Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
File:                     3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          idZNbe9CmhNC6ffCVTWeyGAPOpg3Z84VV7QXSpKE240=
Subject key identifier:   92:B4:DF:8E:87:C6:84:D7:19:21:EC:A0:6D:AC:2D:F1:70:20:DD:AC
Certificate issuer:       /CN=D54EA86AED4619E690E439D38757C43EA1E3C266
Certificate serial:       3E3022025857C6DC6DB5FFFDE1BE2ABF8E8EEECB
Authority key identifier: D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
Signing time:             Sat 05 Aug 2023 15:17:59 +0000
ROA not before:           Sat 05 Aug 2023 15:12:59 +0000
ROA not after:            Sat 03 Aug 2024 15:17:59 +0000
asID:                     263558
IP address blocks:        143.255.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:30:22:02:58:57:c6:dc:6d:b5:ff:fd:e1:be:2a:bf:8e:8e:ee:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54EA86AED4619E690E439D38757C43EA1E3C266
        Validity
            Not Before: Aug  5 15:12:59 2023 GMT
            Not After : Aug  3 15:17:59 2024 GMT
        Subject: CN=92B4DF8E87C684D71921ECA06DAC2DF17020DDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:ff:01:2d:7f:5e:dd:a2:90:ee:47:7a:5e:
                    18:0f:ab:32:20:a3:f0:c3:f7:ca:e6:99:8c:b3:66:
                    6a:71:dd:ef:da:d7:88:d2:89:a3:58:66:f2:c9:41:
                    97:ec:a3:b3:9e:73:82:c1:df:4f:a3:7a:a7:95:5f:
                    37:99:c0:2f:f0:37:9d:10:4e:87:af:dc:af:a2:4f:
                    66:93:f2:1c:4a:08:d4:50:b1:d3:93:f6:b8:23:24:
                    19:0e:e0:9e:a7:3a:04:10:17:de:c3:bc:b6:bb:ae:
                    5c:ac:66:b2:f0:92:6c:4f:69:6d:b1:34:33:e7:25:
                    e6:73:61:4d:71:6d:53:5a:3a:fb:fd:c8:a8:0f:1a:
                    f4:a8:4e:bd:cb:2a:4c:e4:75:2b:5a:ab:60:bf:52:
                    6c:4e:78:2f:ae:85:dc:a5:28:a4:40:84:8f:43:a3:
                    8a:84:18:9f:81:c4:93:83:19:0e:02:16:43:b6:6a:
                    54:c8:16:82:05:d6:b3:ab:59:40:5f:93:74:3f:5c:
                    3d:e9:e1:cf:9e:2f:b8:0b:a5:8d:8c:8b:64:c1:b6:
                    8a:d9:42:9d:3a:04:06:c3:16:e4:2d:71:34:6c:92:
                    60:45:c8:dd:37:35:57:fd:15:d2:4d:b5:86:86:b9:
                    79:96:4c:1a:e7:32:e5:79:22:68:be:3b:d7:82:8e:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:DF:8E:87:C6:84:D7:19:21:EC:A0:6D:AC:2D:F1:70:20:DD:AC
            X509v3 Authority Key Identifier:
                keyid:D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/D54EA86AED4619E690E439D38757C43EA1E3C266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:c8:86:13:aa:34:ec:b0:da:59:8a:9b:92:13:96:94:e3:
         67:40:8b:60:5d:83:a4:58:b7:f7:93:31:a8:61:5e:35:14:42:
         5f:57:7b:91:90:3a:aa:22:33:99:f7:be:c8:18:7d:dc:01:95:
         05:84:69:12:f8:2d:02:ef:15:ab:4b:33:05:3e:1d:da:e9:5e:
         1f:4f:6c:b3:b4:23:86:67:82:e7:a8:de:03:51:5a:7e:38:5f:
         f9:70:78:7d:83:83:2a:77:e3:5a:5a:85:80:25:2c:63:f0:96:
         25:16:c8:db:73:68:1f:8d:18:ce:e9:1e:b8:39:b6:1e:8b:c2:
         96:cb:a9:4a:8e:c1:2a:f6:47:be:0b:d0:73:3a:0e:ba:7b:1f:
         1d:9f:67:51:1c:74:8b:d0:08:17:4e:e3:b8:9f:20:52:18:29:
         a4:d1:52:ee:7a:ab:d4:3a:79:67:2d:64:0d:7a:96:bd:fb:2d:
         11:1a:7a:7f:9c:28:a2:d5:9c:e1:fd:cd:1f:70:64:96:8d:f8:
         fd:83:0c:87:7f:3e:04:fe:41:9a:93:a6:10:7a:27:b8:e9:5b:
         aa:9f:8f:39:b5:4e:49:98:94:38:ff:1f:41:dd:f9:6c:57:af:
         82:bb:ef:64:4d:22:27:b4:81:b9:59:97:08:ad:ce:cc:9c:e2:
         3c:c3:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org