Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234332e302f32342d3234203d3e20323632323933.roa
File:                     3134332e3230322e3234332e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          UQbV5JO+DnoYDGi8itmwZSwFxAiHfjZE5wY8LdUSlVs=
Subject key identifier:   70:6F:E0:42:DE:4A:6C:65:4F:39:17:60:A8:82:63:F4:90:C3:D5:CD
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       543A301E0C27CC2F621B65DC63C769226BD157FA
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234332e302f32342d3234203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:36 +0000
ROA not before:           Tue 02 Jan 2024 21:11:36 +0000
ROA not after:            Tue 31 Dec 2024 21:16:36 +0000
asID:                     262293
IP address blocks:        143.202.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3a:30:1e:0c:27:cc:2f:62:1b:65:dc:63:c7:69:22:6b:d1:57:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:36 2024 GMT
            Not After : Dec 31 21:16:36 2024 GMT
        Subject: CN=706FE042DE4A6C654F391760A88263F490C3D5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:8e:c5:8d:59:92:35:24:ce:88:dd:3e:38:
                    a4:28:43:eb:34:c3:7d:d3:ae:d5:dd:62:c3:ff:e3:
                    bc:9e:16:ba:9b:dd:5c:54:38:fd:8f:61:77:2a:0a:
                    48:3d:75:fb:a6:e5:a5:57:24:8f:a6:05:c1:40:70:
                    3e:37:9f:ac:aa:f2:ca:23:9e:0a:b3:03:ff:44:9e:
                    50:07:ac:2f:e4:6e:cf:c2:29:b6:f5:56:53:7f:f6:
                    1b:de:01:a6:88:ec:39:f3:46:5f:7f:9c:48:b8:ec:
                    33:bb:5f:51:f7:c5:9b:95:21:d5:4f:6d:28:85:8f:
                    8d:9e:4a:46:6f:e4:fc:00:d5:5d:5a:56:ed:ae:bb:
                    8e:7f:2c:33:c5:3c:84:b8:56:a7:ee:dd:9d:fd:28:
                    93:55:1e:26:8f:04:aa:7a:32:7b:80:7f:c7:e0:54:
                    0c:4a:20:0f:ca:d2:57:d9:fe:f3:54:a0:a7:b2:b9:
                    c9:9c:55:de:fa:9c:18:e4:4a:55:81:20:9f:5e:a8:
                    b5:35:d9:d7:a4:87:95:17:03:ea:8b:61:ca:ab:62:
                    4c:56:43:2c:9d:47:d0:1f:cc:a9:db:f9:63:eb:bb:
                    a4:7b:1a:9e:c2:4a:0b:5d:e7:be:f4:9c:a9:76:17:
                    cf:b1:13:40:11:8b:06:9e:3c:b1:f7:8d:ca:6f:b1:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6F:E0:42:DE:4A:6C:65:4F:39:17:60:A8:82:63:F4:90:C3:D5:CD
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234332e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:5f:91:16:9e:c9:34:9b:d1:7a:63:4b:ac:f0:63:63:49:
         45:25:cd:c9:c8:14:76:3c:d7:66:0f:b4:a3:9a:a5:15:23:18:
         6b:39:ee:3c:c6:9e:7c:92:4a:e0:7a:af:7f:e7:ff:4f:83:1c:
         85:d3:4c:1d:37:00:bf:4a:c0:1f:93:40:32:20:72:1a:27:7f:
         b8:5e:d7:90:5a:63:08:e1:7a:4f:15:0c:0d:84:d0:1f:a3:11:
         a2:63:5e:96:d1:96:57:e0:42:98:3f:56:8f:b6:1e:42:b1:01:
         02:fe:3f:1a:b1:d4:6d:9c:1d:4a:a7:0b:2f:fe:30:ce:2c:70:
         ca:57:06:3f:b2:2b:5d:ae:4e:b4:01:31:26:02:e9:0c:ce:13:
         e1:63:0a:72:30:76:30:27:8b:3e:55:49:0e:93:4e:f9:f3:e9:
         f1:17:40:5c:cc:de:d7:5d:5c:37:91:03:08:53:a6:b0:4e:29:
         08:65:54:28:61:07:1e:4c:12:ac:29:70:81:15:4b:da:51:ee:
         d7:cb:1a:d9:37:84:91:20:8a:b2:4c:a1:b6:2a:22:5c:f6:ac:
         4f:5a:bd:cb:c0:de:f6:22:3d:8c:22:8e:ed:1e:74:74:8f:4f:
         f3:a6:42:f0:ad:6e:ff:fa:2b:3b:dd:db:6e:87:0e:21:29:34:
         cb:e1:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org