Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3234203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32322d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          //5l7aTeg6QOiL9IIi1l7fjLnNIX6tNm2KkNdHpzClw=
Subject key identifier:   E0:22:66:B9:81:37:31:72:D5:78:FE:73:19:C6:B6:03:4F:FF:F2:3C
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       4D32F9524D270C25834FB1F82A88248E7686CB8A
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3234203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 15:00:00 +0000
ROA not before:           Tue 25 Jul 2023 14:55:00 +0000
ROA not after:            Tue 23 Jul 2024 15:00:00 +0000
asID:                     262729
IP address blocks:        143.208.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:32:f9:52:4d:27:0c:25:83:4f:b1:f8:2a:88:24:8e:76:86:cb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 14:55:00 2023 GMT
            Not After : Jul 23 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:be:c5:63:04:db:87:bf:d8:c0:fe:3e:5a:
                    75:d2:52:a4:22:41:b4:da:5b:2a:02:29:a3:9c:85:
                    e1:ec:10:22:0d:b5:db:9f:8e:14:47:08:55:89:e4:
                    8f:2d:1d:22:0c:9a:32:58:e6:23:b3:47:32:a8:12:
                    d3:6e:7e:e3:2f:b4:72:bc:60:fc:0f:ce:9e:21:43:
                    9a:b7:04:e1:43:a0:f7:eb:69:f2:3e:62:17:13:d0:
                    21:d9:96:b0:cc:bd:cf:31:47:b1:99:66:fb:70:ed:
                    fd:1a:59:69:63:93:ec:69:8c:46:f1:03:cd:66:76:
                    c1:d9:fc:78:81:05:8e:f3:b6:2c:85:e5:b2:66:c0:
                    d5:23:6f:fd:44:bc:cf:95:35:c4:c3:dd:7e:bd:91:
                    76:c2:21:9f:9b:d4:67:58:91:3c:7d:f5:18:f2:b6:
                    e3:47:5a:42:68:ff:48:04:c4:11:93:f9:60:00:e9:
                    a0:ae:ad:9a:8b:f8:ae:d1:33:40:b8:ea:14:37:25:
                    94:48:1e:de:85:18:1a:b6:81:27:2a:24:3f:fd:15:
                    dc:c9:f0:9e:9f:43:2d:2a:60:56:0d:01:54:05:eb:
                    84:38:03:bf:0a:24:ab:27:ac:61:05:4c:eb:b4:88:
                    a6:5f:6d:d4:dc:f2:97:0c:73:98:55:b5:28:33:00:
                    a8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:22:66:B9:81:37:31:72:D5:78:FE:73:19:C6:B6:03:4F:FF:F2:3C
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:3d:37:f7:49:33:8d:e5:05:d3:80:bf:51:81:7f:b6:74:cd:
         86:d0:13:f6:9b:e6:85:9d:72:ae:f7:0b:86:45:f9:c0:f4:48:
         7a:33:ba:05:97:e5:87:8c:b7:52:35:66:28:c9:c8:9e:11:a1:
         59:46:00:a3:56:fc:08:11:26:a3:6e:31:15:2a:25:2a:85:68:
         08:3e:32:96:46:43:d3:06:35:d5:13:12:8a:c6:84:b5:60:72:
         09:21:45:68:b6:b6:fc:6e:dd:cd:35:d5:f1:0c:35:f8:46:9b:
         0d:f9:ba:2a:a5:61:3c:a7:e8:e8:52:78:8d:a7:fa:fc:00:92:
         ea:64:77:c6:01:af:1a:c8:a0:5c:e4:ab:ff:d2:9b:02:33:53:
         ea:c9:92:7e:70:e0:bc:a6:cc:18:e6:b7:78:ee:42:8d:03:a7:
         ab:84:96:f4:98:b6:48:a8:4d:4e:38:26:2a:e7:32:a2:7d:58:
         b8:b5:5a:7a:10:d3:89:95:2e:ac:6c:58:1b:71:26:b1:86:f5:
         d6:d0:26:3c:d1:d4:11:e2:94:7f:28:dd:0b:2c:63:b1:02:8e:
         88:fd:77:22:43:c0:16:a6:32:81:f9:ed:99:fb:6b:2a:4e:1f:
         43:df:a8:1b:ea:28:51:f3:46:83:d5:8e:4e:4b:55:9f:76:af:
         58:81:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org