Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31382e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          1kCctzvzNTqSA7F3KkQ+AuFuLLatgAPFk429bPZZlAo=
Subject key identifier:   CA:33:C0:65:14:22:A3:44:07:E9:5C:80:01:2E:54:A2:E0:33:66:AF
Certificate issuer:       /CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
Certificate serial:       165CE476DD358019AB46AFE607C1EAD9911CAC60
Authority key identifier: D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 07 Jun 2023 03:33:57 +0000
ROA not before:           Wed 07 Jun 2023 03:28:57 +0000
ROA not after:            Wed 05 Jun 2024 03:33:57 +0000
asID:                     52916
IP address blocks:        143.255.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5c:e4:76:dd:35:80:19:ab:46:af:e6:07:c1:ea:d9:91:1c:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D
        Validity
            Not Before: Jun  7 03:28:57 2023 GMT
            Not After : Jun  5 03:33:57 2024 GMT
        Subject: CN=CA33C0651422A34407E95C80012E54A2E03366AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:e6:9d:76:49:7d:51:93:03:48:8d:af:d7:
                    ad:ed:b1:1d:44:3e:39:b1:f2:dc:d5:1f:05:44:bb:
                    1e:16:5d:3d:54:ad:f9:5b:ec:3d:45:00:08:10:65:
                    39:e0:23:46:16:3e:e3:38:b6:9e:96:4a:b8:52:74:
                    44:65:0e:bd:ba:ba:ec:a7:08:ef:10:32:ac:1a:00:
                    e9:a3:2d:da:8a:27:96:1b:4b:83:7f:ce:0e:99:fa:
                    1e:f3:85:ff:e3:42:dd:77:27:4f:8a:25:0d:76:b5:
                    40:cd:33:42:67:8d:ff:0f:a1:42:32:ef:f2:fc:fe:
                    3a:2c:8c:55:fa:ec:53:c7:e3:73:b7:f6:c5:f9:bc:
                    76:e8:5d:9b:9e:90:a0:9d:73:73:41:20:ff:a7:f4:
                    3d:49:77:36:83:74:9d:de:2d:61:0d:41:ac:00:f6:
                    a6:7b:cc:52:60:33:1a:aa:13:a5:80:63:07:bd:1a:
                    2f:f5:71:48:20:e4:e4:04:dd:e8:9e:dc:54:3f:2c:
                    14:6c:df:2e:6c:85:e4:26:75:56:71:8d:b4:50:5a:
                    d4:ee:7b:5c:04:50:ea:80:14:7b:09:68:be:fb:ab:
                    15:8b:ec:90:68:d3:6e:c3:d1:f5:ac:44:d8:b6:de:
                    fe:64:a1:99:a9:0d:f9:f3:31:ad:33:20:69:6d:74:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:C0:65:14:22:A3:44:07:E9:5C:80:01:2E:54:A2:E0:33:66:AF
            X509v3 Authority Key Identifier:
                keyid:D1:03:4C:4B:71:C8:FD:5C:F3:CC:7E:3C:02:EC:F8:22:A1:A2:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1034C4B71C8FD5CF3CC7E3C02ECF822A1A2173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/0/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:d7:8d:cb:78:36:cc:e8:ae:dc:9c:cd:96:fb:18:34:50:
         da:81:78:c8:00:15:59:80:a1:be:96:bd:c4:68:70:f4:48:9d:
         08:0c:e9:a6:00:59:95:05:a7:23:9a:bd:6f:63:71:a3:40:38:
         f0:0c:c7:81:dd:43:18:7e:1d:8a:ae:66:97:78:3b:d6:b7:df:
         af:dc:8f:c9:2f:ed:21:e5:04:78:7a:62:8d:51:6a:4b:66:05:
         51:6f:4f:5e:64:5a:42:eb:c3:8b:99:59:c8:00:0d:c8:46:ca:
         8e:4b:66:f1:49:ff:a8:c6:9d:c1:ae:5d:c8:82:b7:04:10:f0:
         9a:7a:7a:0a:1d:dc:81:23:80:f9:93:79:10:9e:b5:d8:48:e5:
         ad:6b:e9:33:2b:d5:80:56:1c:d1:ec:1e:ef:19:51:40:32:a4:
         4b:98:4c:31:00:43:fa:2d:b3:45:15:d9:b6:07:b5:12:8a:6e:
         a6:b5:c4:4d:07:8d:25:1b:7c:ce:7b:a1:87:21:eb:65:31:12:
         f4:92:1e:a1:10:d2:15:d5:fc:c4:95:f7:4b:68:7b:79:58:b7:
         14:a3:92:7d:c0:da:a1:0e:d5:26:5c:8e:b1:d0:68:59:1f:ef:
         32:97:6e:4d:2e:8d:b1:25:10:8c:2d:64:3a:97:c7:8f:12:5d:
         c4:86:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org