Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e3134332e36342e302f31382d3234203d3e203134383430.roa
File:                     3230302e3134332e36342e302f31382d3234203d3e203134383430.roa (raw, json)
Hash identifier:          8jzKgrk7L+Ug3NLydZPYvI/NguVEYd6U9Sy0T+UCTls=
Subject key identifier:   5E:01:F4:F4:37:12:4F:04:DF:47:B6:67:34:27:4D:B8:1C:CA:26:F5
Certificate issuer:       /CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
Certificate serial:       295C66AE6A1BCB9E9D7AADF6540AFFB5EF6F33CF
Authority key identifier: E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e3134332e36342e302f31382d3234203d3e203134383430.roa
Signing time:             Thu 03 Nov 2022 21:46:33 +0000
ROA not before:           Thu 03 Nov 2022 21:41:33 +0000
ROA not after:            Thu 02 Nov 2023 21:46:33 +0000
asID:                     14840
IP address blocks:        200.143.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5c:66:ae:6a:1b:cb:9e:9d:7a:ad:f6:54:0a:ff:b5:ef:6f:33:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
        Validity
            Not Before: Nov  3 21:41:33 2022 GMT
            Not After : Nov  2 21:46:33 2023 GMT
        Subject: CN=5E01F4F437124F04DF47B66734274DB81CCA26F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:41:b6:7d:ca:2c:93:b7:cf:17:c5:b1:de:
                    c7:33:b8:45:a8:ae:d1:0a:41:f9:7f:07:cb:e0:16:
                    0e:cc:b7:32:27:4a:c8:01:9d:66:5d:ca:fc:56:7a:
                    b3:45:e0:bf:0e:a9:44:62:5a:8e:4d:0c:43:0b:48:
                    fb:a5:34:88:18:12:6d:ce:c2:c5:dc:4f:57:d8:fc:
                    30:43:15:5b:63:48:50:1b:0f:89:76:b2:ac:d0:21:
                    53:39:77:62:41:61:5a:a9:76:01:03:4a:44:8f:4e:
                    e4:89:1d:07:71:36:a8:6e:a3:d8:36:f8:3d:28:e2:
                    eb:ed:f8:be:d2:05:60:f4:af:b7:b3:95:dd:e9:44:
                    16:18:ed:34:2c:5e:a0:e9:ff:de:3e:58:12:81:00:
                    17:71:db:54:47:42:28:9d:a1:a5:79:4e:67:5a:91:
                    84:e2:72:f5:81:30:8b:f9:57:90:06:a0:b1:f3:7f:
                    ff:5a:d4:3b:b3:38:10:c9:40:b4:63:7a:99:ac:49:
                    ba:14:55:09:35:e5:23:63:bc:98:4e:43:2e:e2:ef:
                    ac:bc:c8:14:7f:98:ca:93:e8:27:8a:ff:df:d5:93:
                    38:42:bc:69:f0:48:0c:ee:77:53:23:07:54:aa:bc:
                    63:3e:bc:da:13:18:5b:99:e6:70:23:bd:9c:2d:b4:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:01:F4:F4:37:12:4F:04:DF:47:B6:67:34:27:4D:B8:1C:CA:26:F5
            X509v3 Authority Key Identifier:
                keyid:E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/3230302e3134332e36342e302f31382d3234203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:ef:c4:71:3f:ea:d3:b8:df:f1:6e:da:3a:78:7b:b8:db:47:
         2f:cb:7d:d0:c1:10:57:f5:25:92:25:a1:ba:17:77:9e:55:2b:
         65:1f:f1:00:21:92:f0:ae:55:1c:6e:24:4c:55:d8:6e:68:58:
         83:fc:93:30:45:d6:fa:1c:18:fb:b2:dd:2d:34:30:08:a8:1d:
         2f:e5:3d:4d:7d:10:26:f0:79:32:47:35:b7:d4:98:17:1d:44:
         e6:b3:c7:2b:bd:fc:02:fe:dc:65:b3:d7:b7:01:bb:52:53:c4:
         9e:7d:08:7a:d7:f5:7b:bc:cb:b4:30:c1:e3:ef:90:f7:c9:ca:
         85:42:ea:ad:a1:e4:f2:75:29:d5:5e:2b:a5:a0:77:58:bb:c6:
         ee:ed:72:9b:59:72:9d:94:a6:6c:32:38:55:5a:54:06:44:8c:
         b3:18:b0:1e:9c:b7:9a:76:fd:fc:8a:b1:14:78:3b:94:25:d1:
         6f:7d:90:97:6b:60:d7:61:16:28:c3:fa:dd:82:87:71:e8:a6:
         92:e7:36:98:50:ee:8c:dd:c5:bd:8b:3f:cb:cf:f1:d1:82:4d:
         03:5a:d7:ef:a2:00:62:c0:87:14:4a:04:a1:5f:d2:68:60:0f:
         dc:a5:b6:6b:cb:a4:ef:c4:aa:10:03:1a:7d:34:de:84:e2:a5:
         53:23:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org