Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3232203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32322d3232203d3e20323634303134.roa (raw, json)
Hash identifier:          inolWbvkeQX/wHJPNoblfqHfcr2nmkrrKm4k61I8yfw=
Subject key identifier:   33:B0:02:FE:0A:49:3F:61:81:C0:5C:A0:EC:AE:2E:E6:5B:CC:FA:24
Certificate issuer:       /CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
Certificate serial:       3A7B36E8D514523FA581E47537A3A995EBEA3879
Authority key identifier: 00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3232203d3e20323634303134.roa
Signing time:             Fri 08 Mar 2024 20:14:31 +0000
ROA not before:           Fri 08 Mar 2024 20:09:31 +0000
ROA not after:            Fri 07 Mar 2025 20:14:31 +0000
asID:                     264014
IP address blocks:        143.0.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:36:e8:d5:14:52:3f:a5:81:e4:75:37:a3:a9:95:eb:ea:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
        Validity
            Not Before: Mar  8 20:09:31 2024 GMT
            Not After : Mar  7 20:14:31 2025 GMT
        Subject: CN=33B002FE0A493F6181C05CA0ECAE2EE65BCCFA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:ee:56:11:f2:53:35:22:f5:a4:db:9b:13:
                    eb:45:33:5f:e3:dd:8e:be:ae:05:e3:44:ee:bb:e4:
                    d4:2e:e2:5b:10:d0:4b:81:9a:5b:d4:3d:3f:bf:7f:
                    02:18:d5:a8:d4:81:dc:56:51:88:74:8e:0f:28:06:
                    e2:c5:fc:50:4e:77:75:f3:42:5d:60:c1:5c:b1:01:
                    03:54:a7:f3:92:c4:89:d8:7c:7d:65:83:52:30:67:
                    0c:44:1d:04:c1:17:8c:f5:d7:73:3a:37:9f:e4:0a:
                    1f:9d:8f:18:fe:b3:21:af:75:9b:d9:7f:5b:48:c5:
                    1e:13:8b:0d:96:ee:bf:ab:b0:4a:a4:c3:93:87:a0:
                    53:94:32:b8:5e:e6:f7:ec:4b:52:9f:f7:cf:9e:91:
                    92:a4:d1:85:6e:49:78:06:4c:17:9b:a9:c7:96:1a:
                    f2:65:de:38:45:47:58:50:a2:f8:fe:9e:a7:91:b8:
                    04:36:e2:19:7e:46:39:93:53:d4:f9:1a:bd:03:ab:
                    29:d1:be:ec:52:3e:4d:8a:9e:3a:cd:2f:75:93:a1:
                    66:00:0b:70:1c:b7:d2:d6:fb:de:2d:10:c2:c3:4e:
                    b7:b4:7b:59:63:4a:2a:66:5a:af:36:ce:d1:6b:09:
                    f4:df:33:05:ce:bd:6b:e8:ad:b2:37:d7:ce:f3:0f:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:02:FE:0A:49:3F:61:81:C0:5C:A0:EC:AE:2E:E6:5B:CC:FA:24
            X509v3 Authority Key Identifier:
                keyid:00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3232203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:83:f3:39:e2:21:3c:74:e3:56:b7:5c:7b:0c:d6:9c:61:
         5a:0d:07:82:e4:8f:ce:f9:b7:8e:a0:bd:1f:e2:52:40:26:5a:
         d2:e4:92:8d:41:f1:22:a9:27:21:38:bf:c8:1c:9d:65:79:b9:
         40:2a:ab:0e:c6:c0:2c:dc:66:41:e8:5e:7c:d7:17:4d:dd:d9:
         ee:67:34:6b:df:b3:d3:4c:20:b2:58:bd:d2:fc:63:d1:e0:cf:
         67:74:ba:a5:9b:cb:ec:27:6a:23:14:61:2d:8f:6a:b7:c7:6e:
         0f:d2:e1:3d:b9:aa:31:5e:e5:8d:75:73:a1:0e:23:f8:70:63:
         2e:56:94:23:44:d6:19:73:df:55:7a:58:1d:f3:22:29:55:b4:
         4e:c9:41:46:38:ba:46:17:98:cc:4e:7e:0f:68:24:bd:fa:b3:
         93:70:00:3c:af:3a:92:b7:cb:d4:f9:03:14:f0:40:80:5e:99:
         11:dc:bd:79:d4:e4:7c:8a:e5:b9:50:c0:17:03:d4:6a:91:91:
         21:08:0e:27:31:01:2e:ef:11:75:cb:44:42:43:d3:08:f2:78:
         fe:68:39:06:ad:a9:fc:5e:3b:21:f7:15:d1:93:b8:2b:80:a7:
         61:60:59:75:9b:2d:ee:eb:e2:b8:a8:98:96:83:47:22:c1:48:
         83:1b:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org