Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          wYT+pkA7gTdSn/8n3d+UCei0XJ/GEWDfhQ/CuLLuATA=
Subject key identifier:   B2:C3:16:D7:F8:3D:5B:08:72:1A:4C:55:DA:A3:78:EA:8D:55:F5:9B
Certificate issuer:       /CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
Certificate serial:       383896C0ED7F2E9CB963808D880241E6D12BAC91
Authority key identifier: B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
Signing time:             Thu 29 Jun 2023 14:18:41 +0000
ROA not before:           Thu 29 Jun 2023 14:13:41 +0000
ROA not after:            Thu 27 Jun 2024 14:18:41 +0000
asID:                     264036
IP address blocks:        143.137.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:38:96:c0:ed:7f:2e:9c:b9:63:80:8d:88:02:41:e6:d1:2b:ac:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA
        Validity
            Not Before: Jun 29 14:13:41 2023 GMT
            Not After : Jun 27 14:18:41 2024 GMT
        Subject: CN=B2C316D7F83D5B08721A4C55DAA378EA8D55F59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:44:64:93:f5:1e:a5:55:14:2d:ce:6e:ea:
                    33:95:57:69:ef:2e:c8:10:cb:2e:2d:a0:1a:a7:21:
                    c6:5c:88:9f:5c:a7:80:6d:1e:1c:01:ba:44:e2:4c:
                    ed:4a:b7:87:03:99:bf:83:a8:d9:49:7c:be:b0:9e:
                    ec:46:c2:2d:61:b5:1a:07:2b:c7:44:40:3d:29:47:
                    07:7e:da:fa:43:ca:d3:02:5d:02:45:2e:3f:d3:d4:
                    b2:26:2b:17:ac:0b:14:2a:db:c4:11:0e:68:90:0a:
                    97:41:7f:4b:58:72:60:d8:6a:de:30:03:5f:87:b8:
                    e4:49:b4:e3:cb:de:31:ad:9a:9c:3f:0d:4c:a0:92:
                    2c:14:a1:b7:24:2d:96:ca:ba:44:04:dd:97:33:e6:
                    60:58:f5:9e:09:d2:f5:60:c0:ff:e5:46:27:d5:33:
                    54:4c:2d:89:33:db:c4:fa:96:d9:e9:d8:f2:9b:55:
                    5f:7e:5f:f6:c7:ba:98:f2:eb:77:46:0e:3e:15:4e:
                    51:0d:d8:09:e1:9c:0d:f1:d4:21:00:35:cc:d8:d2:
                    24:0f:27:26:79:97:61:c4:76:8e:6a:23:ea:d3:7c:
                    ca:d3:e9:3d:69:df:93:71:b3:4c:3a:c4:f4:6e:89:
                    a5:95:ab:67:63:bb:46:38:06:c8:7b:d0:94:16:b1:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C3:16:D7:F8:3D:5B:08:72:1A:4C:55:DA:A3:78:EA:8D:55:F5:9B
            X509v3 Authority Key Identifier:
                keyid:B2:AD:19:B2:E3:4D:60:28:6D:E7:1B:15:D5:3F:4D:EA:34:CB:E5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2AD19B2E34D60286DE71B15D53F4DEA34CBE5EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/0/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:63:0e:60:b1:aa:44:e3:4e:c2:3a:4a:bf:7c:65:e6:9c:73:
         84:66:b2:7b:74:52:88:7e:62:2c:35:81:60:ae:65:97:9d:94:
         41:3a:c0:45:68:bf:57:4e:53:a9:20:c7:c0:65:96:55:8c:6a:
         bc:c7:3f:0b:b5:52:a3:a4:9e:7d:ce:e1:00:0e:2c:0e:e5:c7:
         27:20:77:0d:f8:81:4a:14:00:81:9a:e8:21:c9:b1:cf:1f:b2:
         c5:c1:57:b7:e6:d8:e1:a6:2a:a3:10:6e:36:37:32:82:64:e1:
         b5:36:41:b6:d4:61:6e:a5:10:88:3e:2f:12:23:8a:2c:9b:25:
         0f:f1:72:32:03:41:6d:67:d1:e0:3a:fd:e5:4c:1e:e5:6d:2b:
         fa:b4:9c:05:c2:bf:92:9a:75:df:2f:b0:db:6f:9e:44:10:1e:
         fa:50:1c:c0:c8:af:3d:87:d1:f6:58:ba:b5:c6:bf:ee:b8:a5:
         2d:8c:17:99:13:8b:7b:2c:50:5a:0c:19:db:fa:01:40:fb:35:
         e6:d0:1d:f3:39:44:0d:01:b2:15:42:02:6b:1d:02:87:80:bb:
         2e:e3:fa:b7:93:74:b9:f0:9b:2d:27:97:35:06:8d:b4:d0:e8:
         18:2f:84:09:28:fe:e1:87:38:7e:35:bf:cc:29:b2:25:da:22:
         69:61:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org