Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3234203d3e20323635313431.roa
File:                     3134332e3235352e31322e302f32322d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          OXE+/w2jMW3a+n8+lFTk/8/Oe/nnVmmfaWsgOS/lBtI=
Subject key identifier:   98:87:60:F7:B3:9C:DC:55:69:36:39:C9:1A:65:5E:D7:98:49:81:3A
Certificate issuer:       /CN=B2AD085A725187320DED5C6B7CF83F9A320DB218
Certificate serial:       4F0B655C30B7527208BF0E2E5292622C2D405B7A
Authority key identifier: B2:AD:08:5A:72:51:87:32:0D:ED:5C:6B:7C:F8:3F:9A:32:0D:B2:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3234203d3e20323635313431.roa
Signing time:             Mon 23 Aug 2021 14:21:54 +0000
ROA not before:           Mon 23 Aug 2021 14:16:54 +0000
ROA not after:            Mon 22 Aug 2022 14:21:54 +0000
asID:                     265141
IP address blocks:        143.255.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0b:65:5c:30:b7:52:72:08:bf:0e:2e:52:92:62:2c:2d:40:5b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD085A725187320DED5C6B7CF83F9A320DB218
        Validity
            Not Before: Aug 23 14:16:54 2021 GMT
            Not After : Aug 22 14:21:54 2022 GMT
        Subject: CN=3082010A0282010100E263CAC9C89701EB4FF93A86D908CBC622913EF4F2CBFFAB3132870FB1D457882DECDD21AE28237D0882E2C5DA7B8CD83CD6DAA18BC18E86D11B37C1E20F829B6683A2DF829B47CC628FB9A4F8D93623BA01F4FA254018B24B588E3EF11C6E6006320C97344781530E4C974A1BEB07E8DF718305895C27E1E163DA608762BCDC98C03FC79D2B2C2D08ABEE6244A8D5287666A1C56DFF757DBB5C376B07934DDC41795C78D1D795E9520DF191BE8B9D0015047B6975264185B964EA62C7BD508237E6C96A7B966B11CAB894028C0859D86337EC12E971837084AFC1355CD893AF17A59B9CA40C27E0314098F4EFDB1FC9C0B0A33D94ECDEA397ECEB72B4E032C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:ca:c9:c8:97:01:eb:4f:f9:3a:86:d9:08:
                    cb:c6:22:91:3e:f4:f2:cb:ff:ab:31:32:87:0f:b1:
                    d4:57:88:2d:ec:dd:21:ae:28:23:7d:08:82:e2:c5:
                    da:7b:8c:d8:3c:d6:da:a1:8b:c1:8e:86:d1:1b:37:
                    c1:e2:0f:82:9b:66:83:a2:df:82:9b:47:cc:62:8f:
                    b9:a4:f8:d9:36:23:ba:01:f4:fa:25:40:18:b2:4b:
                    58:8e:3e:f1:1c:6e:60:06:32:0c:97:34:47:81:53:
                    0e:4c:97:4a:1b:eb:07:e8:df:71:83:05:89:5c:27:
                    e1:e1:63:da:60:87:62:bc:dc:98:c0:3f:c7:9d:2b:
                    2c:2d:08:ab:ee:62:44:a8:d5:28:76:66:a1:c5:6d:
                    ff:75:7d:bb:5c:37:6b:07:93:4d:dc:41:79:5c:78:
                    d1:d7:95:e9:52:0d:f1:91:be:8b:9d:00:15:04:7b:
                    69:75:26:41:85:b9:64:ea:62:c7:bd:50:82:37:e6:
                    c9:6a:7b:96:6b:11:ca:b8:94:02:8c:08:59:d8:63:
                    37:ec:12:e9:71:83:70:84:af:c1:35:5c:d8:93:af:
                    17:a5:9b:9c:a4:0c:27:e0:31:40:98:f4:ef:db:1f:
                    c9:c0:b0:a3:3d:94:ec:de:a3:97:ec:eb:72:b4:e0:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:60:F7:B3:9C:DC:55:69:36:39:C9:1A:65:5E:D7:98:49:81:3A
            X509v3 Authority Key Identifier:
                keyid:B2:AD:08:5A:72:51:87:32:0D:ED:5C:6B:7C:F8:3F:9A:32:0D:B2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD085A725187320DED5C6B7CF83F9A320DB218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:76:58:3a:74:cf:59:8a:a5:7e:4e:d8:01:98:ef:61:f4:d9:
         8a:80:b4:da:8c:84:3f:2e:9d:b6:7e:4d:bc:59:ee:f9:d3:c1:
         e0:9c:79:4a:a1:0c:0e:f7:37:84:15:27:42:ad:6e:89:91:5b:
         df:f2:0e:ae:9f:00:37:d5:b8:da:ea:37:ad:f3:62:5c:be:46:
         a6:a8:ec:c2:18:29:dd:2c:7d:f6:15:85:67:2b:36:91:48:19:
         cf:f4:20:08:f7:58:6b:62:41:db:46:cb:d7:15:93:3e:9b:44:
         ea:62:3f:62:e5:5a:3b:e3:9d:3d:63:d4:bd:84:b3:a7:4c:1d:
         09:c3:2e:b6:ea:27:06:27:a1:90:2d:58:1e:b1:ce:b8:57:ae:
         d1:b4:46:9a:51:57:64:d2:aa:14:6c:28:e6:18:1a:fa:0c:d0:
         08:43:60:e0:e9:b6:b6:81:a8:43:90:50:2e:aa:b6:88:68:f7:
         5c:3d:39:15:0a:bd:c0:2e:20:53:7e:5e:5a:c3:70:54:fc:6f:
         06:ca:22:75:ef:b9:d3:08:49:f2:ba:41:90:92:91:05:f8:44:
         64:f6:67:a9:13:f9:7d:73:9b:2f:c7:87:ca:c4:35:ba:bd:25:
         3a:d2:e8:cb:c1:75:47:34:93:7b:92:04:95:c6:7f:15:d1:fa:
         90:b8:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org