Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32332d3233203d3e20323635313532.roa
File:                     3134332e3235352e3133322e302f32332d3233203d3e20323635313532.roa (raw, json)
Hash identifier:          7nM47Viq3H0pv9Qlt/yorw3cJA8piARy9on/giUF6dA=
Subject key identifier:   D7:BA:CA:9E:46:3F:67:13:61:04:07:A4:FE:18:BB:75:41:A6:81:3B
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       35D22D7AE2B0544511AB6FB98FC6960868DBB413
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32332d3233203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:34 +0000
ROA not before:           Fri 17 Nov 2023 14:33:34 +0000
ROA not after:            Fri 15 Nov 2024 14:38:34 +0000
asID:                     265152
IP address blocks:        143.255.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d2:2d:7a:e2:b0:54:45:11:ab:6f:b9:8f:c6:96:08:68:db:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:34 2023 GMT
            Not After : Nov 15 14:38:34 2024 GMT
        Subject: CN=D7BACA9E463F6713610407A4FE18BB7541A6813B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:44:84:81:9c:73:e9:bb:f2:5d:ad:a0:17:
                    96:e6:08:f8:78:24:fc:14:87:6b:f3:ed:60:38:a3:
                    30:67:c5:c6:55:dc:b5:57:31:be:e1:3e:2f:ed:c3:
                    aa:8a:81:6f:23:10:64:88:fd:34:ee:31:91:ff:0d:
                    60:7e:b6:9b:ce:e4:4b:8d:e9:99:55:b2:c5:96:5d:
                    ff:d6:19:51:ce:6e:e6:80:8a:22:0b:e4:37:04:74:
                    69:90:07:61:e7:1a:bb:3f:29:6d:5b:a1:79:1b:e6:
                    e0:71:00:99:ac:bb:ad:03:76:e4:e1:60:7b:d9:40:
                    f1:a7:d2:42:7a:a6:1a:4b:6b:4b:c0:6f:69:a8:a2:
                    77:cb:14:cd:d5:4a:e0:8b:63:42:65:02:6a:c0:e9:
                    40:c2:ee:01:04:a0:87:50:7c:ee:a7:a6:eb:e8:74:
                    b7:4e:8e:61:91:24:3b:e3:82:5a:0f:d9:8d:f2:53:
                    a7:7b:f5:88:54:bd:0f:4f:47:05:c7:38:51:41:ea:
                    fb:90:9a:28:4e:74:f9:62:0f:28:ff:63:1b:89:66:
                    e7:f1:6c:5d:5d:d4:06:da:09:a0:2e:e6:f4:f3:36:
                    76:6f:f7:9f:96:e4:fb:98:2f:24:02:9c:ae:e8:6e:
                    c5:8e:7b:19:9f:1a:e5:5c:2a:50:17:9d:2e:53:e9:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BA:CA:9E:46:3F:67:13:61:04:07:A4:FE:18:BB:75:41:A6:81:3B
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133322e302f32332d3233203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:16:0f:d8:7d:72:1e:ec:4b:ba:ed:cd:dc:1d:f1:14:03:fa:
         b3:aa:d5:c3:00:1b:28:d4:00:6c:b4:49:01:b8:0d:1b:84:b9:
         57:c5:a9:ce:02:dd:df:fb:12:5f:96:e1:bd:bb:ed:5a:4e:ec:
         01:62:7f:a4:18:72:d7:4c:ed:b7:26:d7:57:01:b0:cc:41:9e:
         ca:c9:f2:fe:4b:a3:41:d7:c7:87:88:44:01:11:b3:66:e1:fe:
         cc:e3:c0:9d:21:e8:9d:73:ef:c6:11:71:a2:35:95:8f:2a:2d:
         36:b2:a9:d0:6d:25:40:95:6b:67:13:10:f1:db:5d:a4:81:41:
         60:24:4c:58:f4:ff:e6:30:9d:ae:9d:0d:1a:d1:6c:e8:31:a6:
         ce:a4:15:e3:77:87:df:20:a4:af:a7:e3:22:15:5c:b4:ab:67:
         fc:51:9e:9c:f1:49:66:a3:06:0e:d1:33:1d:93:17:0f:57:13:
         c9:45:17:f0:a5:b1:b9:9e:5d:80:73:fc:24:30:22:f5:fe:0b:
         8f:3b:14:db:1b:7e:ae:a6:8d:27:6d:40:d6:3a:f2:a5:8e:5f:
         f5:1b:df:93:a0:7f:2c:33:6d:98:6b:fc:82:1a:5c:ab:91:af:
         75:80:5f:61:8b:44:fe:53:ed:af:f9:8d:08:88:8e:65:a5:54:
         5b:22:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org