Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3134332e302e3134382e302f32322d3234203d3e20323634303035.roa
File:                     3134332e302e3134382e302f32322d3234203d3e20323634303035.roa (raw, json)
Hash identifier:          dwrmN8LvfxuxHiisJQJy04TvdH/ANECAE8JSpG8srik=
Subject key identifier:   DD:94:81:B1:51:04:79:67:47:A8:C9:E4:7C:C4:4E:44:E5:7A:A7:A8
Certificate issuer:       /CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
Certificate serial:       7B3008456899B19CF876CB1D746904653BD2D1A8
Authority key identifier: 86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3134332e302e3134382e302f32322d3234203d3e20323634303035.roa
Signing time:             Thu 17 Aug 2023 16:26:01 +0000
ROA not before:           Thu 17 Aug 2023 16:21:01 +0000
ROA not after:            Thu 15 Aug 2024 16:26:01 +0000
asID:                     264005
IP address blocks:        143.0.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:30:08:45:68:99:b1:9c:f8:76:cb:1d:74:69:04:65:3b:d2:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4F5F3F82C697369F8DC3463D628990698CCBA
        Validity
            Not Before: Aug 17 16:21:01 2023 GMT
            Not After : Aug 15 16:26:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:d3:90:a6:de:50:e2:94:d2:68:da:3d:2b:
                    bb:42:d1:59:bf:02:db:cb:7e:05:e2:1a:74:15:4f:
                    ff:1a:2d:1a:16:31:ec:04:65:8f:3c:c8:33:be:49:
                    7a:13:5c:86:cc:af:ea:e2:f0:ac:b7:37:38:ef:f3:
                    29:73:0c:77:d1:95:7d:45:34:ef:5d:47:91:97:1d:
                    be:d1:98:e3:dd:12:3c:c1:4f:c0:0f:a4:b6:ca:43:
                    2e:fd:5a:28:5e:78:33:01:dc:7a:ee:e5:8c:83:1e:
                    f0:bc:4c:91:3c:94:f4:9f:51:17:fc:03:e5:ef:0f:
                    54:93:bd:36:1c:7a:23:c8:83:91:88:c4:02:d7:39:
                    a7:42:89:2e:fc:5b:54:a0:44:76:7b:1e:fd:9f:2d:
                    05:5c:65:28:a5:73:31:c5:ed:0e:d2:de:39:a6:b2:
                    53:c2:e2:30:ee:d1:ab:39:ee:0d:f5:5f:c1:3f:08:
                    fd:95:ec:65:35:db:71:ba:0c:38:a8:b9:d3:7b:2c:
                    8a:c7:69:3e:79:9e:f0:e8:18:3e:42:38:25:da:76:
                    13:8e:14:1c:01:b9:84:6e:c2:30:3c:20:27:b6:a8:
                    82:63:f2:e5:bf:42:ad:f6:d3:2b:10:0c:06:e5:ab:
                    1c:80:6c:ad:95:b0:aa:4f:2e:57:78:44:0a:9d:58:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:81:B1:51:04:79:67:47:A8:C9:E4:7C:C4:4E:44:E5:7A:A7:A8
            X509v3 Authority Key Identifier:
                keyid:86:F4:F5:F3:F8:2C:69:73:69:F8:DC:34:63:D6:28:99:06:98:CC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4F5F3F82C697369F8DC3463D628990698CCBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWQYQjGeR5orB8ZAFbnAeWUVyjwkUnjKMaUX3UxeYPC5/0/3134332e302e3134382e302f32322d3234203d3e20323634303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:04:b6:92:58:8a:00:11:9f:db:da:db:1e:63:ad:7c:ff:
         06:de:5f:37:a6:7c:e1:32:a9:cd:2e:8b:b8:18:65:dc:39:19:
         f7:18:88:b1:40:98:e5:f7:98:6c:3f:f0:4c:75:5b:2f:04:5a:
         78:24:21:cb:d6:95:6d:f1:8e:2c:cd:2b:98:5b:14:b3:4f:9c:
         c5:cc:6d:c8:7e:41:98:b7:66:cb:36:19:40:65:59:5f:c3:64:
         74:58:bd:f6:d4:b9:fe:db:2d:ee:24:fc:40:65:a2:c3:17:7b:
         55:13:c8:bc:0b:4c:20:e3:d4:f4:4b:8a:9f:48:8d:5e:31:52:
         59:a0:8c:52:ed:e9:61:cf:e8:31:f2:dc:8b:bd:66:5d:95:87:
         0d:ae:78:23:fb:c0:1a:70:e9:58:42:f5:f0:0a:b2:ed:60:86:
         e4:b1:05:29:99:2f:18:f0:b8:0d:eb:5e:e6:9d:b2:62:d3:a0:
         4e:54:3a:29:3d:36:07:7b:94:ab:6b:27:91:ed:39:81:b7:f6:
         8e:b7:c4:8c:a4:6d:24:24:d1:8e:c1:57:c7:a2:f5:57:58:40:
         57:93:31:9d:07:aa:4a:2e:b0:6f:d7:30:e2:e8:3b:26:3d:b6:
         e5:4f:52:f2:53:e4:24:92:af:ba:71:73:99:85:59:59:00:9b:
         e1:6e:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org