Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
File:                     3134332e302e3235322e302f32322d3332203d3e20323634303233.roa (raw, json)
Hash identifier:          VPORRWySmDxIhijhvtgejTl/xFkjstb9t4jxQpa6pFQ=
Subject key identifier:   C8:16:BC:49:47:E2:3E:2C:F3:BD:F4:07:9C:C1:F3:3D:0B:FE:66:3C
Certificate issuer:       /CN=1F8EA56D0372D7921494C12386D333D8E95C252D
Certificate serial:       3255E917FB02A676B9FCFA1917CB35D4CDBB2B0F
Authority key identifier: 1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
Signing time:             Fri 25 Aug 2023 13:02:53 +0000
ROA not before:           Fri 25 Aug 2023 12:57:53 +0000
ROA not after:            Fri 23 Aug 2024 13:02:53 +0000
asID:                     264023
IP address blocks:        143.0.252.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:55:e9:17:fb:02:a6:76:b9:fc:fa:19:17:cb:35:d4:cd:bb:2b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8EA56D0372D7921494C12386D333D8E95C252D
        Validity
            Not Before: Aug 25 12:57:53 2023 GMT
            Not After : Aug 23 13:02:53 2024 GMT
        Subject: CN=C816BC4947E23E2CF3BDF4079CC1F33D0BFE663C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:da:99:99:7b:1b:4f:22:49:f1:f8:4a:95:
                    ea:e4:cc:2e:55:1a:21:83:7a:2d:a3:c0:eb:f1:55:
                    72:ee:b2:bf:56:0f:00:43:62:c2:9b:30:84:f0:6d:
                    87:aa:0b:d7:03:90:82:f9:27:9b:2e:86:b6:bb:49:
                    59:fc:a4:a4:79:ae:a5:9f:47:82:10:f2:e4:0f:9c:
                    b5:ae:26:53:2e:e0:2a:1e:b7:a3:20:fd:26:d8:a0:
                    66:6a:ce:ad:17:5d:cd:fb:81:a8:69:be:97:8d:af:
                    97:66:a2:97:69:20:7e:0a:67:40:97:1f:5f:7e:ed:
                    eb:42:67:94:e6:fa:d9:eb:2d:6d:12:c8:09:18:6e:
                    f2:2e:bb:40:23:13:de:12:63:9a:8b:90:7b:11:ff:
                    bd:21:2f:a7:30:90:43:44:b1:ce:42:b4:a0:0b:18:
                    b6:10:71:1a:fa:44:f2:05:7f:6a:02:b3:21:59:4e:
                    53:81:1d:20:42:7c:65:e7:ab:1f:df:d2:58:d1:cf:
                    7b:f9:03:22:d5:95:be:fb:c4:78:1b:36:00:bb:0a:
                    e8:f4:b6:4b:0b:ae:fc:35:ff:ce:16:38:f6:43:70:
                    ff:ff:24:21:0b:cc:7e:e6:a9:58:7a:2f:3e:89:25:
                    0c:90:f8:4b:5b:0f:6d:6a:1a:5b:a0:f6:83:bb:c7:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:BC:49:47:E2:3E:2C:F3:BD:F4:07:9C:C1:F3:3D:0B:FE:66:3C
            X509v3 Authority Key Identifier:
                keyid:1F:8E:A5:6D:03:72:D7:92:14:94:C1:23:86:D3:33:D8:E9:5C:25:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/1F8EA56D0372D7921494C12386D333D8E95C252D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F8EA56D0372D7921494C12386D333D8E95C252D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:42:db:aa:73:4f:b2:21:2f:83:50:4f:c0:7d:50:47:d2:
         ec:a6:0a:23:01:d3:d5:a1:5a:a9:c9:bf:07:26:d0:b2:c3:13:
         e4:ac:cb:f9:db:58:31:10:ac:ee:c6:11:8f:b1:f8:6e:6d:09:
         13:82:c7:c8:81:10:8c:6c:35:48:fe:8e:94:91:db:1a:83:ec:
         8a:75:17:4c:fc:0a:1b:de:88:d2:d0:fa:0f:85:ad:57:f0:7e:
         36:4c:2a:70:f3:28:9c:98:88:31:75:9d:5f:bf:75:4c:88:75:
         98:30:89:66:3b:59:b2:56:79:fe:28:d0:2f:04:f8:71:bd:a4:
         a5:ea:31:70:76:66:f4:5c:9f:a6:84:6d:80:4a:fb:4b:2b:62:
         3b:ff:a7:b3:0b:6a:fe:83:3a:fa:7b:70:d5:8e:35:2a:af:d7:
         66:eb:8d:50:3d:0a:0e:e3:52:73:f9:53:c8:f4:f9:1d:03:07:
         96:6b:b7:b1:ec:d4:f5:83:09:de:e7:89:70:bf:5b:a3:82:8f:
         66:08:dc:09:88:cd:c8:7e:86:f7:3a:2a:e7:1f:20:c5:55:17:
         cc:13:ec:80:15:3d:97:50:0c:1c:e6:8d:60:e8:47:e2:79:24:
         26:df:07:ef:c7:26:dd:9a:3e:91:20:45:23:06:fd:d2:c0:37:
         82:2f:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org