Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
File:                     3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (raw, json)
Hash identifier:          02xtn7qwGuJv9Nv82RvX6U1n+r/VcN5pYl+caML12AQ=
Subject key identifier:   6F:22:8A:2D:AA:12:D8:C5:47:09:62:70:65:D3:12:67:3A:AB:6E:68
Certificate issuer:       /CN=CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8
Certificate serial:       3E7C585134B4C55F80689F2AFAA1E08D3D6213CC
Authority key identifier: CA:C6:19:EF:FB:54:E0:20:F1:BD:AA:B2:B8:56:BB:E7:48:2E:0D:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
Signing time:             Sat 03 Dec 2022 14:51:25 +0000
ROA not before:           Sat 03 Dec 2022 14:46:25 +0000
ROA not after:            Sat 02 Dec 2023 14:51:25 +0000
asID:                     262343
IP address blocks:        143.255.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:58:51:34:b4:c5:5f:80:68:9f:2a:fa:a1:e0:8d:3d:62:13:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8
        Validity
            Not Before: Dec  3 14:46:25 2022 GMT
            Not After : Dec  2 14:51:25 2023 GMT
        Subject: CN=6F228A2DAA12D8C54709627065D312673AAB6E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:ae:2f:77:bf:c5:f6:38:06:d9:04:87:c7:
                    91:ad:af:58:fd:bc:05:83:d1:6f:ed:5c:12:d2:79:
                    ff:32:b4:96:63:0d:54:f1:81:51:4e:29:00:b5:e2:
                    b4:98:b4:f8:17:79:e5:51:d6:e3:2c:7c:c2:09:48:
                    d9:2f:b1:75:2a:27:0b:e3:ac:03:15:36:d1:63:18:
                    df:ca:7b:68:33:39:e4:ae:4c:1b:6e:cb:d3:eb:96:
                    d0:83:af:ac:c7:e1:d5:bd:6c:33:88:bc:8c:44:f5:
                    66:ac:f3:70:1c:6e:95:9f:28:6a:a5:22:9f:41:d2:
                    29:b8:b0:82:3a:2a:65:47:74:61:a0:4e:ad:20:23:
                    82:35:c6:bf:0b:4a:a9:bc:2a:d1:0d:cd:5d:5f:f0:
                    4e:4a:ad:cd:d9:3f:73:0f:33:ce:6c:92:9f:e3:13:
                    2f:fa:61:a4:57:37:22:12:67:99:40:34:b5:fb:76:
                    f6:6f:9e:5f:91:87:16:f7:b2:ab:3e:63:a7:80:7a:
                    f9:7f:69:85:df:a7:fd:2a:e9:4a:ea:13:8a:78:1b:
                    57:f3:9a:29:33:63:c0:bc:f8:11:79:0b:09:e1:7d:
                    f5:7a:0e:35:e3:ad:9b:9c:1f:a2:ae:2c:a5:c0:92:
                    ca:af:ff:db:cc:4d:67:e1:6c:f8:ad:f4:69:af:0b:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:8A:2D:AA:12:D8:C5:47:09:62:70:65:D3:12:67:3A:AB:6E:68
            X509v3 Authority Key Identifier:
                keyid:CA:C6:19:EF:FB:54:E0:20:F1:BD:AA:B2:B8:56:BB:E7:48:2E:0D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAC619EFFB54E020F1BDAAB2B856BBE7482E0DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/0/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:aa:13:3d:27:f1:d6:1e:b2:c6:3c:f9:11:6e:19:89:b5:
         cf:e5:9d:f7:a8:3a:b7:b0:5b:a9:8e:44:d2:c9:3b:52:a3:9d:
         37:6e:3c:8e:1f:e9:7e:ad:88:2b:6d:83:77:ea:cf:2f:3d:17:
         bc:9d:99:d7:c8:dd:77:a8:41:26:f3:a9:34:3a:18:45:95:9b:
         98:4c:fc:a2:81:c7:6c:b5:e1:e8:6e:79:bc:cf:52:fc:95:c2:
         df:ba:53:6e:38:09:28:79:29:75:d1:db:79:bd:fd:02:ad:e2:
         83:9d:59:b2:03:af:06:5d:63:f7:2b:30:86:6e:0e:8e:7b:c2:
         cb:0c:35:a6:98:ae:f1:1b:8a:1f:28:95:55:2e:4d:45:56:17:
         7a:bb:12:8e:e5:22:24:0e:a3:62:d2:a3:83:1a:7e:f5:cc:1b:
         bc:f0:85:f1:fd:34:c1:56:8f:be:2c:f1:df:eb:8d:bd:10:f5:
         d0:a2:af:e4:98:52:2c:6c:61:68:1e:71:65:e7:46:ae:9f:11:
         11:7a:82:47:88:cf:d8:f0:a6:4c:36:e3:57:eb:ec:76:73:5c:
         c3:66:6f:5d:f1:a5:eb:81:b1:ce:2c:e8:ba:dd:cc:64:7c:a2:
         9f:3d:dc:9d:7a:d1:bf:b7:f4:42:e6:9e:dc:88:63:a5:39:09:
         7e:0d:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org