Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa
File:                     3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa (raw, json)
Hash identifier:          /JDnAoiN+t3Qa6GAiMJ8XYmJMURU4u3VybudEeLwLNI=
Subject key identifier:   12:07:0E:D8:2D:62:63:C0:D4:CB:02:48:0C:52:18:E1:F6:05:AF:4A
Certificate issuer:       /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial:       2432681D71D90CA35A04482FBCB5912A7D62CCF4
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa
Signing time:             Thu 21 Mar 2024 19:50:56 +0000
ROA not before:           Thu 21 Mar 2024 19:45:56 +0000
ROA not after:            Thu 20 Mar 2025 19:50:56 +0000
asID:                     264091
IP address blocks:        143.208.128.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:32:68:1d:71:d9:0c:a3:5a:04:48:2f:bc:b5:91:2a:7d:62:cc:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Validity
            Not Before: Mar 21 19:45:56 2024 GMT
            Not After : Mar 20 19:50:56 2025 GMT
        Subject: CN=12070ED82D6263C0D4CB02480C5218E1F605AF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:5c:36:b0:1f:8f:e8:15:f8:50:41:36:a2:
                    38:d5:ea:42:c4:99:9f:ad:8f:18:30:07:b7:ee:7f:
                    78:5b:0e:16:5e:27:62:24:b0:be:bd:16:33:ba:5b:
                    0d:0b:5a:b3:37:e5:56:58:64:f7:6c:6b:62:0e:16:
                    81:9e:d2:c9:53:d9:ee:78:1f:42:d5:b5:36:73:c8:
                    f6:63:57:5e:10:46:a9:40:4c:5c:76:ac:20:53:52:
                    e5:9f:6b:66:5a:1b:8b:77:f8:1a:45:71:80:d6:23:
                    18:ef:be:26:d8:9c:95:a1:a2:80:9b:40:17:36:96:
                    10:c8:4d:f1:9c:ba:81:d8:62:ef:2a:ad:bf:67:bb:
                    4e:51:b9:9c:39:5b:c2:73:ee:10:56:16:3c:04:08:
                    92:ad:45:b9:b3:5d:d9:38:2d:49:4a:ff:68:d8:67:
                    49:2c:1d:47:0b:b9:6a:bb:f7:33:99:d7:c7:f2:52:
                    14:50:03:34:dc:dc:18:60:5e:ef:a7:10:71:65:9f:
                    23:01:21:45:06:bf:8e:37:86:7e:a7:88:50:72:e5:
                    e9:56:28:2c:21:0a:b5:72:74:47:92:53:df:0f:7e:
                    e8:a4:ab:9a:f4:81:29:dc:21:8f:64:91:6c:5c:00:
                    37:ff:26:b8:68:76:b7:1b:40:36:f8:6d:ee:b9:34:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:0E:D8:2D:62:63:C0:D4:CB:02:48:0C:52:18:E1:F6:05:AF:4A
            X509v3 Authority Key Identifier:
                keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3132382e302f32332d3332203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:bd:b6:70:c3:aa:12:b2:c2:1b:25:67:c6:1c:90:3c:1e:73:
         c8:91:c5:94:ab:28:73:b8:1f:3d:e8:8d:5e:37:2a:46:e8:d5:
         80:03:16:11:30:94:98:22:dd:20:31:2b:10:b8:d2:ef:fd:f0:
         4f:56:97:fa:94:3f:d9:6e:fd:cd:f2:39:2b:84:a4:e8:b8:a7:
         4b:1d:f9:41:3a:b1:3c:73:74:e3:90:a7:4a:41:d2:cb:e2:64:
         d4:9a:35:a9:04:ee:4a:4a:fd:41:98:6f:53:a2:6a:f0:de:4e:
         72:f4:f0:8e:63:c5:b2:b6:b6:82:c8:08:a1:28:d2:c3:41:d0:
         30:02:1b:3b:7c:59:f5:b3:dc:ea:80:03:8e:fd:f4:ef:fe:ff:
         96:ba:f5:c4:e8:3a:88:49:c9:af:09:a9:75:5e:6b:8a:12:fb:
         86:3d:86:d7:b4:5a:ca:59:a7:67:93:91:98:a0:c1:2e:83:18:
         59:ff:7e:d8:28:e1:c0:94:73:14:f5:a5:24:79:44:25:3f:57:
         0f:9a:9a:58:d9:6b:be:b7:8f:29:70:9c:b2:ad:6d:c5:bf:f2:
         93:47:a5:2c:a0:69:24:c3:1e:5d:ef:93:18:a2:95:b0:a7:f1:
         63:0c:d4:e2:59:54:8b:6d:f9:f7:98:46:d6:39:b6:d2:94:94:
         e5:a3:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org