Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37322e302f32322d3234203d3e20323634303034.roa
File:                     3134332e302e37322e302f32322d3234203d3e20323634303034.roa (raw, json)
Hash identifier:          8rfrCdb6C76X2DUAD3KjNOLqsqZGp5wPAS//2mt5y/Y=
Subject key identifier:   D9:4C:D0:08:73:18:48:4D:AB:B4:B6:FF:91:91:7E:73:64:32:2B:89
Certificate issuer:       /CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
Certificate serial:       3ED6C2773FBAB3EE8AC7F9A8F612BCAC0C365BF4
Authority key identifier: 67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37322e302f32322d3234203d3e20323634303034.roa
Signing time:             Wed 01 Nov 2023 21:01:22 +0000
ROA not before:           Wed 01 Nov 2023 20:56:22 +0000
ROA not after:            Wed 30 Oct 2024 21:01:22 +0000
asID:                     264004
IP address blocks:        143.0.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d6:c2:77:3f:ba:b3:ee:8a:c7:f9:a8:f6:12:bc:ac:0c:36:5b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
        Validity
            Not Before: Nov  1 20:56:22 2023 GMT
            Not After : Oct 30 21:01:22 2024 GMT
        Subject: CN=D94CD0087318484DABB4B6FF91917E7364322B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:17:62:81:da:8f:78:ea:30:36:65:9c:48:
                    fc:36:ca:47:43:9f:f7:5f:f3:6c:5d:66:c5:5c:c8:
                    ed:cc:d3:eb:eb:99:ad:97:cd:f3:c1:52:29:7e:21:
                    b7:30:20:4b:a2:9a:93:1f:01:45:08:97:f7:eb:01:
                    3b:bc:a1:9e:9d:90:93:40:1b:09:e2:6a:6e:d3:db:
                    d4:86:b5:0a:5b:a1:02:34:3f:a5:2d:46:30:dc:26:
                    4c:7c:4f:16:7b:a7:34:d9:2b:f0:d1:36:6d:06:71:
                    2e:af:76:8a:77:9c:62:6a:4f:1b:22:1e:dd:a2:75:
                    73:da:16:8d:f2:a6:71:12:a1:60:a6:13:13:22:7e:
                    32:d6:23:c4:da:ff:37:8a:ed:91:83:b6:c2:7a:3a:
                    c9:14:af:cf:51:f4:54:7d:8f:b3:e5:4e:fe:52:bf:
                    ee:76:b9:6b:3d:0d:e9:cf:ea:4a:b7:b8:ad:1d:b9:
                    a6:61:48:f6:02:dc:41:f7:a3:5d:ba:52:41:6c:09:
                    2e:ca:d2:e4:7b:8d:28:e6:a9:b8:64:e7:71:ea:e2:
                    7f:d0:e7:4e:4d:29:13:7b:f2:19:c8:5c:ca:9b:70:
                    c0:b2:d3:61:f9:e6:36:fe:66:dd:a6:e3:25:e0:bd:
                    3d:c9:ae:8d:c6:ad:77:5e:cb:df:df:f0:f4:a5:84:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:D0:08:73:18:48:4D:AB:B4:B6:FF:91:91:7E:73:64:32:2B:89
            X509v3 Authority Key Identifier:
                keyid:67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37322e302f32322d3234203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:df:f9:d4:e5:bf:43:3d:f6:81:fc:b8:bc:04:80:27:48:d5:
         b6:fd:b6:38:53:c4:6f:bb:54:f4:5d:e5:c0:be:8d:1a:5f:49:
         cc:9c:82:68:65:16:7e:85:cf:d7:53:06:a4:4c:fc:0c:2b:66:
         f1:9f:65:95:cd:0b:39:9e:84:a9:95:bb:96:1f:4b:11:e1:c7:
         34:38:cd:1d:a4:66:d9:7e:81:ae:6a:94:24:97:85:a5:e3:81:
         e8:52:89:3e:1c:b9:b9:42:68:37:40:55:ce:60:d8:f0:82:25:
         49:b1:5d:97:34:4a:56:9e:fa:67:54:b3:c8:0c:d5:44:d1:e9:
         40:01:03:c2:a8:eb:13:7b:77:3d:b2:06:9c:a1:3b:7e:00:85:
         65:47:b9:7e:fe:24:ac:7e:b0:1e:28:86:74:26:52:2f:e7:4b:
         7d:f2:e4:10:16:d6:c5:fe:38:36:6d:87:4c:2a:30:22:b8:b6:
         60:3f:0e:8f:ac:36:7b:50:a6:fa:99:14:6d:34:39:58:88:52:
         b3:e1:14:91:f9:e4:9e:a5:65:e4:58:62:b0:12:ff:27:15:cd:
         6d:a1:b1:39:5c:01:85:55:26:d1:39:48:94:76:1d:55:fc:1f:
         f0:01:52:e1:e4:13:d0:0e:41:ec:d0:22:bb:e9:3d:e5:49:85:
         56:63:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org