Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          KfQc7sJKqhPqc0zx444QRCOguIFRp3dRBC4CQRGZFLA=
Subject key identifier:   10:EF:60:3B:13:1B:BE:E6:39:29:92:F6:5D:0E:3E:AA:7E:50:2F:C3
Certificate issuer:       /CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
Certificate serial:       1F4443D3062B9C2201CBF24056E0C3BA9D224541
Authority key identifier: 5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa
Signing time:             Sat 18 Nov 2023 16:56:47 +0000
ROA not before:           Sat 18 Nov 2023 16:51:47 +0000
ROA not after:            Sat 16 Nov 2024 16:56:47 +0000
asID:                     264001
IP address blocks:        143.0.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:43:d3:06:2b:9c:22:01:cb:f2:40:56:e0:c3:ba:9d:22:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1
        Validity
            Not Before: Nov 18 16:51:47 2023 GMT
            Not After : Nov 16 16:56:47 2024 GMT
        Subject: CN=10EF603B131BBEE6392992F65D0E3EAA7E502FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:15:b5:f5:fe:1c:1d:b8:9a:12:e9:60:57:
                    c2:6b:6a:51:cd:3b:ec:16:bd:b2:33:b5:a5:00:dc:
                    d9:42:04:5e:41:a8:0a:8b:4b:bd:0c:ca:ef:f6:f3:
                    8c:da:03:e6:1a:d0:a4:c6:75:ba:d0:6a:86:2e:9e:
                    24:77:65:6f:42:c2:96:3e:62:3f:e2:aa:29:59:36:
                    c2:0c:d6:f6:36:2c:6e:7a:8c:77:47:1a:6e:50:66:
                    df:a1:08:5e:ed:67:cf:8b:1e:4a:30:a7:e4:20:2f:
                    46:4e:aa:f8:06:89:47:d8:b5:50:f8:7d:56:d7:99:
                    b1:16:bb:22:12:05:61:c0:fc:25:40:9d:b6:a2:e9:
                    d5:f7:da:16:31:dd:a9:63:f9:1b:00:bb:1c:9c:43:
                    2d:53:b7:ca:01:02:ee:c1:ba:a0:d5:8f:03:da:1c:
                    78:9c:9f:76:bc:3b:c8:72:c5:1e:03:b9:48:75:99:
                    ab:7d:3e:5d:ad:c1:1d:c5:3b:7f:da:8a:de:2b:70:
                    f4:25:d5:fa:78:b9:6b:33:73:46:d6:a5:35:c8:73:
                    b8:4d:34:f0:25:cf:fb:ee:6a:f8:7b:b5:44:50:e3:
                    53:ca:dc:e8:0c:df:e3:dc:dd:64:7a:6b:af:ce:32:
                    44:6c:82:4f:99:6a:96:85:99:1a:77:57:f2:82:20:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EF:60:3B:13:1B:BE:E6:39:29:92:F6:5D:0E:3E:AA:7E:50:2F:C3
            X509v3 Authority Key Identifier:
                keyid:5B:D9:C3:7F:56:17:60:31:7D:A7:70:DA:6B:6E:5E:3C:C7:2A:9F:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BD9C37F561760317DA770DA6B6E5E3CC72A9FE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:1f:f8:a7:a9:96:d6:02:52:a2:f8:87:b8:2f:72:75:89:
         4e:0c:19:d4:64:be:68:af:c1:5a:7f:7a:12:c6:12:be:3d:50:
         3a:2f:c6:96:68:f9:fd:bc:4d:c8:d6:71:65:bc:0c:99:29:68:
         4a:7b:08:ae:26:c0:90:37:be:f6:3f:1a:76:9b:aa:8d:07:46:
         27:7c:0a:7c:ae:38:bc:bd:1d:d0:b3:fb:79:fa:5c:9b:ae:ee:
         f1:67:c3:ae:ce:1b:a5:3a:6c:f3:a0:74:e5:ed:14:3a:f5:12:
         37:96:22:44:7b:0e:06:0f:61:69:84:4d:04:0d:02:20:03:01:
         5e:b2:5b:0f:e7:cd:05:b4:75:77:11:05:22:1a:92:9a:e3:68:
         60:37:ff:d3:8d:3a:86:c3:f8:e4:bf:97:66:54:f1:50:26:e3:
         6c:fa:1d:07:77:21:cb:e0:6f:1d:3a:59:78:8a:27:9d:af:a1:
         17:85:c6:eb:be:55:bf:e9:09:11:eb:39:4b:07:21:13:8c:84:
         cf:01:66:29:d6:13:b0:26:28:b1:26:c1:50:2f:f6:8b:08:8d:
         a3:3b:2a:f1:7e:04:fa:da:b0:12:ab:1f:66:9f:36:de:6e:b7:
         34:8d:75:ce:80:d7:fd:6b:e2:b5:c4:08:47:97:33:fa:92:8c:
         dc:48:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org