Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa
File:                     3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          7wmkmGxmtZ04rQC181Wn4ug4q7UAEaVaJYI55si0lrQ=
Subject key identifier:   8F:AB:14:55:F1:8D:CD:32:BE:77:C3:05:B3:AF:36:0C:76:0C:80:30
Certificate issuer:       /CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
Certificate serial:       6EAEDB288342DE7B5A6F8339C9546C94DB08924B
Authority key identifier: AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa
Signing time:             Tue 22 Aug 2023 15:25:39 +0000
ROA not before:           Tue 22 Aug 2023 15:20:39 +0000
ROA not after:            Tue 20 Aug 2024 15:25:39 +0000
asID:                     61856
IP address blocks:        143.208.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:db:28:83:42:de:7b:5a:6f:83:39:c9:54:6c:94:db:08:92:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
        Validity
            Not Before: Aug 22 15:20:39 2023 GMT
            Not After : Aug 20 15:25:39 2024 GMT
        Subject: CN=8FAB1455F18DCD32BE77C305B3AF360C760C8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:57:b9:40:52:d4:63:69:c7:1b:80:84:13:
                    04:2b:dd:81:5b:81:76:cb:6d:1f:10:1d:8b:cc:b8:
                    30:13:16:70:c5:90:6f:48:77:06:f8:6b:1d:26:fc:
                    cf:f2:55:5b:9e:4a:7f:c9:e0:cd:a0:91:e4:3b:ed:
                    68:8d:02:e2:a4:e3:7d:5f:b7:a1:d6:2f:b2:e5:4b:
                    93:e6:17:2d:fa:62:39:a3:98:75:d7:b1:28:52:cd:
                    8f:dd:75:b7:91:40:05:13:34:2b:81:e6:82:79:df:
                    64:68:65:64:54:88:ec:2e:84:d8:08:47:f9:27:ce:
                    4a:67:70:51:36:56:89:ca:40:66:a0:9b:06:05:1a:
                    2e:fb:43:5f:2d:b4:a0:54:68:d8:14:bb:cd:a5:13:
                    3d:35:9b:6d:19:4f:2f:20:ee:18:76:a5:f7:c7:49:
                    ed:ae:81:b8:f9:be:c3:df:a3:c5:f8:9c:1e:d1:b8:
                    02:91:7e:0f:34:8e:c7:b5:69:09:fe:dc:0a:5c:4c:
                    7f:05:03:79:32:ff:e0:64:dd:9a:a6:f5:d6:13:4d:
                    c8:e8:3a:a1:fa:a0:1c:1b:85:e3:51:44:27:8f:2b:
                    b0:4c:71:c6:5e:91:cf:fd:14:7d:f3:31:eb:8c:30:
                    10:bf:cd:e8:30:a4:5a:13:34:80:21:4f:6f:fc:66:
                    b5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AB:14:55:F1:8D:CD:32:BE:77:C3:05:B3:AF:36:0C:76:0C:80:30
            X509v3 Authority Key Identifier:
                keyid:AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3134332e3230382e3132302e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:05:d4:2b:c2:3e:7e:fb:db:3c:d4:0f:cd:ea:8b:24:05:
         74:2d:bb:2e:09:dd:6c:2c:c6:49:7a:39:6f:6a:e4:df:04:fe:
         05:c3:ba:8d:54:e7:eb:64:6d:15:51:c4:46:ca:b6:53:b6:48:
         5b:f3:d7:12:97:0a:4b:c6:fc:d0:9d:28:4b:fa:d2:6c:dd:d4:
         83:7a:23:12:62:98:33:34:da:09:e8:32:6e:8d:1a:af:02:db:
         70:2f:06:1c:25:12:61:2f:a8:89:c2:c8:0e:80:61:27:91:32:
         f7:87:3b:9f:fa:4a:6c:c3:84:25:c5:8e:e0:a4:09:8b:c5:a0:
         b7:7d:df:b8:64:e7:9c:79:e8:2c:bd:7e:72:20:c0:72:14:51:
         74:90:e1:df:4a:16:8b:cf:8a:cf:60:09:57:bf:06:36:24:63:
         6c:6f:c3:50:3d:fb:ba:62:a3:b9:42:d1:bd:75:55:e9:2f:34:
         bc:60:19:99:1d:62:f3:d4:ef:f9:af:0d:6d:76:f6:ee:9a:8b:
         d8:65:8b:fb:c5:71:cd:89:1a:04:fe:a2:a2:54:66:3a:a1:f1:
         25:69:4f:32:12:31:db:09:a9:ef:98:c0:6d:8f:3e:e2:8d:2e:
         44:f0:04:19:2b:72:a0:04:f6:55:4c:3d:1f:60:7b:82:cd:fe:
         15:b8:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org