Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa
File:                     3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa (raw, json)
Hash identifier:          1TOwdaZpBfsonorqgzwl7iU9XIoJ26r/GvdSyHsX3/8=
Subject key identifier:   A5:7C:5C:F4:60:2F:98:BF:E7:8C:A1:B4:AB:28:C0:F1:81:8E:86:C9
Certificate issuer:       /CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
Certificate serial:       119D98C99FCA5B80314C300A95B7B2523B1D624D
Authority key identifier: E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa
Signing time:             Thu 21 Mar 2024 19:43:18 +0000
ROA not before:           Thu 21 Mar 2024 19:38:18 +0000
ROA not after:            Thu 20 Mar 2025 19:43:18 +0000
asID:                     264091
IP address blocks:        143.208.130.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9d:98:c9:9f:ca:5b:80:31:4c:30:0a:95:b7:b2:52:3b:1d:62:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102
        Validity
            Not Before: Mar 21 19:38:18 2024 GMT
            Not After : Mar 20 19:43:18 2025 GMT
        Subject: CN=A57C5CF4602F98BFE78CA1B4AB28C0F1818E86C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:63:4a:ee:b6:e6:8a:e2:5a:ef:f6:74:02:
                    b0:fc:10:46:ea:e5:4c:84:e5:52:53:e9:be:a7:7b:
                    ca:10:03:ce:af:db:1b:d4:8b:ba:21:b5:ab:fa:65:
                    da:c1:83:28:f1:1d:75:df:9f:4d:93:c4:8d:c0:72:
                    87:07:66:97:23:79:ff:a9:f0:7b:54:6b:9a:58:03:
                    a6:f8:0f:33:bf:d8:a1:a4:dd:da:b1:9c:29:4b:8e:
                    5c:e1:ca:64:0b:26:dc:73:da:fa:40:47:a8:f4:7d:
                    22:e7:15:21:d7:d4:02:cd:28:48:10:58:f6:f8:88:
                    57:3f:10:c8:57:5d:8e:5a:06:ca:73:4c:e2:a2:1b:
                    c8:79:8d:1c:b7:e2:b9:83:34:4b:e2:78:19:75:86:
                    1b:34:19:0c:a6:74:b9:ff:1d:34:44:f1:73:5d:db:
                    21:0a:42:2b:66:ac:df:3d:af:49:02:76:6b:a7:dc:
                    a7:1f:fa:5f:7d:ad:b4:1e:c9:94:bf:fa:3a:94:38:
                    ff:b4:67:1c:d4:b4:a7:71:a2:8a:99:b0:bb:f0:5e:
                    e3:07:9b:06:84:4e:ca:e1:da:70:c2:46:f1:13:7d:
                    37:d5:e0:98:51:1d:07:76:10:44:3f:f1:b9:32:3f:
                    28:50:86:d4:85:6e:81:4a:70:d6:4d:6a:9b:51:93:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7C:5C:F4:60:2F:98:BF:E7:8C:A1:B4:AB:28:C0:F1:81:8E:86:C9
            X509v3 Authority Key Identifier:
                keyid:E5:F0:27:1E:E7:7B:00:E3:F2:BA:75:BE:EA:E9:0D:55:7A:4E:31:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5F0271EE77B00E3F2BA75BEEAE90D557A4E3102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:41:9e:6a:59:60:26:a8:1b:a9:cf:6b:d1:30:3e:2f:d6:
         ee:67:0c:90:83:8b:af:97:03:31:f0:87:16:7a:6a:d1:0b:b0:
         ab:f7:79:23:3e:e1:b3:cc:8c:30:87:84:51:7f:0d:d8:ca:48:
         0f:30:36:61:e6:7e:23:09:08:db:8e:2c:bc:75:61:db:ab:5c:
         e3:22:df:23:5d:75:a2:17:4d:42:9d:5f:97:bb:e3:82:f2:7a:
         d9:6d:e9:46:79:98:0b:d5:d3:c3:ab:4a:ff:d3:f9:4c:56:a2:
         af:43:72:f6:6e:47:0d:43:95:bd:96:53:8c:9a:28:46:a9:a0:
         84:45:3a:09:5c:00:9b:42:c5:5a:0f:2d:0a:0f:06:7f:94:74:
         b0:36:e2:07:58:1a:7c:72:ec:a8:a1:e4:8f:9d:b1:8f:06:77:
         7e:59:bd:d9:bc:3b:ae:c2:86:9f:68:20:b4:a4:0e:76:4d:bd:
         4e:0b:90:43:25:38:ec:7b:b9:4f:0e:1e:c3:e9:1f:bf:8c:56:
         ad:8e:f6:86:d1:c1:dc:ea:ee:b1:c8:62:50:39:56:31:e9:75:
         65:d3:12:70:bc:af:cc:a6:40:8e:06:21:3f:79:b8:ef:da:c4:
         ee:aa:56:c6:f5:77:e7:b1:1d:aa:6d:10:fc:f6:44:22:94:78:
         1f:43:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org