Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32332d3233203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32332d3233203d3e20323634303031.roa (raw, json)
Hash identifier:          U+WsUKbG1WZ+/WyiHG/UZPRmqO4BAlEheKb0NTwskLE=
Subject key identifier:   91:DC:45:AC:33:9D:42:AD:65:20:5E:69:D3:AE:BB:B2:EA:4A:9F:93
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       668953C7F7860B07C626372AD14C9C91772CB64D
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32332d3233203d3e20323634303031.roa
Signing time:             Sat 17 Dec 2022 16:19:01 +0000
ROA not before:           Sat 17 Dec 2022 16:14:01 +0000
ROA not after:            Sat 16 Dec 2023 16:19:01 +0000
asID:                     264001
IP address blocks:        143.0.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:53:c7:f7:86:0b:07:c6:26:37:2a:d1:4c:9c:91:77:2c:b6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Dec 17 16:14:01 2022 GMT
            Not After : Dec 16 16:19:01 2023 GMT
        Subject: CN=91DC45AC339D42AD65205E69D3AEBBB2EA4A9F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:f8:08:cc:e8:af:66:4a:d0:aa:b8:db:20:
                    24:3d:88:5a:50:59:26:11:c5:ed:59:bc:f8:73:7c:
                    d8:c1:de:a1:60:4a:aa:14:30:e6:62:ca:fe:5d:5b:
                    64:91:c1:f9:07:6d:44:d8:66:c9:e2:76:f0:e7:f8:
                    96:d3:65:81:ca:ab:da:f2:54:47:43:96:e6:8c:b7:
                    3c:95:00:72:f3:60:f4:e1:fe:2c:38:21:cf:91:6f:
                    06:e8:0c:75:75:03:28:6d:d1:43:18:1d:9a:b0:02:
                    2a:a7:0b:5c:62:45:97:29:11:d5:01:d7:80:e9:43:
                    fe:a1:70:15:2d:8d:94:b4:35:66:45:77:16:cc:b4:
                    39:0d:d9:7e:f5:16:09:4d:39:c1:a5:ed:e5:81:a7:
                    b9:cd:74:40:3a:07:8e:61:28:f7:f9:80:9f:ba:bc:
                    c9:31:fc:38:9a:94:96:04:12:20:f1:16:9d:cc:3c:
                    eb:17:1a:3f:c3:85:28:93:92:64:69:0a:73:68:bc:
                    33:dd:56:a3:e2:58:38:6f:64:57:f3:17:06:6f:26:
                    2c:ee:a2:fe:f2:ed:98:79:3a:dc:1e:cd:9c:73:73:
                    76:1f:c7:d7:10:cb:9a:e7:64:ed:ca:9b:f6:fb:05:
                    db:74:e6:5f:fc:2e:56:69:84:b8:91:7d:19:ec:2a:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:45:AC:33:9D:42:AD:65:20:5E:69:D3:AE:BB:B2:EA:4A:9F:93
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32332d3233203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:3f:99:0c:de:81:82:76:fe:e8:eb:c6:12:35:df:ae:0a:
         3c:0c:56:b2:51:b6:07:2c:3d:94:eb:2c:c3:5b:a4:de:9f:98:
         4a:88:a0:2c:fc:b6:96:40:ea:e4:10:ca:5b:45:af:e7:8a:cb:
         85:43:d8:a2:15:05:3c:16:13:9a:7b:1b:5b:b0:1b:6e:94:9c:
         0c:34:40:32:43:86:a1:81:ad:d1:3c:ae:b8:c9:63:9f:4a:ae:
         fa:14:c3:67:b6:49:49:3b:68:d1:46:b9:17:72:d1:78:39:53:
         85:67:81:c4:be:46:c2:3f:60:b8:f5:d3:5f:6b:b6:37:57:fa:
         4c:81:f3:39:24:1e:84:81:e9:f4:1d:20:f2:04:a4:12:67:aa:
         4a:18:2b:41:3e:df:10:48:12:f5:33:04:15:1c:ae:47:3f:b2:
         9f:c8:05:22:c7:5e:b8:de:16:c7:aa:9a:09:be:94:f0:3d:62:
         ae:c3:f5:02:a4:9a:7b:bc:c1:d1:b8:bc:18:dc:66:ef:02:73:
         1d:3f:31:13:b8:ce:58:de:f3:25:7e:85:ab:d1:66:97:5b:8b:
         35:90:ce:71:30:5c:12:e1:68:35:aa:cc:b0:45:e9:09:5d:65:
         c8:c8:24:d6:e5:1e:47:3a:d3:14:51:68:dd:54:f2:e6:49:1c:
         f2:b5:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org