Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31372e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          plWUH+T21+Ii0/FEyoGHYXIvP9cwbRBscNQwHvbZmbI=
Subject key identifier:   56:37:D8:07:82:45:F9:4F:F9:C3:D8:94:07:26:45:5F:9E:34:4F:75
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       0116E8FC39F1F41EE471BB2FB5B5E9A7C9A70A87
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 18 Oct 2023 22:32:38 +0000
ROA not before:           Wed 18 Oct 2023 22:27:38 +0000
ROA not after:            Wed 16 Oct 2024 22:32:38 +0000
asID:                     52916
IP address blocks:        143.255.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:e8:fc:39:f1:f4:1e:e4:71:bb:2f:b5:b5:e9:a7:c9:a7:0a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Oct 18 22:27:38 2023 GMT
            Not After : Oct 16 22:32:38 2024 GMT
        Subject: CN=5637D8078245F94FF9C3D8940726455F9E344F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:0f:35:05:87:ae:dc:93:b5:38:8a:56:af:
                    e1:da:2b:59:17:31:e1:cf:fc:2e:0e:ef:f4:19:6c:
                    eb:3c:21:7d:15:52:18:75:19:85:04:d3:33:5e:62:
                    f7:0e:1b:15:79:c3:f2:8c:7a:c3:75:8e:c5:60:39:
                    96:74:da:5f:db:0b:b3:5b:0f:65:58:1d:31:72:8b:
                    9b:df:5e:20:00:03:0b:f4:e6:0e:f2:a9:91:d1:78:
                    b5:f9:6e:f4:f2:7c:5f:d7:68:0f:9e:c3:26:b6:79:
                    93:d8:71:a2:bd:56:82:86:c6:48:b9:64:80:cd:7b:
                    44:a1:6d:c9:b1:e1:65:95:22:e4:d8:55:8b:fd:ff:
                    15:9c:e7:04:c3:3c:11:aa:36:9c:56:23:5d:bc:2f:
                    82:ae:19:b2:4f:a6:f1:72:34:5f:66:84:18:2b:c4:
                    54:25:46:a1:21:68:46:7e:a7:03:47:ed:0b:05:1b:
                    88:48:1e:d3:eb:b1:f3:8e:dd:86:59:8c:91:a8:6f:
                    5b:ff:90:aa:1b:fe:8a:e3:67:39:62:9f:a8:91:32:
                    a0:5f:14:d3:7c:6f:7c:ea:fa:a9:87:b1:9a:57:a1:
                    67:2e:fb:5c:8f:e7:ef:86:cd:eb:94:3e:4e:07:bd:
                    aa:51:db:8f:33:cb:88:f5:4d:21:c6:d1:5a:cc:b6:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:D8:07:82:45:F9:4F:F9:C3:D8:94:07:26:45:5F:9E:34:4F:75
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:51:31:91:42:b8:7b:6d:4f:0b:37:b5:1b:c0:4c:b2:bb:
         36:0e:e2:1b:cf:92:3d:cf:f4:43:c0:f8:ba:d2:4d:8f:4c:81:
         bc:1b:50:5f:3f:c3:eb:5b:35:07:09:da:86:fb:b9:c5:b2:00:
         b3:e3:b6:2c:09:33:86:bb:8d:40:36:3c:e2:6e:99:aa:4a:61:
         39:8a:a0:76:99:f1:0a:0f:f3:a9:ee:f5:91:eb:85:60:fd:ac:
         11:4e:67:12:a6:96:76:7f:a3:b7:46:34:f9:02:16:1e:5e:ba:
         d1:02:05:c4:4d:9d:cb:e8:f6:4d:77:78:1a:b2:bb:55:ca:58:
         79:06:db:e6:70:85:71:fd:76:d4:48:17:d1:2b:92:f6:8d:ae:
         cc:aa:fc:11:e0:ab:c8:4e:cc:52:1f:b2:58:82:c7:7f:eb:ea:
         8d:66:bc:04:de:5e:ab:03:dc:64:51:e9:52:c1:53:49:c5:6a:
         3e:7c:59:97:15:c7:eb:a0:6f:1d:bf:47:c3:b2:16:bb:7c:15:
         58:92:a4:9d:aa:c4:62:cc:c1:09:e7:fc:6a:72:c9:36:9d:b9:
         46:1b:cf:4e:97:25:07:ee:24:a5:a2:36:6a:3d:8c:9d:0d:0a:
         25:4a:cd:72:05:49:04:00:99:31:4f:91:90:b3:6b:8b:8b:60:
         31:c6:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org