Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133352e302f32342d3234203d3e20323635313532.roa
File:                     3134332e3235352e3133352e302f32342d3234203d3e20323635313532.roa (raw, json)
Hash identifier:          AJNNnPg6DPXeJHbuzYlDaKdvmc/JhodyvbRU8hkGTF4=
Subject key identifier:   AB:0C:6E:22:6E:C7:BE:F0:67:7F:5E:DE:CF:A9:C7:74:CB:1B:62:2F
Certificate issuer:       /CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
Certificate serial:       6FDCB0B325AC76953F7FB45B6B6C24D79AB8ED04
Authority key identifier: DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133352e302f32342d3234203d3e20323635313532.roa
Signing time:             Fri 17 Nov 2023 14:38:46 +0000
ROA not before:           Fri 17 Nov 2023 14:33:46 +0000
ROA not after:            Fri 15 Nov 2024 14:38:46 +0000
asID:                     265152
IP address blocks:        143.255.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:b0:b3:25:ac:76:95:3f:7f:b4:5b:6b:6c:24:d7:9a:b8:ed:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2
        Validity
            Not Before: Nov 17 14:33:46 2023 GMT
            Not After : Nov 15 14:38:46 2024 GMT
        Subject: CN=AB0C6E226EC7BEF0677F5EDECFA9C774CB1B622F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:ca:bc:1e:62:6b:4f:89:a7:11:b2:13:82:
                    69:59:a1:84:20:da:b5:f2:f3:49:77:f0:6a:d4:c5:
                    f1:41:74:de:ed:4e:15:a0:40:5d:a2:cf:73:86:88:
                    12:42:6f:83:fe:f0:6b:98:ee:1e:e6:0a:26:7d:5b:
                    85:d0:9b:4a:a2:5a:56:9f:da:9f:e5:6c:df:89:54:
                    96:cc:c3:30:d6:c9:5d:1d:76:df:54:f0:35:ef:ae:
                    51:39:83:72:b5:05:50:de:05:5d:2e:94:b9:ce:3a:
                    f5:bc:85:21:0d:52:bf:0f:f7:6d:d3:1a:0a:d8:c9:
                    57:c9:f6:22:00:2b:02:74:64:27:ef:b0:9c:58:4d:
                    64:79:d8:52:11:c8:34:e3:5d:db:16:d5:d8:a0:00:
                    25:9b:7d:5c:25:40:ab:35:32:32:fa:56:f5:f5:dc:
                    5e:81:db:b7:66:f5:be:38:06:62:ba:03:67:dd:40:
                    34:20:80:83:6b:88:7d:30:3d:33:67:58:13:1d:11:
                    da:29:68:a5:59:b2:46:1c:55:02:cf:4c:04:d5:30:
                    5f:6e:17:14:7f:f1:92:c4:e2:54:a1:44:a0:52:46:
                    77:5d:22:2c:dd:11:b7:98:d3:b0:89:97:60:e3:65:
                    ac:7f:06:e2:ed:98:d4:48:5b:ef:59:29:fc:f1:9d:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:6E:22:6E:C7:BE:F0:67:7F:5E:DE:CF:A9:C7:74:CB:1B:62:2F
            X509v3 Authority Key Identifier:
                keyid:DF:CE:A7:84:5D:3D:1B:60:E4:EA:F8:1E:99:CD:D9:FF:1D:76:55:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFCEA7845D3D1B60E4EAF81E99CDD9FF1D7655E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/3134332e3235352e3133352e302f32342d3234203d3e20323635313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b8:28:1a:4f:7f:eb:3b:30:6e:7d:b5:98:08:70:00:8d:a3:
         03:ba:5f:8f:41:47:68:fb:3e:62:45:f9:17:f6:4b:76:32:d5:
         fc:5e:c4:d9:58:e0:63:a0:6e:e5:78:f4:32:bd:41:54:f2:ef:
         17:08:9a:cf:89:7e:0d:be:a5:20:af:98:4c:f3:6d:71:ed:a3:
         cf:73:80:a7:b3:01:ba:b2:d4:90:d1:f6:4d:fa:fa:24:ef:05:
         90:0b:64:ea:0e:55:dc:6a:23:62:52:c3:eb:f8:7c:32:8d:82:
         96:aa:c8:3f:0c:ea:c4:9f:b6:bc:1a:13:da:48:72:c6:38:b9:
         cd:3d:2f:b0:d2:37:8d:a6:e3:b2:8c:39:20:e2:2a:c5:fe:22:
         3c:48:52:ec:fb:5d:f0:20:7d:bf:b2:f2:62:98:8e:d5:fd:71:
         8d:f2:67:49:31:e2:a7:35:5f:9c:5e:fb:33:4f:b3:b1:ba:31:
         1d:27:12:7e:0e:fd:29:6b:92:f0:0d:db:4b:b6:c3:70:3a:8d:
         5c:c0:17:d1:56:23:6b:f2:87:41:24:43:4b:17:ce:30:4b:e5:
         af:bb:5b:c1:ef:8e:31:55:55:74:d3:71:6e:2c:69:9f:f8:b6:
         00:30:c6:d4:32:3e:41:d9:af:51:b9:0c:a8:f4:62:ab:59:33:
         74:fc:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:23 2024 by rpki-client on console-ams.rpki-client.org