Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
File:                     3134332e3230322e36382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          pIjAhxfDJe0uTNQ3ytnOJI5dFMtduu/pYzWQAt5skxA=
Subject key identifier:   52:13:2D:20:70:58:25:0C:AF:A8:5F:3C:64:F5:31:67:DF:F3:8B:D8
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       56945820BD98CEC23BD4D190A7798EBF05F72695
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:17 +0000
ROA not before:           Tue 23 Jul 2024 11:46:17 +0000
ROA not after:            Tue 22 Jul 2025 11:51:17 +0000
asID:                     28667
IP address blocks:        143.202.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:58:20:bd:98:ce:c2:3b:d4:d1:90:a7:79:8e:bf:05:f7:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:17 2024 GMT
            Not After : Jul 22 11:51:17 2025 GMT
        Subject: CN=52132D207058250CAFA85F3C64F53167DFF38BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:38:95:84:89:09:fb:1a:11:57:0f:37:f3:
                    5b:03:90:46:f9:cc:7f:2d:67:38:7f:b5:c8:32:58:
                    79:2a:8a:0a:56:a4:72:d5:8b:86:4e:3e:12:08:ca:
                    c5:69:98:9a:9c:22:ff:12:41:61:e3:b5:db:9b:5d:
                    c9:cc:3e:74:7c:b8:1d:db:ff:3d:0f:d0:a8:c9:ee:
                    60:34:bf:78:56:0c:f2:35:a5:93:57:57:da:52:2d:
                    c1:6b:69:4f:61:bc:6e:a6:fa:a8:f9:6b:51:0b:d3:
                    9d:e2:72:f8:e7:7a:62:4f:31:35:fd:bf:de:8c:be:
                    58:3b:fa:69:60:61:cf:5b:9b:a9:8d:4e:fa:5b:3b:
                    8a:a1:a9:3d:12:11:32:8f:92:86:3b:c6:2a:2c:9a:
                    f0:d4:bd:9c:43:bb:80:a9:a2:37:09:24:16:76:0b:
                    75:2d:e6:15:66:0d:c9:7e:16:21:6d:be:33:07:07:
                    5c:30:92:4f:33:c9:6e:ce:b2:bc:99:56:a4:4e:0e:
                    59:04:2d:a5:cb:8f:85:b4:24:07:a6:9e:bf:6b:f6:
                    cf:7e:1e:74:57:c5:28:d2:95:d4:53:d6:3f:84:25:
                    54:1e:8f:cf:91:5d:9f:d9:96:81:7c:7e:a1:76:87:
                    05:d6:6c:fe:47:d4:6b:52:1b:f6:6c:04:77:ca:a7:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:2D:20:70:58:25:0C:AF:A8:5F:3C:64:F5:31:67:DF:F3:8B:D8
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:2f:73:32:71:89:da:c1:3a:8f:dd:cb:79:3c:1f:02:55:2e:
         28:42:39:b0:3d:2b:0a:04:e7:bb:6e:32:0f:d3:01:12:dd:21:
         fd:44:21:84:58:79:2a:fa:c4:32:87:83:bb:ef:8d:71:6a:d9:
         59:62:28:f1:36:ef:69:c4:51:40:49:e7:f8:ad:76:64:e4:d3:
         cc:67:7a:0d:20:82:37:c7:3d:7b:b6:1b:09:6c:b3:6f:0a:b1:
         5b:47:a4:7d:23:5f:8b:ed:0f:67:a6:70:19:d2:1c:cd:d4:7d:
         ba:f2:bf:91:1d:73:db:d8:62:c3:bd:2b:a3:66:c9:ea:0e:31:
         52:83:61:6e:3b:62:e9:a4:b7:7c:c8:83:b5:41:0d:9b:f7:e7:
         2b:00:2a:c6:e8:86:92:27:59:08:4a:49:ea:07:4e:a7:9f:42:
         29:a4:e1:32:21:bf:96:d4:7d:d1:bb:80:a7:8a:c4:00:3d:6b:
         75:e5:c0:10:ba:42:62:48:27:fb:d5:40:cf:4b:79:0d:84:d4:
         d2:67:d0:b4:be:f2:97:9e:d2:7b:42:6f:45:6a:66:3c:11:0e:
         07:52:54:92:af:a2:e4:5d:a7:0c:1e:3d:93:c1:74:1c:2e:c7:
         6b:c8:79:86:c6:70:98:18:f0:13:a9:9c:7d:1b:66:fa:95:d7:
         03:e7:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org