Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa
File:                     3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          nZfc34laZryCvZItebK6jUU5syHE0hYqZIA3IoxhrwU=
Subject key identifier:   CE:D2:69:45:CF:77:FA:63:02:6F:3C:60:32:B1:71:37:65:D9:7C:9E
Certificate issuer:       /CN=D54EA86AED4619E690E439D38757C43EA1E3C266
Certificate serial:       669221BB4F850ABEA23B58C444C8B3890ECF52CF
Authority key identifier: D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa
Signing time:             Sat 05 Aug 2023 15:18:00 +0000
ROA not before:           Sat 05 Aug 2023 15:13:00 +0000
ROA not after:            Sat 03 Aug 2024 15:18:00 +0000
asID:                     263558
IP address blocks:        143.255.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:92:21:bb:4f:85:0a:be:a2:3b:58:c4:44:c8:b3:89:0e:cf:52:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54EA86AED4619E690E439D38757C43EA1E3C266
        Validity
            Not Before: Aug  5 15:13:00 2023 GMT
            Not After : Aug  3 15:18:00 2024 GMT
        Subject: CN=CED26945CF77FA63026F3C6032B1713765D97C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:ae:c8:95:44:6d:75:da:43:a1:d8:01:ed:
                    c3:e0:cb:d2:ff:0b:1a:ff:f6:da:5d:bc:dd:65:19:
                    3c:48:ea:02:79:d4:3e:63:1e:2d:4c:fb:39:ce:28:
                    e0:3a:b0:b6:72:d7:12:1b:5b:3e:7e:33:1c:b9:87:
                    4b:61:00:68:df:4d:df:b2:1c:b5:37:5a:0e:af:ff:
                    95:69:59:80:a9:62:ef:ab:c2:91:13:92:c4:c4:d4:
                    d1:78:1b:9f:a8:81:8b:7c:ed:90:b3:bc:71:26:1e:
                    17:5e:41:97:c6:c3:ba:21:04:a1:8f:60:7c:43:9d:
                    43:45:a5:49:75:38:c2:27:0a:fa:92:24:81:64:7f:
                    05:1c:30:b6:29:fb:9c:21:03:0d:43:27:73:46:7a:
                    46:f3:34:a4:0f:37:f5:8b:76:91:e5:36:48:48:f6:
                    81:ce:a7:5b:83:70:a3:b1:d7:2f:0c:1b:05:d7:0e:
                    dc:51:8e:86:ff:7a:2b:13:ed:6d:c0:a4:c3:0e:da:
                    8c:6d:b1:b4:7e:0f:24:21:59:e3:9c:3d:1d:34:c6:
                    58:8a:7a:99:9e:b2:46:6c:8f:ce:46:3a:6d:97:8f:
                    6e:e8:82:61:f5:96:24:9c:35:fa:d7:e1:4b:6e:e6:
                    ca:37:1e:41:42:8d:20:fd:81:11:b2:9c:f1:58:4d:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D2:69:45:CF:77:FA:63:02:6F:3C:60:32:B1:71:37:65:D9:7C:9E
            X509v3 Authority Key Identifier:
                keyid:D5:4E:A8:6A:ED:46:19:E6:90:E4:39:D3:87:57:C4:3E:A1:E3:C2:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/D54EA86AED4619E690E439D38757C43EA1E3C266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D54EA86AED4619E690E439D38757C43EA1E3C266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:68:ec:bc:fa:1a:71:91:fa:6e:2e:b0:44:20:e0:f9:df:76:
         32:6b:08:7e:e1:1e:b6:6c:8b:5e:a4:99:a4:a1:4c:54:8f:aa:
         5b:96:1b:9f:88:28:7e:b1:df:72:df:0d:e9:cb:83:15:b0:66:
         a9:4b:93:78:8b:cb:72:c9:43:28:5a:29:0f:55:c1:72:81:75:
         64:6e:28:ad:d5:53:ff:38:11:59:05:74:8e:51:ac:3a:2b:e6:
         6b:f4:86:12:0b:9a:ee:ea:5c:ab:6e:d7:ed:d0:0e:8b:11:c1:
         28:d0:f2:a2:1e:61:3f:c6:b6:0e:ea:bf:db:77:df:2b:9d:b2:
         31:0d:02:fe:98:a6:ed:c5:64:81:96:7f:43:ed:00:ce:69:51:
         dd:ad:f4:d4:d5:09:dd:26:02:a6:4c:78:82:5e:62:97:de:5c:
         42:4e:6d:72:d8:ec:0c:b2:34:28:83:81:f8:33:b4:e1:a4:af:
         30:f1:f6:1b:99:4a:5d:1f:f5:69:4c:5b:05:62:66:45:a8:19:
         ea:a3:80:af:26:77:93:5b:6f:2d:f3:da:22:83:29:21:7c:cc:
         1b:60:4e:b0:06:bf:a1:7e:b0:d6:54:a0:e7:d4:aa:b8:66:28:
         6c:80:cf:82:de:f5:e0:71:07:1b:6b:4b:13:84:1f:4b:5e:da:
         f7:f5:1b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org