Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3134332e3230322e34342e302f32322d3234203d3e20323634343938.roa
File:                     3134332e3230322e34342e302f32322d3234203d3e20323634343938.roa (raw, json)
Hash identifier:          R1JpyjsMRjVZFw4rQTtRn4G9sq8ma9hdBbqK/m57xys=
Subject key identifier:   08:53:DE:C0:1B:88:74:30:26:2E:6C:C1:0F:F8:68:8C:A9:4A:88:90
Certificate issuer:       /CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
Certificate serial:       4F57BC3C8B4F423DD16C6434AF75FE391120F06D
Authority key identifier: 1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3134332e3230322e34342e302f32322d3234203d3e20323634343938.roa
Signing time:             Thu 18 May 2023 13:52:55 +0000
ROA not before:           Thu 18 May 2023 13:47:55 +0000
ROA not after:            Thu 16 May 2024 13:52:55 +0000
asID:                     264498
IP address blocks:        143.202.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:57:bc:3c:8b:4f:42:3d:d1:6c:64:34:af:75:fe:39:11:20:f0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB835F638B945A17C2B3DCED78B9A04E943DBAF
        Validity
            Not Before: May 18 13:47:55 2023 GMT
            Not After : May 16 13:52:55 2024 GMT
        Subject: CN=0853DEC01B887430262E6CC10FF8688CA94A8890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:53:7d:e6:ef:34:ea:79:22:4a:32:7a:b8:
                    dc:1a:7f:d6:73:38:eb:b6:e0:b8:ca:b7:a5:3b:61:
                    4f:04:56:24:98:df:01:ae:7b:c0:4c:00:e9:6c:7d:
                    da:b2:df:d3:e0:56:76:98:93:9d:e1:92:bc:b7:21:
                    2a:c8:66:1b:e6:a7:b8:ae:61:95:be:1f:18:cc:29:
                    e6:a6:84:64:4d:b6:fe:bf:61:6b:14:33:88:17:14:
                    ab:bf:fd:28:41:27:e5:a0:cf:e8:ad:5b:62:e2:1b:
                    7a:08:63:f0:cb:d3:a1:66:39:65:8f:a5:76:59:c0:
                    16:57:aa:27:2b:08:84:59:7d:ea:30:a5:96:ea:c7:
                    d0:c1:af:fb:42:b9:20:6f:ea:3b:2d:34:11:ec:33:
                    61:7e:d2:e1:0d:fa:44:c6:32:e7:c7:73:8f:0b:46:
                    32:1b:43:6a:46:a6:ed:41:e9:8d:aa:c0:65:92:0c:
                    54:ce:74:6b:f7:6a:2b:29:fa:d1:10:84:93:94:a0:
                    e2:f8:d7:83:c1:23:16:3e:c3:53:1b:81:e5:a5:7d:
                    32:66:74:8c:4c:32:9e:22:ce:c2:10:31:fe:1d:ce:
                    36:f8:7e:7a:0e:f1:0a:ac:2f:cb:d5:bf:68:a0:e1:
                    51:39:19:c9:85:c0:c6:5a:7f:2f:50:73:de:b1:85:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:DE:C0:1B:88:74:30:26:2E:6C:C1:0F:F8:68:8C:A9:4A:88:90
            X509v3 Authority Key Identifier:
                keyid:1C:B8:35:F6:38:B9:45:A1:7C:2B:3D:CE:D7:8B:9A:04:E9:43:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CB835F638B945A17C2B3DCED78B9A04E943DBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9bWrY7VJcdg7vi4sjNJYEe5BdGyP7fXsFZeW6dtd3YY/0/3134332e3230322e34342e302f32322d3234203d3e20323634343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:41:04:55:1b:2c:51:0b:28:03:16:c8:49:5b:fe:2e:5f:
         de:0f:99:df:e7:20:73:22:d8:3c:3d:2f:f2:07:3f:47:a8:7c:
         68:e2:2b:33:15:5e:e5:9b:41:1a:f9:10:83:68:0e:99:c4:ec:
         17:99:e8:4a:33:1f:3b:84:de:73:c8:b5:a8:63:37:26:6a:03:
         d9:be:ee:bb:51:fb:fa:5a:ab:db:88:38:f1:51:cc:fc:0a:36:
         c4:ed:26:40:55:10:59:21:dd:e2:7f:9a:bf:a0:d0:ac:39:99:
         5f:9e:ef:ef:fa:fb:c5:3a:32:55:fc:02:74:7a:50:78:8e:3b:
         3e:da:28:aa:79:83:95:f4:e4:b3:b1:6a:45:e4:66:74:4f:37:
         63:cf:34:7f:2b:48:a1:47:a5:cf:5a:1b:4b:c9:ac:8c:4f:6c:
         b6:a0:cc:c0:f0:1d:d2:61:06:b8:74:cd:1c:2b:62:23:5c:df:
         15:67:64:ed:49:79:09:3e:a7:e3:57:04:75:53:a2:ea:c9:4b:
         43:52:4a:4f:b8:a2:eb:6b:60:1e:89:8e:5a:8c:4a:76:2c:35:
         bb:47:7c:b0:86:66:30:e8:e2:64:96:c2:86:e1:6d:05:b8:21:
         c6:46:3c:20:cd:a6:35:36:6c:bb:91:db:79:84:6e:0d:2b:e8:
         2c:a0:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org