzpmRFnWUbt1crj8dovAQfaoMowHfReoDNpkvPVLtwi/1/3134332e302e31372e302f32342d3234203d3e20323633393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:d8:f3:b3:ec:26:6b:cf:f7:fa:c2:54:22:8f:e2:43:6f:
         07:a0:b5:7a:b0:17:76:bc:30:d3:5b:fd:04:1e:1d:16:c9:ce:
         f4:64:6b:28:c3:02:8b:56:3c:6b:ae:e4:43:8a:89:75:63:de:
         3f:35:ea:79:cf:00:86:3d:d9:67:af:32:19:69:f7:af:bf:32:
         ee:97:c1:fd:1b:24:1e:1b:87:d2:4e:fa:4f:a2:55:2a:16:ae:
         1d:0b:05:d0:5b:16:c5:98:da:e7:20:52:f6:ab:2a:3d:fb:12:
         9e:7c:a3:2e:d1:7e:54:76:a6:26:3a:a5:a4:a5:e2:3a:8a:6b:
         ca:1d:0f:f2:e5:37:e5:a3:38:f3:9e:c6:64:9f:51:47:80:a6:
         c7:ec:07:a5:34:c8:b3:fa:84:30:dc:b4:82:95:35:ef:81:18:
         29:f6:ab:1a:70:72:18:7f:c7:f6:97:49:ab:63:8c:32:65:7a:
         42:66:64:66:be:b9:db:8c:3b:d5:a1:e5:0b:be:32:55:16:b9:
         9e:af:a1:74:3e:ba:bb:50:29:97:ca:2e:77:14:d2:30:73:24:
         2a:e9:45:4d:31:64:65:ab:35:5a:de:c7:62:a1:e0:5b:01:b3:
         bb:b7:17:c7:1b:b0:70:81:46:f3:48:e1:ed:3a:57:50:63:a9:
         5a:30:55:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org