Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa
File:                     3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          X8TmDoZEyGmNNNCHmTrf2WlOJegNB1GBr9qAtfzxn6g=
Subject key identifier:   84:4E:8A:5B:F0:E9:F2:1C:72:F9:28:B3:65:22:6D:F8:6A:55:A0:91
Certificate issuer:       /CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
Certificate serial:       24E6BC898323159FE07A0CB20F887379D5E73207
Authority key identifier: 04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa
Signing time:             Wed 13 Mar 2024 19:21:12 +0000
ROA not before:           Wed 13 Mar 2024 19:16:12 +0000
ROA not after:            Wed 12 Mar 2025 19:21:12 +0000
asID:                     262369
IP address blocks:        143.137.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:bc:89:83:23:15:9f:e0:7a:0c:b2:0f:88:73:79:d5:e7:32:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Validity
            Not Before: Mar 13 19:16:12 2024 GMT
            Not After : Mar 12 19:21:12 2025 GMT
        Subject: CN=844E8A5BF0E9F21C72F928B365226DF86A55A091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:4b:56:92:a0:5f:83:6c:1d:34:ff:dd:a2:
                    07:a0:ca:18:c9:ea:9a:03:ed:f3:0e:ba:29:d8:a4:
                    8f:b7:01:c7:6c:f6:d2:d6:1e:60:99:7a:47:44:6e:
                    04:a6:ba:ad:de:a4:e4:ba:cd:8e:19:54:02:b3:d3:
                    10:aa:76:c7:89:93:db:8f:e8:8b:c5:e7:32:5b:2f:
                    39:78:5d:4b:b0:16:02:04:ae:93:17:cf:a0:17:8d:
                    ca:e4:ca:61:ba:24:08:ac:a8:22:77:72:fa:df:65:
                    04:65:c4:df:c0:a3:a5:95:55:d0:c2:cf:1b:7a:51:
                    d4:09:7f:de:89:6a:06:d3:fa:64:6f:11:51:07:98:
                    73:83:6e:24:5b:cb:3b:fe:f2:94:46:6b:fb:69:4e:
                    4c:91:96:bc:ae:b3:73:13:04:b6:f1:6b:a0:de:29:
                    ba:7b:aa:00:18:36:5b:f6:b4:c6:03:e1:77:de:52:
                    2d:3a:08:11:aa:c1:77:9e:35:a3:04:33:ef:1b:d2:
                    11:10:af:c1:4e:2d:bd:ac:72:bf:59:59:25:f5:00:
                    26:d4:67:2b:d7:4f:5c:8a:72:c9:0f:1c:71:8c:df:
                    a2:cc:7a:69:7b:1f:e0:e5:44:77:15:3d:2b:af:8c:
                    81:4b:6b:2e:d0:b2:d2:fc:78:6f:26:c0:19:22:ce:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:8A:5B:F0:E9:F2:1C:72:F9:28:B3:65:22:6D:F8:6A:55:A0:91
            X509v3 Authority Key Identifier:
                keyid:04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37302e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:f0:5a:8b:2a:84:0c:8b:88:6b:b9:ff:2a:1b:84:98:91:29:
         fb:98:37:5e:6f:8f:4f:5e:2b:82:a0:c2:ee:fe:ac:8d:31:17:
         dc:0f:6c:d9:5e:32:ca:4b:2d:8c:19:28:08:78:47:c3:eb:75:
         65:ba:7e:f2:ad:6f:ba:23:ef:dc:b5:e1:f4:12:55:7a:37:a7:
         8b:7f:94:0d:26:1c:04:ad:80:c0:92:20:d2:71:6e:73:ed:46:
         3a:2b:4a:28:9e:bd:c7:db:e7:8d:c9:83:f4:f9:ae:7b:24:67:
         84:23:ed:96:af:c7:30:7b:3a:2a:8b:26:f9:f3:d5:cd:60:7c:
         87:ef:5e:bf:2c:e6:45:97:24:07:36:ac:51:a7:6a:9a:ee:2d:
         b3:bc:b8:4c:7f:ac:c6:90:dd:09:13:e4:38:87:1d:46:b7:ca:
         29:85:da:0f:da:fd:33:f8:f8:c4:ae:4d:69:ce:12:30:58:fe:
         ea:c1:38:c6:85:e4:ee:e8:d1:93:a2:d1:3f:22:12:62:eb:39:
         8c:df:0a:b1:f9:4a:22:54:38:d3:39:9c:72:e6:8a:6f:c4:67:
         66:7e:83:c8:a9:90:5b:e5:fa:8f:ba:27:5f:c5:10:4e:c0:36:
         e1:f5:34:87:b8:3c:b0:e5:6b:c8:29:ef:4d:83:44:e5:1f:69:
         e9:db:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org