Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa (raw, json)
Hash identifier:          AK2TU+Ch6WcxehJfAI5oaJvhTbFCcWTEojrhUCUeBu8=
Subject key identifier:   76:E8:52:6D:51:C1:26:D8:DC:E0:14:58:D8:1B:20:75:C9:BB:20:B2
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       56F32D9334DEB863F4698CC3C3B05DA610EEF93E
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:12 +0000
ROA not before:           Wed 13 Mar 2024 19:16:12 +0000
ROA not after:            Wed 12 Mar 2025 19:21:12 +0000
asID:                     262369
IP address blocks:        143.137.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f3:2d:93:34:de:b8:63:f4:69:8c:c3:c3:b0:5d:a6:10:ee:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:12 2024 GMT
            Not After : Mar 12 19:21:12 2025 GMT
        Subject: CN=76E8526D51C126D8DCE01458D81B2075C9BB20B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:6e:26:1f:4b:53:5f:c6:e5:2c:2a:89:33:
                    09:68:e3:98:86:05:b8:ed:10:f8:d4:4e:15:eb:48:
                    95:8b:81:03:81:af:99:8e:60:a3:fd:29:88:cc:e1:
                    b7:9c:a6:c4:7d:c8:ff:f2:a0:f3:ab:39:02:7b:a3:
                    28:fe:27:7d:74:bf:cf:a9:65:5d:a4:66:cc:b2:af:
                    53:2b:83:83:94:78:30:01:27:8e:d1:96:df:91:3d:
                    a9:01:dd:6a:12:c6:a1:44:9b:c0:92:82:f7:2c:62:
                    19:d2:74:ac:2d:66:6d:85:74:c1:8a:46:2e:bc:f5:
                    27:2e:70:1e:b1:72:48:ee:31:3b:6c:6c:6d:a1:cb:
                    35:5d:db:b3:57:0e:d5:98:8c:c2:df:da:9b:e7:4b:
                    1c:9a:21:d0:19:a2:3d:73:e0:85:a9:a9:ef:ed:75:
                    06:f6:10:18:86:75:14:09:74:5c:92:a4:ef:a1:fe:
                    29:f4:6b:37:20:e4:07:bc:ed:dc:63:08:40:e0:fd:
                    e5:85:99:46:de:73:3f:3e:95:ac:97:37:be:f1:43:
                    46:76:13:2a:25:50:93:ca:1e:e2:a6:6c:8e:a4:73:
                    48:e1:04:fc:ea:ad:53:f6:9b:2c:f9:a6:a2:6a:10:
                    43:ab:82:be:a3:19:8a:82:40:70:87:76:a1:47:38:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:52:6D:51:C1:26:D8:DC:E0:14:58:D8:1B:20:75:C9:BB:20:B2
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3232203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:71:da:f0:fb:c9:02:12:aa:9e:0a:83:06:3b:43:7a:22:e1:
         bd:e2:82:ab:69:9b:7e:6a:d0:87:0e:88:48:e1:f4:0e:c3:27:
         74:bc:fc:cf:fa:7a:e3:99:7c:00:7d:c0:05:61:6a:93:c5:f7:
         33:14:de:b7:6e:bc:5a:f5:49:22:60:56:33:77:b9:f2:4f:30:
         1a:b6:ee:91:16:8a:7c:ae:ab:bd:15:36:65:0b:5a:34:e4:c0:
         6c:a6:56:71:07:12:30:45:44:c2:0f:43:27:95:c3:e7:d0:24:
         49:e4:9e:99:f6:c2:78:25:71:7a:1e:f1:0e:78:37:51:ac:d4:
         51:c0:92:b7:ab:9d:4c:d2:5c:6d:4d:88:a0:4c:d6:a9:12:df:
         46:ab:72:53:8a:c0:10:85:9e:3e:41:f8:b3:42:02:ff:d7:25:
         23:5f:41:ae:46:08:98:60:c0:3a:83:73:40:b7:0a:e9:de:1d:
         ee:6b:e4:47:46:30:41:6b:eb:22:87:10:b9:71:89:1d:a4:05:
         ea:6e:42:e4:de:21:c6:21:2b:f3:4f:e4:70:13:08:27:dd:19:
         aa:81:9d:48:4e:cd:a6:53:fb:81:e6:e4:06:62:9c:80:12:e8:
         aa:c9:51:68:00:88:32:09:85:5c:8f:0e:00:1c:7d:bf:7e:10:
         a6:6d:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org