Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa
File:                     3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          xXp/+dOu4wg7vx9oT7sFX55apW89jCFpt8p1e2nWMII=
Subject key identifier:   F6:A1:D1:83:98:4B:B2:F4:25:9C:76:C2:24:49:07:1F:0B:60:AF:BF
Certificate issuer:       /CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
Certificate serial:       5209D368F314C87C8F719D56E96239248C4924E2
Authority key identifier: B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa
Signing time:             Sat 27 Jan 2024 13:00:01 +0000
ROA not before:           Sat 27 Jan 2024 12:55:01 +0000
ROA not after:            Mon 27 Jan 2025 13:00:01 +0000
asID:                     8075
IP address blocks:        143.255.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:d3:68:f3:14:c8:7c:8f:71:9d:56:e9:62:39:24:8c:49:24:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B110FC9A0C8E264375E85C314B1FC94C5746603D
        Validity
            Not Before: Jan 27 12:55:01 2024 GMT
            Not After : Jan 27 13:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:88:08:46:1f:f7:30:50:5b:9d:ac:3b:65:
                    ce:04:e9:ba:78:b3:df:0c:00:40:fc:d5:ee:25:cd:
                    60:a7:28:01:01:4d:4b:10:b7:01:53:1b:2e:f4:19:
                    4e:a3:89:7c:8f:81:2d:4b:95:f5:c9:84:68:cd:90:
                    18:64:24:74:5d:60:c6:c4:9a:8e:5b:b0:40:25:1e:
                    ee:f9:63:ba:bc:52:41:88:63:94:44:66:03:c2:dd:
                    6d:4e:ef:b8:75:32:d3:0a:6b:eb:fc:e1:0b:1c:4b:
                    9c:6d:a4:47:ea:cc:2d:f1:50:ae:6c:52:c2:65:0c:
                    98:21:b8:64:a4:b1:c3:c7:99:c1:ea:e4:a5:2f:31:
                    f5:95:77:64:05:51:f6:4a:1d:c9:4e:12:e3:83:84:
                    fe:e0:26:ff:98:2a:ff:9a:ff:5f:7f:73:72:69:27:
                    fe:6b:0e:d4:3c:84:90:21:ca:2f:67:4d:90:db:45:
                    0d:f2:f2:ca:ce:ef:bb:f0:af:42:47:a8:79:d6:19:
                    60:f8:94:64:d6:69:61:43:df:b6:df:01:07:58:a7:
                    b0:69:77:ee:64:9d:61:bb:06:65:c2:6b:f4:4f:97:
                    c2:e3:87:c5:5b:06:a0:00:3a:06:51:d0:31:a3:2a:
                    87:a4:42:d1:60:a1:72:43:b9:ca:f5:7f:5c:cf:f4:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A1:D1:83:98:4B:B2:F4:25:9C:76:C2:24:49:07:1F:0B:60:AF:BF
            X509v3 Authority Key Identifier:
                keyid:B1:10:FC:9A:0C:8E:26:43:75:E8:5C:31:4B:1F:C9:4C:57:46:60:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B110FC9A0C8E264375E85C314B1FC94C5746603D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/0/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:18:90:cc:e2:cb:c4:d4:de:7d:49:bd:ca:6a:9e:2a:da:a9:
         f2:3b:ad:b3:c9:92:6a:2b:4e:ee:e0:f5:3c:e6:fa:b7:10:e9:
         45:cf:70:47:04:86:38:dd:00:70:f8:34:40:47:12:b9:42:b1:
         c5:30:5a:67:61:a9:a5:5b:5c:fb:36:34:c8:f6:06:a2:12:c5:
         4e:ea:9c:84:78:35:5f:dd:9f:00:7f:51:ae:64:bb:5e:af:40:
         b6:df:46:4f:1d:ef:b5:bf:af:fd:77:a8:81:31:a7:12:4a:09:
         d1:2f:0f:67:d2:e7:60:38:e5:68:16:f6:98:e2:de:fe:1a:cf:
         60:a0:10:90:34:05:73:8f:12:da:07:12:fa:46:0b:ec:89:e7:
         2f:76:70:09:08:b2:ba:56:75:9a:7a:df:6d:80:e7:ce:6f:47:
         8d:90:39:1f:4d:1a:85:d2:53:ec:56:f3:2c:97:37:f8:81:d9:
         e9:05:09:a8:54:10:e3:dd:f5:3e:bf:f1:99:68:36:2a:18:73:
         d6:63:a5:fd:cc:8e:83:60:d2:43:38:d0:08:f7:c7:e3:f4:4c:
         9f:3e:dc:c1:91:60:49:6b:31:a0:87:8f:4d:db:12:f9:3f:78:
         cd:9e:52:88:23:19:4a:84:ed:5c:4c:22:cd:60:5f:21:3e:96:
         6d:39:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org