Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          RNuasEMNAjvR1TGWt/i97WjM3H5LnkCDiPHcxqFEjl4=
Subject key identifier:   43:B8:98:1E:FE:37:C6:10:A4:90:FA:A2:3D:6C:FD:6E:34:2B:09:D4
Certificate issuer:       /CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
Certificate serial:       5D73F44B939CD8966C5FEE5433E04983E7EC6B45
Authority key identifier: 2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
Signing time:             Mon 27 Nov 2023 12:07:07 +0000
ROA not before:           Mon 27 Nov 2023 12:02:07 +0000
ROA not after:            Mon 25 Nov 2024 12:07:07 +0000
asID:                     264014
IP address blocks:        143.0.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:73:f4:4b:93:9c:d8:96:6c:5f:ee:54:33:e0:49:83:e7:ec:6b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0C4065352FA29FE69D81683D46C7FAE700B8B0
        Validity
            Not Before: Nov 27 12:02:07 2023 GMT
            Not After : Nov 25 12:07:07 2024 GMT
        Subject: CN=43B8981EFE37C610A490FAA23D6CFD6E342B09D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:25:1e:3a:4b:62:c8:8e:1a:9c:02:37:b0:
                    40:4c:8f:e9:b1:e1:66:f8:4e:f3:b6:dc:3f:08:76:
                    93:ab:f9:ff:16:26:9b:dd:5b:0c:6e:17:9d:51:5d:
                    b7:b4:59:75:70:2f:18:21:1e:51:67:79:05:3f:e5:
                    20:8b:7f:42:a5:a3:3a:1f:49:51:14:bb:8c:0b:c1:
                    66:b2:1d:76:88:90:5e:da:21:e1:1b:d0:81:f2:c2:
                    39:20:a8:d5:e1:d0:10:a9:b3:cd:0c:89:fb:ca:ff:
                    2c:e5:54:29:1c:19:ad:1d:d4:da:dc:84:6f:fa:ee:
                    c5:e8:70:9c:95:dc:48:e9:ef:cf:a0:4f:53:13:57:
                    45:3b:0c:90:4a:52:b4:ef:e0:38:01:f1:62:6f:4e:
                    b2:74:31:15:29:62:09:63:c2:2c:d3:80:75:b1:1b:
                    40:c3:ef:b3:d5:6d:5a:c0:dd:a2:2f:85:2d:ba:fa:
                    d3:57:88:cc:59:f6:d2:55:4f:59:69:1e:fe:0f:68:
                    f8:2e:ae:be:43:50:4d:bc:97:5d:8b:05:6c:a3:e3:
                    ab:e8:50:af:4b:df:f4:e1:ed:d1:34:25:54:09:17:
                    33:23:86:92:22:a3:e8:96:dd:5b:a7:85:73:c3:7a:
                    db:47:cb:86:d8:b8:10:58:14:e3:ba:ad:9a:71:cf:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B8:98:1E:FE:37:C6:10:A4:90:FA:A2:3D:6C:FD:6E:34:2B:09:D4
            X509v3 Authority Key Identifier:
                keyid:2A:0C:40:65:35:2F:A2:9F:E6:9D:81:68:3D:46:C7:FA:E7:00:B8:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A0C4065352FA29FE69D81683D46C7FAE700B8B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:4b:2c:2c:3f:46:3b:62:83:48:6e:58:b0:fb:47:fa:17:
         c0:1c:b0:42:e4:13:86:47:b6:f8:78:64:f9:62:a2:a5:6d:3e:
         1b:af:f4:83:17:1e:bb:35:09:ae:d9:5b:f4:34:26:e9:f1:d7:
         86:b6:a9:4b:50:0a:b1:85:ab:c0:c1:a2:77:c3:6d:c6:77:59:
         1e:07:be:29:dc:12:58:51:43:45:1f:bd:da:af:54:fc:cb:47:
         f2:91:31:96:04:d2:0b:e6:27:f3:b1:6b:f3:b2:70:3e:fe:85:
         eb:e0:bb:ae:99:38:a7:79:a4:35:8b:bf:82:90:6e:62:1d:02:
         86:e5:e1:4b:aa:eb:f6:e4:26:98:c4:e5:28:6a:8f:a8:e2:4c:
         de:73:d7:f0:36:06:27:8e:1a:5b:0a:06:1a:78:f5:c5:97:47:
         b5:52:8b:89:a2:f2:58:99:8f:9e:fc:6b:fa:07:3f:3c:04:fc:
         5a:89:0a:81:44:6c:50:bd:6f:34:33:65:02:fd:ba:35:54:70:
         27:5f:1b:a4:03:1d:42:3a:9f:a8:79:60:92:58:79:fd:d6:cd:
         3f:5d:7e:63:56:c5:94:cb:3c:ce:0f:45:e9:bd:e1:38:94:c8:
         de:15:c7:06:c9:6f:a3:2d:7a:eb:18:b3:e4:54:ce:23:6b:24:
         d5:e0:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org