Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32342d3234203d3e20323632323933.roa
File:                     3134332e3230322e3234322e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          5kRpvhpEQMBxUIXFPVdnhZu/w/tslJAasJrNtghD7HA=
Subject key identifier:   8C:33:A4:58:57:6A:52:BF:7D:67:C2:40:20:28:8B:F6:4A:39:95:4E
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       41D60ABFAB3DC89D50DC2B12F8EAB76B3410847C
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:41 +0000
ROA not before:           Tue 02 Jan 2024 21:11:41 +0000
ROA not after:            Tue 31 Dec 2024 21:16:41 +0000
asID:                     262293
IP address blocks:        143.202.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d6:0a:bf:ab:3d:c8:9d:50:dc:2b:12:f8:ea:b7:6b:34:10:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:41 2024 GMT
            Not After : Dec 31 21:16:41 2024 GMT
        Subject: CN=8C33A458576A52BF7D67C24020288BF64A39954E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:11:21:97:d5:7d:10:b9:e5:29:df:9d:f1:
                    35:5d:68:7d:33:7c:f6:5c:f2:47:95:70:62:1f:17:
                    7c:3f:f5:b3:ad:1a:b9:fe:39:f4:1b:37:0f:2e:b4:
                    0d:df:1f:dc:fd:4d:9f:27:dc:32:90:9d:63:d4:19:
                    42:a0:71:ae:42:f4:27:1f:ad:02:46:92:9b:05:e6:
                    34:8a:f4:df:99:5c:ce:13:2c:70:a2:94:b2:53:a5:
                    d6:46:11:87:ad:77:68:60:33:64:1f:ce:15:23:bf:
                    e8:4d:47:9a:0f:d8:bd:33:95:b5:f8:29:94:ad:c3:
                    57:5b:fc:ab:29:6d:4d:e7:eb:db:5d:e5:64:88:86:
                    87:54:b6:c8:ff:5f:8b:35:d8:d2:e1:6c:83:c1:15:
                    32:3b:3c:04:5c:73:a5:95:26:fc:b7:d4:d5:f8:ef:
                    62:35:d8:30:53:c8:8b:cd:23:1f:54:98:4c:a4:27:
                    46:78:b6:1c:6c:3e:45:07:6c:d2:39:b5:06:1b:c5:
                    c8:0b:33:63:df:4e:3e:13:9f:7b:d7:57:22:a4:e6:
                    7d:9e:bd:29:6c:ba:7d:50:c1:4d:4a:a9:10:e8:63:
                    ae:87:5f:f1:20:b4:5f:6c:76:01:f3:d6:26:68:a7:
                    16:45:bf:7e:fa:09:6f:8e:ff:d4:65:65:8e:98:b9:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:33:A4:58:57:6A:52:BF:7D:67:C2:40:20:28:8B:F6:4A:39:95:4E
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:d9:44:7f:54:44:b6:2c:a0:e9:93:bd:f3:5f:c4:d6:53:
         b8:a7:02:16:98:b5:1c:24:6f:0f:64:d3:03:44:d6:e2:03:d9:
         5f:4f:e0:e3:4a:56:22:0a:82:74:53:3b:dc:fe:44:53:be:e4:
         e4:03:98:7c:1e:9d:f6:31:8c:c7:24:d2:f6:33:e5:0a:f0:ba:
         4c:3a:b9:cf:ca:69:eb:86:f5:16:be:11:ca:12:1b:e7:51:29:
         08:5d:63:0f:a5:d6:16:02:32:16:2c:b4:44:14:19:ef:48:15:
         6d:14:db:3f:ac:c3:79:e9:be:a6:ea:e0:66:1e:1f:36:4a:22:
         37:14:85:e7:2b:27:78:e1:ec:19:9c:64:6a:24:82:37:68:04:
         0d:b7:f3:c4:dd:ef:f4:10:cf:87:51:e6:99:f1:56:d7:04:47:
         32:11:81:2c:e2:21:eb:ec:e7:60:78:93:00:81:a5:db:0c:be:
         b1:9f:30:b3:df:ed:0b:75:46:15:d8:81:67:73:e1:96:43:e0:
         e0:ef:32:72:d1:f0:58:21:a4:cd:32:92:12:24:c7:20:d7:0c:
         12:79:07:f2:46:c7:de:6c:ea:14:94:a4:ae:5d:13:ff:00:9d:
         3c:16:1f:a9:a0:e6:d0:27:36:db:79:0c:7d:8f:d2:27:c5:9a:
         b6:9e:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org