Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          fgDfBuhLXHZYR82nt6gKA5ejUTz1dSFb9L6GXrrAWV4=
Subject key identifier:   C8:62:17:7D:52:7E:96:F5:55:E6:64:A9:30:CB:8E:54:3B:DC:29:43
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       2878A2BC70D77BA2E37C444901CC4AFD9113E695
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa
Signing time:             Wed 22 Nov 2023 13:08:20 +0000
ROA not before:           Wed 22 Nov 2023 13:03:20 +0000
ROA not after:            Wed 20 Nov 2024 13:08:20 +0000
asID:                     262369
IP address blocks:        143.137.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:78:a2:bc:70:d7:7b:a2:e3:7c:44:49:01:cc:4a:fd:91:13:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Nov 22 13:03:20 2023 GMT
            Not After : Nov 20 13:08:20 2024 GMT
        Subject: CN=C862177D527E96F555E664A930CB8E543BDC2943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:cf:88:c4:c9:68:c8:07:17:2a:e7:99:16:
                    88:e5:3a:ec:ee:49:dd:8e:ff:b8:e3:e7:49:79:bf:
                    18:cc:78:eb:2c:ef:3b:fd:5e:d2:56:70:e8:15:c3:
                    a3:27:c9:42:d5:89:33:65:8e:c8:71:33:8c:08:0e:
                    01:28:6a:c3:03:c9:d0:63:8d:51:88:6c:87:89:75:
                    30:16:9b:74:2b:d6:05:80:2b:8d:27:b0:75:d3:82:
                    84:14:c7:0b:17:fe:4d:83:5c:5b:04:0b:01:97:41:
                    ef:56:a1:09:a1:6f:f6:82:c8:c7:a1:f7:4d:c5:6e:
                    4e:34:ae:24:c4:51:c4:22:6b:43:d5:44:c5:25:70:
                    00:10:f5:60:54:77:11:00:1b:1d:df:e3:88:af:5f:
                    20:06:a2:f5:24:22:eb:fd:34:af:b4:0e:ef:a1:6c:
                    39:3f:ca:dd:98:36:61:99:7d:91:83:47:98:ca:21:
                    a2:d3:04:a7:ea:8d:1b:33:e2:b0:8d:6b:40:a9:bc:
                    da:1f:f9:ad:e3:f6:ac:81:00:3f:44:ab:f5:f5:f0:
                    d8:db:c0:e0:12:a8:fd:ad:fc:58:2b:fd:ac:fd:73:
                    f4:79:b4:6f:18:53:8b:a1:df:2c:6a:28:99:55:23:
                    85:7f:61:a5:33:de:3f:47:63:49:6c:3f:be:22:29:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:17:7D:52:7E:96:F5:55:E6:64:A9:30:CB:8E:54:3B:DC:29:43
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32322d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:76:f0:f4:ee:4c:5a:6a:73:51:5b:3f:f1:47:45:ff:ac:ab:
         dd:e5:62:03:cb:2c:96:78:86:56:97:66:60:bf:a2:7c:53:d3:
         2f:e0:5d:05:ed:29:34:00:63:68:a3:dd:3f:4f:b8:b5:55:46:
         9c:d6:b1:97:75:df:da:e1:7d:54:dc:92:b9:9a:d7:5e:b4:7a:
         f5:b2:c4:41:79:a0:16:08:fc:75:80:b5:16:df:4a:df:07:44:
         b2:75:ab:52:a7:c5:b7:5e:e1:d0:9f:dc:61:19:32:40:ef:ed:
         c8:fc:5b:b0:a6:78:f3:a4:d2:1b:ce:1f:6d:66:e6:86:bc:cf:
         51:05:23:d5:c1:7c:15:ab:e2:7e:64:6f:36:ec:47:81:60:2a:
         f0:7a:66:ee:01:d2:51:73:0b:7e:1e:5c:44:ae:74:6a:71:b4:
         4b:10:5c:49:af:e4:e4:13:1b:20:5b:5a:8b:4a:f5:e7:59:36:
         51:96:f9:aa:69:b0:e8:3f:ca:39:16:01:7d:b3:26:f8:c2:e6:
         ed:e2:60:32:5c:5d:dc:d9:72:f1:94:b1:45:58:12:06:42:3e:
         81:3a:49:79:d8:0c:c5:1e:b7:e6:67:f4:27:8f:38:38:18:c9:
         8b:af:65:99:26:43:5b:52:ed:74:69:33:34:35:5c:82:98:95:
         75:90:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org