Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e203132303736.roa
File:                     3134332e3235352e3230322e302f32342d3234203d3e203132303736.roa (raw, json)
Hash identifier:          UCjBYw0kfSX1EAUiowBSsR+JhenBf17jT4rquenfXWg=
Subject key identifier:   09:D0:C6:38:4B:59:47:E7:1B:78:04:47:6A:70:33:08:98:03:1C:9E
Certificate issuer:       /CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
Certificate serial:       50C550B501D9D0CA67E457CE8EBA6E6E729F76D8
Authority key identifier: B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e203132303736.roa
Signing time:             Thu 23 Feb 2023 21:01:39 +0000
ROA not before:           Thu 23 Feb 2023 20:56:39 +0000
ROA not after:            Fri 23 Feb 2024 21:01:39 +0000
asID:                     12076
IP address blocks:        143.255.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c5:50:b5:01:d9:d0:ca:67:e4:57:ce:8e:ba:6e:6e:72:9f:76:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
        Validity
            Not Before: Feb 23 20:56:39 2023 GMT
            Not After : Feb 23 21:01:39 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:35:6c:76:aa:a9:2e:55:f2:e3:2e:5e:dc:
                    bf:db:28:8f:84:95:e8:2f:d3:d5:4d:6c:fb:7b:10:
                    ea:51:69:71:a1:9c:19:44:9b:cd:64:f7:50:d5:92:
                    33:2c:65:f6:6a:8b:4f:7d:62:f4:a1:1e:c8:cf:b0:
                    70:f6:03:84:3b:f2:57:d4:ea:b1:da:88:37:8a:bc:
                    0d:ea:81:4b:3e:95:bf:69:6c:56:5e:70:c5:8c:89:
                    49:85:f7:cf:2a:a1:ed:fd:5d:48:f6:eb:36:78:ee:
                    6a:ef:57:ca:b4:27:11:a1:b4:43:d9:36:f2:19:a5:
                    48:09:23:4e:be:ff:97:fa:67:60:e0:b3:2e:e3:b6:
                    cd:13:fa:ce:46:41:e4:6d:71:fc:5a:1e:ec:51:48:
                    55:11:64:09:f2:d7:77:d8:28:97:e7:72:33:a0:d7:
                    e8:03:8d:f5:7d:2b:6c:1d:6f:7b:55:f9:7c:a1:23:
                    e6:56:d6:26:35:dd:42:c6:7a:40:24:20:51:b4:26:
                    71:fd:f9:62:c5:f6:6b:14:22:ae:39:ca:56:c4:bd:
                    8d:6c:78:2c:58:5c:38:1c:49:ab:d3:a1:8b:3b:da:
                    53:99:88:b0:ed:c1:bc:6d:8d:d1:bd:11:6e:d2:fc:
                    db:71:12:fd:ca:a7:8b:57:48:86:18:44:04:1f:8b:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D0:C6:38:4B:59:47:E7:1B:78:04:47:6A:70:33:08:98:03:1C:9E
            X509v3 Authority Key Identifier:
                keyid:B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e203132303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:5c:f0:4d:bc:8d:cc:46:7b:3b:29:ef:71:6e:cd:85:71:
         bb:0f:fe:9b:55:3b:bf:dd:7c:9d:fa:ce:a3:34:73:33:08:0d:
         b8:43:9e:f0:dc:25:96:60:7c:f2:23:b5:5b:90:ae:9d:06:8a:
         9c:04:fe:c0:23:da:2e:3e:62:66:1a:0d:f0:f6:3b:45:8b:28:
         58:5c:96:37:42:35:39:42:5e:c0:d5:17:f7:89:c4:f9:18:f2:
         cc:52:71:34:29:0b:44:6c:91:31:d0:3e:cf:3a:91:b1:f1:8d:
         0d:96:ac:fc:5c:cc:1c:a8:49:cc:7f:20:1d:11:29:3d:08:f9:
         49:22:3a:e8:23:82:8d:3a:a3:3c:9e:3a:bb:30:f5:85:d5:2c:
         bc:04:98:00:9d:7b:9b:75:8e:88:44:e2:10:1d:bb:bd:e2:12:
         6e:eb:5a:d6:7f:3e:b2:76:03:65:3c:3f:cd:77:ec:d6:0a:89:
         0c:65:0d:7d:22:80:71:74:db:52:79:9a:52:e4:ed:c7:dc:b6:
         9a:b9:da:e6:59:1b:7f:7e:2b:be:19:d3:58:30:19:16:f3:b9:
         06:05:71:60:74:11:9e:55:ad:53:4e:96:aa:ab:eb:b6:98:16:
         a5:5c:bf:1f:e4:0b:f5:b4:ee:5f:59:a8:ef:ee:51:89:34:a5:
         e9:f3:d6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org