Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa
File:                     3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa (raw, json)
Hash identifier:          KJpHpw0RplSq2dQAF1PSPcgUJGLjUeWSwWFNRC/sZ50=
Subject key identifier:   8E:CA:B4:EA:15:CD:F5:1E:59:EC:55:41:02:1E:F7:64:EA:69:28:73
Certificate issuer:       /CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
Certificate serial:       4535640F64742196974647680B60ADB9A1D8F5F0
Authority key identifier: 9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa
Signing time:             Tue 26 Dec 2023 18:34:31 +0000
ROA not before:           Tue 26 Dec 2023 18:29:31 +0000
ROA not after:            Tue 24 Dec 2024 18:34:31 +0000
asID:                     53167
IP address blocks:        143.202.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:35:64:0f:64:74:21:96:97:46:47:68:0b:60:ad:b9:a1:d8:f5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB
        Validity
            Not Before: Dec 26 18:29:31 2023 GMT
            Not After : Dec 24 18:34:31 2024 GMT
        Subject: CN=8ECAB4EA15CDF51E59EC5541021EF764EA692873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:a9:c1:fb:73:88:27:fb:09:20:04:c0:2d:
                    a0:12:fc:6a:4a:e8:32:68:2d:6c:02:b3:44:9e:0b:
                    cc:9d:e9:df:ec:d8:87:15:0e:f5:ff:75:fe:7c:51:
                    de:75:8e:e8:bf:99:90:58:03:36:98:2a:10:aa:f3:
                    33:e9:92:ba:db:12:a4:93:90:84:37:12:55:19:63:
                    21:18:9b:f2:d0:b5:96:9f:75:a3:d6:ec:b2:05:a1:
                    85:a7:1d:61:36:df:f1:77:e5:ea:d4:25:3b:8f:d2:
                    3a:4b:46:d9:4c:51:16:db:bd:b5:58:0c:26:f5:9f:
                    cb:e5:d7:44:fe:8e:10:85:27:2f:e4:c0:80:99:a1:
                    c8:57:84:53:25:b9:a1:95:3c:92:02:68:3b:e7:ff:
                    97:44:a8:bb:71:cc:4a:5c:5a:bc:9a:77:bb:f8:7b:
                    b7:88:a9:ad:b7:ee:5e:aa:1a:27:25:f0:18:74:bd:
                    92:b3:4d:12:89:b5:9f:0f:e8:84:e0:02:4c:a8:fd:
                    c3:a0:f2:54:19:48:a2:10:12:e3:f2:98:c2:08:2f:
                    a1:c9:f5:24:99:f6:38:62:3c:67:6c:c0:21:d5:f7:
                    bb:cc:15:83:3f:b9:a5:c6:68:57:e3:ad:03:d0:2f:
                    67:0d:58:93:ec:13:91:a6:9e:73:a3:04:e0:49:ec:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CA:B4:EA:15:CD:F5:1E:59:EC:55:41:02:1E:F7:64:EA:69:28:73
            X509v3 Authority Key Identifier:
                keyid:9B:66:9B:A0:37:F2:C9:A9:1B:9F:51:A4:4B:DD:B6:7B:2E:23:E6:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B669BA037F2C9A91B9F51A44BDDB67B2E23E6AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3234203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:81:03:11:c3:6d:44:2b:eb:97:41:3d:16:64:d9:ca:0d:
         df:a6:45:26:04:cd:8b:43:8e:06:a3:3d:20:d0:78:88:86:1f:
         62:49:bc:a8:32:8d:de:a7:48:7a:dc:04:bc:0c:e5:2f:60:c9:
         7e:9f:6f:af:6b:89:59:4e:6f:bf:95:dc:e2:f4:2d:4c:62:d5:
         fa:d8:64:aa:46:a3:fd:04:eb:07:c9:a0:7f:96:ac:1b:17:6b:
         07:2f:89:10:7b:3c:fd:d9:7f:f0:51:cd:df:e5:f9:ad:d2:05:
         a1:e9:90:7f:af:f0:6a:00:5f:0c:78:1b:52:02:88:9a:3b:d0:
         a8:ad:bb:96:17:da:f9:43:74:9b:d0:75:c7:29:7b:34:a3:cb:
         39:11:59:a3:77:d4:39:2c:29:2d:f3:0f:3d:3e:12:b8:10:1b:
         7b:4b:37:18:56:2e:86:7e:f3:dd:1c:8b:ac:f0:ad:38:7c:6d:
         e0:7e:fa:18:62:fc:88:fd:0a:ad:e8:fa:43:a6:a3:87:28:95:
         43:73:29:94:ae:cf:cc:82:e6:a4:81:8d:fd:d4:dc:1a:b7:06:
         d4:e8:53:62:1b:06:fd:f4:db:bd:9e:89:a7:76:bf:e1:0e:cf:
         e9:2b:46:8d:08:17:a6:71:5d:c8:b5:91:87:86:80:00:59:c2:
         70:d9:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:18 2024 by rpki-client on console-ams.rpki-client.org