Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa
File:                     3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa (raw, json)
Hash identifier:          3ZI5egS6VBx2dOhmPvw2hGTvwgP0ELIhAsz1w/NdHjU=
Subject key identifier:   8D:0B:CA:28:13:A9:6D:D3:2C:04:F0:3B:85:44:D0:FB:E7:55:8E:B1
Certificate issuer:       /CN=965C3F6319859C81532121D28A8D0F5563BB2986
Certificate serial:       396E56B85417BE24650E2E4FA0572D91574227F5
Authority key identifier: 96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa
Signing time:             Wed 03 Apr 2024 22:19:01 +0000
ROA not before:           Wed 03 Apr 2024 22:14:01 +0000
ROA not after:            Wed 02 Apr 2025 22:19:01 +0000
asID:                     264091
IP address blocks:        143.208.130.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6e:56:b8:54:17:be:24:65:0e:2e:4f:a0:57:2d:91:57:42:27:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965C3F6319859C81532121D28A8D0F5563BB2986
        Validity
            Not Before: Apr  3 22:14:01 2024 GMT
            Not After : Apr  2 22:19:01 2025 GMT
        Subject: CN=8D0BCA2813A96DD32C04F03B8544D0FBE7558EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:f0:fa:0a:8c:d7:23:39:33:08:b8:76:47:
                    9b:1c:69:5d:bf:42:0b:e9:fb:2d:55:ab:d2:f8:22:
                    31:d9:c7:b0:25:c3:f1:bd:a8:a6:bb:eb:8d:1e:e0:
                    d3:08:c3:6d:20:30:36:ef:06:6b:a0:cc:ba:e9:ea:
                    ca:a1:26:5a:70:71:7a:03:b1:b0:cf:51:7f:3b:e6:
                    f5:76:34:6a:b7:76:d3:2a:50:6e:7f:67:a3:90:3f:
                    34:8b:ef:2f:b2:a7:60:f2:a0:d9:d7:53:9e:09:99:
                    31:50:a8:7a:f5:d4:51:0a:20:22:33:a9:ec:50:90:
                    04:3b:d4:96:71:c7:cd:48:fe:cf:e7:4e:17:f5:74:
                    2f:63:05:1e:a7:f1:19:24:dd:86:56:38:29:f1:5c:
                    0c:62:b8:55:74:fc:3c:8d:d9:d6:9e:18:7a:fd:cf:
                    b3:b5:44:26:22:5e:7e:3e:cb:b0:56:24:18:78:d9:
                    07:e0:14:d0:84:91:e2:9b:5b:e1:fa:78:ec:cb:9c:
                    55:35:34:43:bc:0a:ba:ef:3d:51:08:86:92:a4:5f:
                    75:23:4f:61:d7:48:12:e0:3a:eb:4b:81:de:73:d3:
                    09:e3:af:e8:57:2f:74:18:e9:0a:be:fa:24:34:77:
                    ee:ae:8c:c1:fe:9e:83:0a:8c:6f:a0:eb:99:40:b1:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0B:CA:28:13:A9:6D:D3:2C:04:F0:3B:85:44:D0:FB:E7:55:8E:B1
            X509v3 Authority Key Identifier:
                keyid:96:5C:3F:63:19:85:9C:81:53:21:21:D2:8A:8D:0F:55:63:BB:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/965C3F6319859C81532121D28A8D0F5563BB2986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/965C3F6319859C81532121D28A8D0F5563BB2986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/1/3134332e3230382e3133302e302f32332d3332203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:db:2c:64:92:44:d0:c4:01:8f:c8:c6:ee:38:cc:51:3b:da:
         66:27:67:10:b2:f0:6d:25:69:16:55:86:ef:b5:44:db:41:b6:
         33:56:8a:cf:d4:a0:6a:45:18:42:ee:6c:a4:fe:f9:ae:60:a9:
         dc:55:58:56:9e:5b:68:89:00:7b:e8:36:2c:77:cc:5f:d6:9c:
         ba:65:bc:e4:2f:01:7c:24:af:de:a5:85:5a:2f:77:c4:52:fb:
         08:67:ac:ab:fc:ce:4f:ef:b3:b7:8e:9a:5a:27:a9:76:a0:5c:
         ff:f4:79:9f:7c:9f:8f:cb:fb:08:f2:27:8a:1d:d6:9f:5b:22:
         3a:fb:ba:2f:78:df:79:c9:65:e5:d0:cb:46:39:77:29:1e:12:
         68:d6:61:ad:37:3e:c4:6f:87:c6:75:36:bf:8a:09:b3:f0:7d:
         64:2c:4c:84:af:a0:23:43:77:ce:38:40:d4:17:c8:1a:1d:89:
         c0:41:2a:f2:67:9b:0c:41:e6:a4:70:23:70:e7:96:10:83:45:
         7b:0b:47:e4:d5:00:5f:7d:b2:06:9c:89:e4:2b:dd:7f:64:f8:
         d5:57:5b:42:43:ce:88:79:3b:c0:ae:e5:dd:62:7c:8d:9d:cd:
         fd:82:61:15:64:69:e6:32:ef:ab:0b:95:35:3d:aa:f9:6a:22:
         b0:ac:ef:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org