Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          BbyBgTyvJDktcedLkeOOLVfn+Qmywjhh3PUQpHSbELQ=
Subject key identifier:   95:0B:C3:32:FB:01:87:55:13:C7:9D:C9:B5:FD:21:2A:83:FA:BD:E9
Certificate issuer:       /CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
Certificate serial:       3DF1EE99337D3950C94E0F5016D92EADCA7060AB
Authority key identifier: B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa
Signing time:             Thu 29 Jun 2023 14:18:41 +0000
ROA not before:           Thu 29 Jun 2023 14:13:41 +0000
ROA not after:            Thu 27 Jun 2024 14:18:41 +0000
asID:                     264036
IP address blocks:        143.137.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f1:ee:99:33:7d:39:50:c9:4e:0f:50:16:d9:2e:ad:ca:70:60:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Validity
            Not Before: Jun 29 14:13:41 2023 GMT
            Not After : Jun 27 14:18:41 2024 GMT
        Subject: CN=950BC332FB01875513C79DC9B5FD212A83FABDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:44:fd:b6:77:dd:c8:86:4e:e0:2c:ad:2e:
                    64:4a:a0:3a:af:93:63:74:ba:32:03:54:0d:61:18:
                    13:d0:85:f1:b0:08:60:00:2d:29:cc:5a:14:5b:d9:
                    8f:93:49:8a:d0:bd:d8:13:84:98:ae:d5:1d:c6:b4:
                    49:37:35:0d:66:5a:67:06:3a:56:67:75:ce:f0:a6:
                    83:85:fe:e8:3a:1e:76:67:5c:ff:ff:0a:5b:5a:e8:
                    5a:0f:6b:de:30:dd:06:f1:9d:44:27:03:20:0e:ea:
                    e1:37:1d:de:fa:0f:a6:b4:02:21:30:ed:54:97:6a:
                    e7:b4:49:d8:e3:74:7c:9e:c5:8b:34:a0:4d:04:27:
                    21:92:90:7f:f3:fd:e5:c1:f8:b7:b0:5a:69:b7:be:
                    a6:72:4e:18:7e:ea:1c:4d:f1:5f:c8:d9:bb:07:d1:
                    65:5b:ea:a5:4a:aa:6e:30:70:fc:c6:ad:fd:ae:1d:
                    0a:c1:84:fc:de:c4:c6:e2:db:17:0b:ff:0a:95:cd:
                    4d:0c:fa:fb:9b:b1:75:a7:60:bb:87:41:91:8e:de:
                    43:4a:87:d9:4f:23:ea:e9:b3:7e:f4:2d:79:30:03:
                    2e:0f:d6:6e:29:0f:34:d6:e2:52:bb:77:d7:b9:09:
                    5c:90:39:f9:6b:09:d4:88:46:1e:a9:e6:0d:fb:1d:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:C3:32:FB:01:87:55:13:C7:9D:C9:B5:FD:21:2A:83:FA:BD:E9
            X509v3 Authority Key Identifier:
                keyid:B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:72:a9:03:49:ad:2a:3a:97:39:ab:95:bf:9b:75:c9:a9:69:
         38:3e:dd:63:ca:11:c3:e9:c6:e2:65:79:e1:27:ea:bb:6f:46:
         fc:83:1a:4d:89:95:f9:36:8c:2a:1d:6e:ce:bc:bf:63:ff:d2:
         13:39:1c:cc:52:9d:43:25:a7:0e:c6:27:59:d8:07:5c:d0:29:
         43:55:17:20:68:05:e8:08:21:ce:0f:b3:f4:2c:32:6b:b0:8f:
         49:84:6c:8b:96:34:1f:46:0c:d6:82:11:41:81:50:89:07:74:
         a6:b8:60:0b:9e:2b:c5:99:3f:ec:5e:82:9c:a8:02:e0:44:ce:
         ba:88:84:03:7c:aa:a9:95:ac:40:2a:43:eb:f3:6c:db:1c:06:
         ec:07:e4:8d:92:12:66:b2:b4:36:56:ba:7e:e3:dd:bd:95:20:
         de:be:e0:8e:05:19:19:01:22:24:94:da:f4:82:3c:04:16:2c:
         73:9a:8a:7f:2d:c5:e8:62:67:0d:19:0f:8b:d9:8c:01:b5:46:
         32:fb:d7:b3:bd:e7:db:c6:cd:34:8c:df:e7:80:11:ea:fe:20:
         46:ca:59:f9:11:9a:64:58:a6:1d:92:fc:2c:05:0c:a7:dd:23:
         c1:34:aa:be:cd:37:6d:12:12:19:09:b8:d7:a4:8a:7f:3e:97:
         99:cb:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org