Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3332203d3e203631353838.roa
File:                     3134332e3235352e37362e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          CObZOp4XFxRZWYWpbkvgyRaIjGB1MPs0kikHBE32PDQ=
Subject key identifier:   02:FC:FD:29:21:9E:2B:7D:CF:E1:82:51:92:9B:3C:DA:AD:1C:99:31
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       7154C35442274EE810A02CA9BADAFD21299DBC82
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:00:07 +0000
ROA not before:           Wed 27 Sep 2023 19:55:07 +0000
ROA not after:            Wed 25 Sep 2024 20:00:07 +0000
asID:                     61588
IP address blocks:        143.255.76.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:54:c3:54:42:27:4e:e8:10:a0:2c:a9:ba:da:fd:21:29:9d:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:55:07 2023 GMT
            Not After : Sep 25 20:00:07 2024 GMT
        Subject: CN=02FCFD29219E2B7DCFE18251929B3CDAAD1C9931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:32:d5:58:8e:bf:12:ab:c1:c9:f5:87:2f:
                    f9:dc:5c:03:d1:e9:93:de:0b:ec:54:41:57:9a:4b:
                    45:27:4c:7d:3e:69:41:31:86:20:91:13:e0:d0:60:
                    9a:66:09:be:aa:65:f9:08:b4:f2:21:c9:9d:15:c2:
                    98:49:76:99:0e:96:28:02:51:5d:a6:51:20:8b:1d:
                    cc:85:a4:4f:5d:db:e1:20:78:5c:aa:77:ab:82:3b:
                    db:27:dd:64:3d:fe:07:69:a1:16:a2:ef:d3:85:46:
                    47:24:b6:fd:3e:59:f6:7c:c4:f0:42:bc:60:21:51:
                    ee:9c:02:eb:e7:3d:4c:8d:b7:c1:93:4d:b2:44:6b:
                    0e:16:ba:2c:e2:6c:8c:24:02:34:60:35:f4:6c:8e:
                    79:30:f3:85:67:3d:bb:43:ad:9c:0b:22:26:df:42:
                    fd:46:bf:a5:ab:78:1c:a3:e8:37:4d:6d:a9:2e:92:
                    f3:af:0b:f4:0e:66:0a:94:ea:0e:9a:36:27:cc:be:
                    54:2c:ba:b2:50:eb:f0:96:c6:5d:92:b6:92:33:f3:
                    9b:65:ec:b8:6a:3b:50:1d:c6:a0:04:21:7e:8e:79:
                    54:64:e6:85:d7:1e:4f:5b:0c:c7:e3:61:e1:c0:e0:
                    57:b1:65:e5:0d:ed:66:cf:fa:97:2d:92:ec:c1:9a:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:FD:29:21:9E:2B:7D:CF:E1:82:51:92:9B:3C:DA:AD:1C:99:31
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3134332e3235352e37362e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:77:af:1e:38:db:1f:11:c2:01:fb:cf:55:bb:c4:58:ee:
         10:0c:68:d8:6d:d6:cc:83:66:de:01:b3:59:f6:84:a2:3c:03:
         48:df:32:c9:15:bf:36:b6:f7:46:6a:4d:a6:d2:bf:9f:54:5e:
         88:92:52:a6:6b:ac:cd:dd:c8:c1:f0:e2:55:c2:af:8d:b6:6b:
         83:b4:11:fb:2c:d2:7c:f1:3c:c3:52:91:44:19:02:01:8e:fa:
         b1:78:25:54:b6:6f:61:2d:ad:db:a2:3c:44:4a:ff:42:d9:38:
         b1:b8:a2:03:4a:03:b8:ec:49:ce:32:0f:04:2b:b6:54:51:2c:
         85:19:c7:43:63:c8:98:c8:ef:da:9b:6a:6e:1f:38:c1:4d:81:
         a7:e1:82:9b:40:32:3c:80:7f:54:5e:3e:45:f3:ea:4a:29:4c:
         21:ca:e9:69:78:0a:77:a4:44:6c:52:34:b9:27:14:cf:62:9f:
         6a:35:c5:f1:bb:65:44:3c:8e:af:23:1c:19:52:a4:8a:2b:f2:
         e7:da:db:3d:24:48:e2:b2:ef:a5:17:ac:6c:41:d2:27:f5:fe:
         32:a0:8c:f8:11:a6:5f:11:3d:b8:f4:a0:7d:da:29:68:e5:eb:
         d2:a8:33:03:6f:d9:f0:c2:c8:a1:ce:03:e4:6b:b9:5e:ef:be:
         52:28:ef:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org