Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa
File:                     3134332e3235352e37362e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          KzoJVDP4yUEpv5RfrajmxCwloF3HQM0f+hX901yOh8Q=
Subject key identifier:   A6:4E:7C:45:94:E3:96:3E:90:58:6B:BD:CA:A8:83:B5:89:AA:10:6F
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       1B802663E68E603F2B5ED097F12FC6A5897BB8C9
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:27 +0000
ROA not before:           Fri 18 Nov 2022 17:45:27 +0000
ROA not after:            Fri 17 Nov 2023 17:50:27 +0000
asID:                     61588
IP address blocks:        143.255.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:80:26:63:e6:8e:60:3f:2b:5e:d0:97:f1:2f:c6:a5:89:7b:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:27 2022 GMT
            Not After : Nov 17 17:50:27 2023 GMT
        Subject: CN=A64E7C4594E3963E90586BBDCAA883B589AA106F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:9f:bb:63:c9:e5:be:ca:55:00:0f:32:1f:
                    6e:dc:47:56:b0:d7:6b:e6:66:84:64:87:c8:ae:2e:
                    0e:d6:93:eb:ca:b9:ac:60:cf:d4:dc:4e:1a:4f:11:
                    67:99:97:5c:f7:1f:58:47:22:a7:e1:fa:16:cb:dc:
                    ca:93:5d:a5:34:0f:90:43:3b:fa:c2:48:4a:2f:73:
                    b8:56:7f:94:d7:a3:d8:f0:33:79:e8:82:43:82:2b:
                    02:4e:36:15:88:b4:24:7c:c3:5e:a3:28:0c:d5:3d:
                    7a:c9:c5:52:f0:4f:52:75:0f:ea:8d:d0:df:67:17:
                    7d:cb:75:43:a2:32:c7:41:93:00:d9:87:de:cc:8c:
                    5e:99:7d:14:f0:57:4d:3a:f8:cd:d2:d5:18:b7:81:
                    6c:54:d8:8d:e5:58:a4:49:2f:e8:57:46:b1:b0:16:
                    c9:7d:2c:12:02:2c:1c:25:46:db:43:cc:24:7c:ce:
                    3c:a4:54:58:a3:c1:a0:5f:84:9b:4b:fd:1c:b8:4f:
                    f2:64:3e:c7:69:b4:01:4b:81:a2:9b:06:f5:4a:dc:
                    d1:27:bc:1e:ca:65:3a:76:63:a4:6d:4f:b2:dd:78:
                    9a:7e:d2:6e:74:b6:db:f7:df:03:7c:24:09:f5:f2:
                    ef:be:53:7b:1c:91:45:41:3c:92:b7:5e:21:5c:bf:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4E:7C:45:94:E3:96:3E:90:58:6B:BD:CA:A8:83:B5:89:AA:10:6F
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:ee:bf:a0:8c:70:3c:1e:e0:a3:b1:6c:95:9c:7e:e0:d8:
         0e:75:c6:5a:10:12:ff:7a:a6:24:aa:a6:62:7c:35:dc:2e:b2:
         19:74:12:eb:db:92:17:55:32:d2:51:be:07:88:52:0b:ae:db:
         10:62:40:fd:c8:eb:ce:f6:4d:f7:2c:c6:06:d7:1b:1a:c9:58:
         e5:62:46:f5:0f:93:77:ed:08:7f:34:9c:52:1a:c3:56:e2:8b:
         a8:10:91:53:18:1f:8d:81:07:31:58:28:c5:c3:6c:43:ed:85:
         16:80:79:36:18:d7:51:60:3b:2f:cb:4f:7e:cb:d8:e0:87:82:
         5a:3e:af:e6:d7:62:3d:b0:c7:bd:20:4d:86:d5:c6:f3:0e:75:
         73:b5:6f:0e:5a:63:78:10:03:c5:95:2f:02:5f:47:f8:95:c3:
         8a:13:2f:cf:fe:af:2e:77:a7:e2:77:f7:a7:46:77:f6:44:50:
         80:00:ef:11:dc:64:b5:fc:ef:08:80:fa:b8:a7:54:c3:96:c3:
         5a:72:1c:c7:f6:7c:75:d1:32:18:b0:84:a8:d3:c2:2f:72:c4:
         65:96:78:bd:b8:46:d2:02:c7:f0:e4:d7:30:86:88:5b:d3:f5:
         72:a4:1b:ce:2e:37:8c:fb:f7:27:87:05:c2:95:d7:30:17:12:
         63:17:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org