Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32342d3234203d3e20323635313532.roa
File:                     3134332e3235352e3133342e302f32342d3234203d3e20323635313532.roa (raw, json)
Hash identifier:          NksQC3N44lX57Ljkl0y9PGrwirTEmxoqu8fnibz4/1I=
Subject key identifier:   4A:F8:48:39:CC:E6:58:E1:DE:2B:44:57:28:1A:A1:A1:75:DE:12:DC
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       39E524C2C7B906DDE3277891DD32853D5015065A
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32342d3234203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:44 +0000
ROA not before:           Fri 17 Nov 2023 14:33:44 +0000
ROA not after:            Fri 15 Nov 2024 14:38:44 +0000
asID:                     265152
IP address blocks:        143.255.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:24:c2:c7:b9:06:dd:e3:27:78:91:dd:32:85:3d:50:15:06:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:44 2023 GMT
            Not After : Nov 15 14:38:44 2024 GMT
        Subject: CN=4AF84839CCE658E1DE2B4457281AA1A175DE12DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:e2:b0:65:10:81:c8:11:89:df:b7:f8:9c:
                    9a:0d:d2:39:22:4b:22:88:66:f6:31:17:1b:94:b8:
                    9a:87:4a:32:7e:97:dd:65:d3:fb:ce:df:cb:9f:d8:
                    c9:a9:58:93:f1:3c:7c:24:49:cf:81:99:71:94:e1:
                    ad:2d:a0:0d:7d:84:69:2b:0b:2c:d2:46:21:87:46:
                    24:50:f3:a4:8e:10:8d:30:a7:de:9a:54:82:24:65:
                    06:60:80:2b:87:5c:a1:d3:8a:13:8c:ca:c5:06:ae:
                    3f:bc:9c:59:71:f6:b8:8a:a3:45:b3:7e:d8:c2:0c:
                    9e:7f:68:14:9d:b3:7e:5f:cb:67:c0:1a:29:bb:8c:
                    c3:b5:66:c4:12:cb:e9:82:0b:56:80:ce:6f:ad:d4:
                    81:1b:54:d9:8f:56:52:83:18:e0:96:0f:47:62:2b:
                    1e:bc:2f:9b:1f:b8:a3:4f:75:09:67:53:89:46:4e:
                    1e:1d:0e:96:21:18:75:1f:0f:e7:06:ec:ec:bb:34:
                    a1:a0:28:40:f4:fd:ab:be:da:ec:85:3c:ed:e6:26:
                    53:16:76:05:13:2d:55:5a:9c:ee:e0:02:d6:04:69:
                    b9:a2:ef:7b:cf:a0:c3:72:74:5e:25:3c:52:ab:f9:
                    f6:03:ab:6d:f1:cd:f9:57:1d:9d:71:26:98:17:48:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:48:39:CC:E6:58:E1:DE:2B:44:57:28:1A:A1:A1:75:DE:12:DC
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133342e302f32342d3234203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:45:3d:77:3c:5c:48:ec:cf:99:59:2b:7d:1e:3b:99:c9:
         14:4c:b0:25:7e:24:bd:5f:3d:40:55:f0:29:c5:85:f6:d5:d9:
         33:75:19:a3:f8:19:04:18:99:c8:f7:9a:6f:c3:a8:8a:2c:38:
         a6:11:b7:bc:3d:73:50:ee:47:91:be:c8:63:d2:3f:84:05:a7:
         a9:25:35:b3:6b:ff:37:56:db:5a:74:a6:15:89:54:23:5a:de:
         ab:10:cb:a4:db:7c:7a:81:3d:52:60:80:8e:dd:bf:2a:53:93:
         3b:ca:b7:c2:16:ed:9e:0a:e1:0e:67:21:ce:f0:dd:d3:91:a0:
         1a:58:9a:75:5a:60:6a:b1:66:ab:98:52:16:c4:e7:18:ef:ce:
         9b:50:8d:29:70:f0:85:a7:7b:ca:a1:66:0a:40:23:98:c4:68:
         48:34:24:c5:9b:5d:c2:e4:7f:ff:77:dc:58:f6:a7:ce:bc:8c:
         90:b8:91:df:3a:8d:3d:93:83:3c:30:cd:dc:02:27:94:c3:b8:
         d3:e5:6c:e5:1a:fd:dc:c5:8e:4f:c1:28:dd:fa:3b:74:fb:27:
         b8:c1:32:11:28:e4:2c:74:d2:1b:7b:d6:d8:63:d1:a9:73:43:
         57:f1:8c:d8:7c:37:53:1c:bb:ff:38:ad:cb:1a:29:8a:de:e7:
         01:ce:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org