Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133332e302f32342d3234203d3e20323635313532.roa
File:                     3134332e3235352e3133332e302f32342d3234203d3e20323635313532.roa (raw, json)
Hash identifier:          BXFj21vcb9961klNJBjvTwJMpXbsH8nFW5i+GVGi5n8=
Subject key identifier:   D9:42:40:80:4F:B4:C3:2F:D6:15:07:49:6D:18:49:99:68:A2:24:25
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       0B1F54AEB250AFA60E9F7D209C640FB5D4E71A96
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133332e302f32342d3234203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:39 +0000
ROA not before:           Fri 17 Nov 2023 14:33:39 +0000
ROA not after:            Fri 15 Nov 2024 14:38:39 +0000
asID:                     265152
IP address blocks:        143.255.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:54:ae:b2:50:af:a6:0e:9f:7d:20:9c:64:0f:b5:d4:e7:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:39 2023 GMT
            Not After : Nov 15 14:38:39 2024 GMT
        Subject: CN=D94240804FB4C32FD61507496D18499968A22425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:60:5a:a9:89:53:3c:1c:e8:c1:3c:21:7e:
                    fb:73:b3:9b:92:2d:07:e6:d7:62:9f:14:5e:8d:86:
                    56:cc:6c:dd:c6:70:26:23:bb:63:13:70:b6:c1:d7:
                    15:21:47:6f:32:3a:8e:ee:a2:93:e7:44:5f:61:96:
                    85:00:7d:a1:8d:de:8b:44:b0:bc:ca:50:da:06:c2:
                    2a:f6:7b:08:66:8d:be:d2:0d:eb:3b:aa:db:07:8b:
                    6d:90:41:34:29:b7:f3:11:12:3b:32:ad:47:79:1c:
                    17:c7:b7:dc:53:9c:25:2b:76:c6:f2:06:f7:c2:8e:
                    12:2c:d5:e2:77:a5:19:b4:ba:ea:af:e7:7a:5f:be:
                    e6:d9:49:af:e1:a7:92:fc:0f:a4:14:1a:02:d8:3f:
                    cf:e3:22:69:c3:d4:83:51:49:b2:90:b4:33:15:1b:
                    17:4a:95:43:d4:be:d7:7e:42:12:fd:a9:84:71:c5:
                    77:f4:44:e1:73:55:34:53:11:0a:68:a2:ae:1d:36:
                    43:08:6d:70:fb:79:94:2c:19:ff:8c:f3:0e:39:22:
                    ab:20:db:fa:de:98:0e:8a:be:09:5b:a1:e1:e0:59:
                    90:d1:0f:73:d5:7a:25:57:cb:3c:51:94:bd:bc:f0:
                    2c:43:9f:c4:30:36:d9:22:1b:5d:70:a2:22:42:b7:
                    2a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:42:40:80:4F:B4:C3:2F:D6:15:07:49:6D:18:49:99:68:A2:24:25
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133332e302f32342d3234203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:8f:24:be:70:79:18:74:28:68:6f:f6:67:b6:15:a3:ea:
         32:25:3a:17:c8:b0:8f:96:0c:e4:7e:3a:9b:6f:ce:e5:22:cc:
         0d:9c:3f:5a:4e:2f:ea:e9:a6:d4:58:ae:c0:3e:4f:f1:bd:d4:
         e0:88:f7:5e:c3:5f:34:d1:83:6f:05:13:6e:e5:a2:73:db:5f:
         f1:f5:a5:f5:bb:5b:10:66:f4:26:22:de:93:9a:1a:50:a4:f2:
         e8:60:8a:57:af:c8:d6:97:4f:06:53:65:f0:88:93:0a:2b:52:
         ce:cd:8e:37:df:61:44:cc:4b:66:4a:9c:5b:a9:e1:40:fc:2a:
         2e:5b:58:fe:d8:be:ce:78:9c:43:b0:3e:1b:9a:f9:07:43:fa:
         7c:cc:9c:27:f6:de:dd:1a:4b:07:1a:8c:65:15:29:c4:da:bf:
         13:d3:42:d2:1a:7d:b7:e6:1b:2b:01:7b:3d:c9:d1:96:f3:27:
         51:ed:47:52:c4:9a:e4:19:57:3e:99:df:75:d2:5e:28:aa:8c:
         e6:cb:b8:af:3e:b7:06:89:03:d4:cd:ea:7b:06:bf:0b:f9:b3:
         db:cb:74:70:13:63:66:49:b6:ca:e2:36:9f:82:06:ef:e1:91:
         6e:05:fb:4e:14:39:33:9a:59:e9:37:80:47:9b:26:4b:6a:cf:
         04:0a:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org