Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          EsGyI9R2D0BHdD/TFijedo8mB4Qx8ZlqEogY7VzItHI=
Subject key identifier:   EF:DD:1F:94:0B:25:34:15:83:5E:DF:3C:6F:8A:1D:A6:FE:8B:C1:04
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       57385CCB86249B3C988503C17A0C337A8EC73F86
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        143.202.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:5c:cb:86:24:9b:3c:98:85:03:c1:7a:0c:33:7a:8e:c7:3f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=EFDD1F940B253415835EDF3C6F8A1DA6FE8BC104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:36:e6:49:b2:d4:af:e1:22:0c:88:c9:cc:
                    f1:f4:e4:90:05:13:65:0f:4f:47:22:87:78:33:ec:
                    c0:50:a9:aa:8c:4b:35:1b:d3:26:fb:af:7b:76:65:
                    c9:57:e7:1b:1e:d2:03:53:30:e1:1f:b4:04:fc:bf:
                    36:ef:1a:e9:d6:38:c0:56:0d:b6:38:d4:ed:8d:90:
                    6f:7d:16:be:86:ce:bf:27:15:83:01:d4:e1:94:e4:
                    6f:78:26:ed:3a:44:df:b4:21:3f:52:5f:d3:92:49:
                    5c:8a:cf:fb:e6:a7:bb:39:ff:ef:af:ac:21:77:6c:
                    2b:d2:e2:4f:61:18:53:11:16:eb:69:d2:3a:ed:85:
                    fe:ba:a3:f4:0d:d5:12:3a:45:46:0e:4f:cb:71:75:
                    1c:1a:e6:34:6a:72:52:15:f8:bf:b1:db:1f:81:0d:
                    d7:87:d3:64:2a:b8:8e:58:8d:5a:64:66:e5:f9:16:
                    7c:11:c7:f3:8e:69:89:e7:12:b9:2d:82:2b:d3:f2:
                    16:63:81:fa:8f:d3:29:5e:5c:b2:58:4b:a9:e1:7d:
                    e4:6e:c9:3a:94:04:62:4e:64:bc:75:89:c0:db:f3:
                    35:c1:46:e1:85:dd:6e:c4:6b:28:e9:eb:3b:42:0b:
                    17:7c:a9:1a:5a:f5:d1:69:3e:f7:c0:67:2a:40:76:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:1F:94:0B:25:34:15:83:5E:DF:3C:6F:8A:1D:A6:FE:8B:C1:04
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:4a:af:df:7d:53:b6:c8:cc:59:01:c8:78:8b:b1:3d:1d:
         c8:f5:af:0c:b4:ee:6a:0f:f1:f1:df:43:73:7b:59:dc:4d:a8:
         5e:c1:87:1a:74:b5:ba:0f:f0:c2:5d:0e:54:80:14:8e:11:43:
         e7:bb:8a:09:23:e3:4f:85:e4:4b:c6:ad:95:98:16:bc:08:ca:
         3f:8a:54:be:91:e9:7c:79:e4:e2:28:32:14:17:6e:2f:f2:87:
         6e:c6:42:f4:75:b2:4f:59:7d:20:59:61:46:c7:ea:2b:8e:da:
         6a:72:43:cc:4c:a2:35:05:ba:a6:6e:40:85:7c:85:19:6c:03:
         7e:4e:e2:01:4c:8c:cb:c8:04:ee:5e:41:6f:f4:bc:ff:cd:4a:
         82:1c:cb:fb:b6:1c:9b:11:cb:1c:df:49:a0:2a:56:50:30:32:
         b0:2f:b9:0c:15:9a:e8:83:f4:f5:23:5b:3d:64:45:a1:ec:3a:
         5a:8f:60:98:f0:62:b7:37:f5:bc:e4:8e:e9:46:47:b2:5c:40:
         b1:66:95:ea:66:67:9b:91:dc:ae:c4:6d:61:d1:5d:8e:6e:76:
         b9:94:e3:d3:7d:6c:d3:04:39:93:82:4a:e8:ba:03:fa:b9:58:
         6f:c9:d4:27:91:cf:f7:81:e0:8d:4b:a8:2f:3c:fe:ae:c4:88:
         d8:2b:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org