Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32342d3234203d3e20323634303130.roa
File:                     3134332e302e3139362e302f32342d3234203d3e20323634303130.roa (raw, json)
Hash identifier:          0zEjRnI4cS4IIN/PkBoaXRxMDf14MkD8M+naE3h1+n4=
Subject key identifier:   04:E7:22:48:F3:79:48:46:5A:5C:DD:89:A1:CC:16:10:78:F1:A2:18
Certificate issuer:       /CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
Certificate serial:       1B9510B3C9525117A8AFB6495867B01F6BB68B24
Authority key identifier: CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32342d3234203d3e20323634303130.roa
Signing time:             Wed 10 Jan 2024 20:34:18 +0000
ROA not before:           Wed 10 Jan 2024 20:29:18 +0000
ROA not after:            Wed 08 Jan 2025 20:34:18 +0000
asID:                     264010
IP address blocks:        143.0.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:10:b3:c9:52:51:17:a8:af:b6:49:58:67:b0:1f:6b:b6:8b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDAE8BA612485E3850DDE34806E11BB871C0D667
        Validity
            Not Before: Jan 10 20:29:18 2024 GMT
            Not After : Jan  8 20:34:18 2025 GMT
        Subject: CN=04E72248F37948465A5CDD89A1CC161078F1A218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:eb:98:5b:e7:db:f4:61:63:cc:43:2e:91:3d:
                    5b:8f:c4:06:e1:73:a4:5c:c5:9f:cc:a2:4b:70:f9:
                    ce:a8:28:fc:34:bd:ec:46:74:7c:c8:6d:00:2c:c5:
                    e4:12:fb:fe:10:2b:10:61:70:78:0e:19:ec:db:75:
                    76:f8:70:47:00:fb:4c:78:5c:90:39:7f:6b:33:61:
                    2f:34:35:d1:4b:6c:ff:7b:6a:72:04:3c:8d:04:db:
                    a3:b0:f7:a2:7a:eb:ad:40:4d:87:37:2a:ed:6a:48:
                    28:4b:2e:59:48:77:65:be:aa:17:29:db:75:76:cb:
                    cb:4b:9f:7c:38:22:1d:37:c3:cd:77:d2:85:12:b5:
                    e3:9a:a2:1d:4b:cb:d8:39:0a:66:c5:f1:b4:97:3f:
                    dc:08:29:a6:71:4d:ed:91:9a:93:06:78:25:59:c2:
                    03:a9:45:a6:e6:96:0f:54:2f:6a:3a:07:22:67:c1:
                    36:77:25:05:9e:0b:07:4d:69:23:95:dc:72:4d:69:
                    8d:bc:b9:53:8c:5e:d6:9c:4f:2a:f5:81:e4:1f:66:
                    55:56:a9:5d:de:ae:0d:fd:76:35:f1:18:ae:19:e0:
                    67:ec:8d:39:04:5c:b5:9e:6b:a6:17:ee:89:63:23:
                    0c:da:69:ec:9b:89:42:35:60:38:f7:64:74:6c:13:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:22:48:F3:79:48:46:5A:5C:DD:89:A1:CC:16:10:78:F1:A2:18
            X509v3 Authority Key Identifier:
                keyid:CD:AE:8B:A6:12:48:5E:38:50:DD:E3:48:06:E1:1B:B8:71:C0:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CDAE8BA612485E3850DDE34806E11BB871C0D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/0/3134332e302e3139362e302f32342d3234203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fc:5a:0e:ce:c7:a1:36:4e:85:f6:fc:d9:56:e2:c1:bd:68:
         ae:4c:51:2d:cc:20:db:67:a9:96:71:cc:6f:15:26:97:fe:68:
         f9:8f:d8:d1:d9:9f:24:96:f7:74:38:99:c5:e6:31:02:5c:64:
         79:d4:9d:20:81:3a:19:d6:0f:2f:bb:c2:c7:f9:e6:fc:a6:fe:
         59:23:f8:1a:54:b5:01:9a:00:d7:23:b4:1c:12:c3:54:b4:73:
         99:55:6e:1e:67:36:60:20:93:30:74:68:ee:dc:5d:aa:f0:97:
         4f:62:68:11:aa:a5:fc:f3:11:95:5b:04:07:4c:34:69:9d:3f:
         1a:8f:1c:71:eb:fc:0e:6c:0b:75:69:a9:b4:dd:4c:a4:80:6d:
         b9:61:9b:24:cf:53:68:21:9e:44:45:a9:f3:69:18:e6:6e:a0:
         7d:23:b0:a6:0a:4c:f2:8b:13:58:f0:9b:96:f4:f2:6f:af:c6:
         3a:f5:d8:ea:e9:4e:01:f0:ee:3e:7a:0d:c2:70:07:a9:48:e7:
         f3:01:14:af:66:d9:70:11:3d:cc:40:22:47:45:21:c3:b5:b6:
         f5:fb:e6:5d:1b:de:64:a7:fc:9d:7b:83:ce:dd:77:71:17:d4:
         cd:a1:eb:c4:60:36:48:83:3f:21:bc:87:06:13:1c:71:f0:28:
         a1:b3:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org