Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136362e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          3J4WQDp9udfgbRXueoesxDoHbPn/aOEWwOBCzj43Hqk=
Subject key identifier:   A1:46:FA:A4:D5:41:E6:AA:88:58:A9:9C:46:90:52:B3:F5:12:A7:70
Certificate issuer:       /CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
Certificate serial:       41A63CD9DF587360B18D0EA3916B462F5BCC609D
Authority key identifier: 00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
Signing time:             Fri 08 Mar 2024 20:14:31 +0000
ROA not before:           Fri 08 Mar 2024 20:09:31 +0000
ROA not after:            Fri 07 Mar 2025 20:14:31 +0000
asID:                     264014
IP address blocks:        143.0.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a6:3c:d9:df:58:73:60:b1:8d:0e:a3:91:6b:46:2f:5b:cc:60:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FA2D01D8B63D0877FDEA947F6CAA98B3346C08
        Validity
            Not Before: Mar  8 20:09:31 2024 GMT
            Not After : Mar  7 20:14:31 2025 GMT
        Subject: CN=A146FAA4D541E6AA8858A99C469052B3F512A770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:5c:cd:94:9d:ce:70:f7:2c:a2:54:41:22:
                    bb:10:19:d1:6b:5a:09:bd:85:70:a5:77:83:6a:42:
                    0e:7d:b9:be:32:51:67:44:6a:a6:84:38:66:4d:8a:
                    2d:e7:f4:3f:7f:ec:83:3a:d8:59:3e:80:78:ad:01:
                    02:50:00:6a:93:89:ea:23:64:4d:90:7e:f1:98:93:
                    7f:8a:05:96:fa:2d:26:04:45:30:52:5e:ad:a2:a7:
                    3f:4c:63:99:2c:8c:92:d4:05:1e:0b:45:8c:20:56:
                    3d:80:00:68:a3:3f:b7:80:2a:9c:e0:79:fc:e9:64:
                    ae:01:ba:4d:73:03:4b:02:6c:75:c4:d4:84:e4:08:
                    9b:0e:42:c6:7f:a6:cf:b3:81:2b:78:90:4a:86:ab:
                    54:6d:18:c8:f7:58:b9:9d:58:7e:66:04:75:8a:a8:
                    15:7f:16:6b:75:0d:a7:08:a1:da:fe:25:df:e0:9c:
                    d4:eb:63:ac:ac:07:a6:c1:a2:13:45:cd:b0:9b:59:
                    f1:fc:e0:24:cd:e4:1f:d3:e3:42:03:49:71:b4:a7:
                    ef:03:e3:bb:2b:bc:fd:6f:08:4a:9f:66:90:7d:71:
                    c6:74:08:a2:0e:58:84:a5:21:b4:50:96:06:31:4c:
                    46:93:85:d4:df:d9:d9:a6:5c:12:7c:3c:9d:7d:28:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:46:FA:A4:D5:41:E6:AA:88:58:A9:9C:46:90:52:B3:F5:12:A7:70
            X509v3 Authority Key Identifier:
                keyid:00:FA:2D:01:D8:B6:3D:08:77:FD:EA:94:7F:6C:AA:98:B3:34:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FA2D01D8B63D0877FDEA947F6CAA98B3346C08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6a:d0:8a:9b:10:58:27:78:f1:a3:6c:1f:6d:f3:11:8d:c9:
         fa:ae:32:8b:4d:da:e2:5d:4c:60:39:33:a9:ae:25:86:28:90:
         df:77:cc:3b:e1:4e:a7:c0:f4:93:44:32:ad:16:dd:5d:b1:79:
         ad:ba:11:ad:f9:26:93:6a:5b:26:eb:55:bd:76:5f:6e:0c:34:
         74:c2:75:97:67:11:45:87:43:4b:40:c0:3e:9c:49:89:bb:43:
         de:ed:90:67:ee:58:9f:c0:bc:44:c2:55:2b:58:82:40:28:f0:
         56:28:00:a0:d9:36:e7:62:0d:3e:19:2a:0c:9a:f7:ba:9e:ea:
         4c:0d:ea:e0:15:0a:fe:44:0b:23:a0:8a:36:6b:e4:09:f2:a6:
         d4:ac:e6:b4:66:af:93:c8:36:08:2e:15:10:a7:20:12:9c:50:
         e7:fe:6c:bd:d5:64:70:23:30:89:ed:43:23:57:21:30:4f:b7:
         9e:ed:94:85:3b:6c:6d:8a:4a:7c:34:30:0a:27:56:e2:50:cd:
         88:7e:66:68:43:87:34:0d:27:c4:40:ea:e1:bc:cf:ed:78:44:
         a2:ee:19:b7:97:6f:10:94:c8:66:17:a0:9d:88:1c:54:04:6e:
         6e:e5:8d:78:8a:9e:34:fc:57:7b:0d:46:05:ff:69:38:4f:83:
         a3:ad:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org