Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa
File:                     3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (raw, json)
Hash identifier:          UhiC35i4ArCPp1Y5dxNN5HBcLc6yk5qWyaWEoleHffI=
Subject key identifier:   01:63:93:EC:A0:EB:4E:CD:85:2B:7B:35:7A:79:4D:64:F0:88:AF:5B
Certificate issuer:       /CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
Certificate serial:       354950C545C1EF4466AB8F55A831D96B44C18E7E
Authority key identifier: E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa
Signing time:             Thu 04 Apr 2024 11:04:17 +0000
ROA not before:           Thu 04 Apr 2024 10:59:17 +0000
ROA not after:            Thu 03 Apr 2025 11:04:17 +0000
asID:                     264000
IP address blocks:        143.0.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:49:50:c5:45:c1:ef:44:66:ab:8f:55:a8:31:d9:6b:44:c1:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FF495D0A4F0F74E959F3832234CB61EF9A5B41
        Validity
            Not Before: Apr  4 10:59:17 2024 GMT
            Not After : Apr  3 11:04:17 2025 GMT
        Subject: CN=016393ECA0EB4ECD852B7B357A794D64F088AF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:73:d8:47:99:fc:8b:79:c3:a7:74:74:f3:
                    2c:49:0a:53:86:ec:ee:22:1b:75:5d:a2:35:01:65:
                    3f:61:bb:a3:56:24:55:5d:ef:36:8d:22:e1:33:a1:
                    15:84:4e:9f:08:02:6e:24:cc:20:2c:23:bd:3c:a4:
                    9c:c6:6c:0d:35:f9:2a:c6:64:f6:fd:1a:69:99:e1:
                    ef:b9:2b:67:53:f2:da:fb:23:f1:6d:74:49:a7:57:
                    a9:47:8d:3a:81:9b:99:b8:52:18:f1:54:74:f7:55:
                    60:ba:5c:2b:11:73:09:72:70:22:af:25:c9:3e:8a:
                    65:55:29:d3:57:be:02:e7:dd:84:49:0f:b6:66:8d:
                    3f:a3:f1:e1:78:94:c0:c4:c4:ef:45:a2:0d:81:cc:
                    61:d5:df:9d:bf:12:a0:21:60:e8:fb:54:10:30:ef:
                    de:fe:db:81:ac:6b:3e:7d:b3:8d:4c:28:49:98:27:
                    95:18:0b:44:d4:66:11:4b:b9:2f:76:a5:15:19:99:
                    c9:78:d0:69:c8:5b:72:cd:b3:45:ae:a9:aa:67:60:
                    63:9d:8d:6c:b3:84:ee:b9:3c:22:da:1e:f5:98:0b:
                    6c:ac:91:3c:8f:dd:f3:8d:e1:7b:6e:c3:02:2d:94:
                    65:a4:69:40:39:7f:a9:f7:64:8f:ce:de:9d:47:61:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:93:EC:A0:EB:4E:CD:85:2B:7B:35:7A:79:4D:64:F0:88:AF:5B
            X509v3 Authority Key Identifier:
                keyid:E6:FF:49:5D:0A:4F:0F:74:E9:59:F3:83:22:34:CB:61:EF:9A:5B:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FF495D0A4F0F74E959F3832234CB61EF9A5B41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/1/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:40:f5:70:8d:0c:91:a6:3e:48:91:48:48:b5:1c:24:df:db:
         42:94:60:a9:37:ee:6b:fa:51:96:56:cc:a1:39:04:d9:34:75:
         90:33:98:93:ac:43:34:49:c3:30:2d:47:54:0a:04:db:e5:44:
         57:d6:ef:d3:1e:5a:15:51:ab:4a:b3:76:9b:71:a0:1f:cf:40:
         fc:54:71:ee:64:2c:2d:14:86:21:80:dc:d0:f5:b6:5d:b1:b4:
         d3:bf:9d:ca:89:23:a0:5d:5a:47:b0:ba:d0:ec:31:76:c7:a6:
         d8:c9:9b:e4:b6:0f:1a:df:2f:9c:38:38:75:7b:5d:38:c6:03:
         56:60:32:6e:31:69:ad:ae:3f:17:c7:99:73:97:61:fb:90:3e:
         43:8c:e8:32:65:8d:a9:63:bb:dd:10:0e:d5:ea:e2:71:48:0a:
         f2:b9:6c:62:26:ff:3c:22:71:3d:b3:ab:85:fc:3f:23:bc:36:
         21:d0:c9:f6:3f:70:50:89:aa:fe:38:b3:03:1f:b0:b1:c4:1e:
         85:79:c4:88:08:4a:07:d3:d1:25:bf:d8:f4:dd:f0:f1:b5:5d:
         ce:d7:80:bb:00:c4:25:3d:e9:6e:78:a9:35:b7:e0:71:ae:06:
         52:38:55:22:43:1e:59:c8:42:fc:4e:be:41:c8:47:25:a6:cb:
         11:d6:af:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org