Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136352e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          6nyiIhoqkiSTSDOjOGpuEDx1fr6rUCodbxz7LVfWDXE=
Subject key identifier:   0B:B1:0C:A0:18:5B:B5:13:8D:45:45:37:DD:16:68:4D:96:68:D4:A6
Certificate issuer:       /CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
Certificate serial:       330C81C9E0C4EA673F6CAF87F64D8FDD1EBFE3AE
Authority key identifier: 00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa
Signing time:             Fri 08 Mar 2024 20:14:31 +0000
ROA not before:           Fri 08 Mar 2024 20:09:31 +0000
ROA not after:            Fri 07 Mar 2025 20:14:31 +0000
asID:                     264014
IP address blocks:        143.0.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0c:81:c9:e0:c4:ea:67:3f:6c:af:87:f6:4d:8f:dd:1e:bf:e3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
        Validity
            Not Before: Mar  8 20:09:31 2024 GMT
            Not After : Mar  7 20:14:31 2025 GMT
        Subject: CN=0BB10CA0185BB5138D454537DD16684D9668D4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:ad:aa:39:50:1b:ee:32:aa:35:c3:e8:cf:
                    da:84:1f:c6:1c:37:f0:d8:31:76:c0:70:a8:b5:12:
                    cf:ca:62:95:e5:17:d8:53:4e:08:67:f6:7d:09:3d:
                    7a:15:4e:08:11:fc:b9:27:b8:0a:22:2b:83:bb:a5:
                    8d:19:8f:a0:cd:06:8e:17:9f:a1:82:72:73:3d:43:
                    c8:12:56:83:5b:27:f1:b7:b9:fe:cc:51:a7:73:8e:
                    5b:4d:ff:f8:d2:8d:89:7a:20:4c:5a:ae:80:5e:e9:
                    ef:72:0f:b2:f0:68:34:16:bc:c9:c0:50:ab:0e:dc:
                    01:09:43:1f:e5:b1:dc:67:15:d5:dc:a8:6f:ad:85:
                    26:19:0a:95:b6:6d:de:8a:54:07:c6:d5:0e:f8:49:
                    b2:01:e0:7c:bd:ff:a7:b2:78:58:1f:7f:78:fe:62:
                    c3:76:da:bb:ce:39:e9:93:75:02:07:52:fa:2d:1f:
                    3a:17:fe:a7:8e:83:0e:f9:93:9b:84:12:8b:e1:c2:
                    96:01:da:6b:7c:e5:60:c4:08:fd:35:79:5c:3a:31:
                    80:b2:d5:c3:fe:0c:53:e9:25:e7:28:66:e2:19:99:
                    62:42:1c:63:d2:59:20:6f:39:55:cb:dc:09:ca:a7:
                    fe:8c:45:74:f7:32:7d:9b:eb:2b:31:17:b8:17:47:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B1:0C:A0:18:5B:B5:13:8D:45:45:37:DD:16:68:4D:96:68:D4:A6
            X509v3 Authority Key Identifier:
                keyid:00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136352e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:80:66:96:e9:bc:c4:59:3b:c9:7c:6e:02:77:00:96:d8:
         8c:db:11:86:9c:fa:f5:6d:b9:78:71:7e:25:e9:fa:de:2a:fa:
         9f:19:97:77:bf:c0:cc:89:b3:17:81:8a:40:3c:d8:21:16:b1:
         8c:9d:2a:44:e8:18:a7:c7:b7:32:0d:19:a0:2e:c8:4f:78:09:
         c4:92:92:a6:59:60:96:cd:9e:84:f9:43:2d:1a:9b:2f:09:10:
         93:a0:ba:0f:19:cd:03:3e:c1:52:48:c1:db:94:88:fd:16:bb:
         8b:08:1c:3e:25:ec:31:21:3b:75:af:c5:6e:91:f7:4e:d5:91:
         a4:e2:a0:d5:4a:b3:84:7a:01:50:86:40:bd:82:3c:04:8a:3b:
         66:ae:11:2f:85:77:19:f7:96:ae:cf:70:f2:c7:4c:1a:5d:ce:
         8b:0f:71:5d:60:6d:a5:94:e1:32:21:e1:5d:92:12:ca:25:09:
         e0:cd:03:1b:8b:7e:8b:25:01:0e:a0:31:af:3c:4b:95:83:64:
         c0:bd:7c:fd:cd:a6:54:71:e7:4c:48:e3:f1:9e:44:13:86:11:
         d4:d7:23:84:cf:31:a7:ca:ae:cf:67:6b:93:b3:c6:ba:e4:14:
         0b:e0:fa:c2:6b:33:ec:7c:70:28:23:ef:89:31:81:cb:85:9d:
         da:5d:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org