Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier:          4y+nJRIUwFmiz3+adY44TOelLnmUV44cNT13FuphJt0=
Subject key identifier:   88:59:FA:34:4B:C6:60:A1:35:A2:8E:1B:41:46:1B:C5:19:3E:69:1D
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       0AABEC2DBE4969D7C72A9D60CF9C194C3B52833E
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
Signing time:             Wed 15 Nov 2023 16:55:29 +0000
ROA not before:           Wed 15 Nov 2023 16:50:29 +0000
ROA not after:            Wed 13 Nov 2024 16:55:29 +0000
asID:                     264001
IP address blocks:        143.0.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ab:ec:2d:be:49:69:d7:c7:2a:9d:60:cf:9c:19:4c:3b:52:83:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Nov 15 16:50:29 2023 GMT
            Not After : Nov 13 16:55:29 2024 GMT
        Subject: CN=8859FA344BC660A135A28E1B41461BC5193E691D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:54:27:24:0d:1c:62:b0:25:27:36:2b:3a:
                    aa:17:00:a2:73:b2:d5:76:f0:76:5c:ba:34:93:0a:
                    f6:fc:dd:b8:19:84:87:0b:1c:78:85:6b:e2:04:db:
                    ae:89:22:a8:cd:ee:60:b7:41:dd:f3:36:dc:49:ad:
                    c2:bb:e4:6c:49:06:a0:8c:53:55:e6:f0:88:2b:30:
                    75:12:7a:9c:87:5c:4e:f4:9b:6b:33:d3:50:b5:16:
                    d1:60:8a:7e:70:5e:d1:36:57:0c:73:09:73:21:01:
                    ae:22:f0:00:65:a2:42:c0:d1:bc:68:f1:53:f0:73:
                    50:8c:fe:4c:ad:49:4a:cf:c1:1b:62:0c:92:4a:79:
                    72:1f:56:78:07:c3:4d:b1:09:05:a4:81:29:07:d4:
                    e5:1e:a7:a1:52:3b:75:7b:5b:68:72:18:74:4f:d3:
                    e5:91:ea:2b:c5:6c:6c:61:72:9b:ab:da:62:2a:a3:
                    8b:c1:31:9d:8c:65:53:dc:d1:08:d3:13:5f:9c:f1:
                    a0:8c:fe:38:2f:0f:f1:1e:54:14:16:f8:07:0f:57:
                    ed:99:2b:fe:e8:d5:95:a6:2f:a8:21:f3:52:ea:5f:
                    c2:b7:5a:7c:e7:96:68:86:0e:f6:45:eb:7a:1f:7e:
                    16:3b:ca:e2:79:e5:35:1c:62:42:eb:0a:3b:88:12:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:59:FA:34:4B:C6:60:A1:35:A2:8E:1B:41:46:1B:C5:19:3E:69:1D
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:13:12:5f:6a:c2:a7:b1:47:53:dd:98:8e:41:95:ff:0c:
         62:59:8b:18:ba:94:c2:81:29:e2:15:22:00:17:a9:b2:45:4e:
         43:eb:f0:fc:08:43:82:64:06:11:51:55:40:b0:ef:e7:94:4e:
         f5:dd:b1:9c:f8:f0:35:a0:c5:f2:91:45:8a:a9:cb:d0:d9:20:
         52:f5:de:19:14:7e:c3:b4:a5:41:8c:99:72:3b:78:86:9f:fc:
         67:f3:11:52:14:e0:e9:d8:00:d4:23:4c:e8:eb:d6:3b:29:a3:
         f5:97:28:c2:1e:fd:af:59:13:3e:4b:9c:be:c3:39:1c:63:80:
         14:ab:f8:ec:74:0a:02:c0:0d:0a:d5:2b:f1:d4:fd:76:cf:b3:
         65:91:a5:09:6c:25:86:34:02:54:52:d4:85:4f:08:f6:22:40:
         86:83:13:40:1d:73:f3:40:18:87:fb:8e:6f:07:45:5d:06:f7:
         c2:a7:42:72:19:ff:90:42:98:ac:00:9b:5f:0d:ad:b7:77:b1:
         82:9f:7f:64:29:23:53:39:6f:6a:6e:1b:21:f9:82:e4:70:93:
         51:61:8d:74:97:e6:cf:13:7f:a0:3d:81:ec:b8:e3:7b:50:2c:
         aa:1a:08:c2:f0:60:30:ca:49:66:64:7f:84:2e:69:02:19:39:
         fe:80:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org