Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134362e302f32332d3234203d3e20323634303230.roa
File:                     3134332e302e3134362e302f32332d3234203d3e20323634303230.roa (raw, json)
Hash identifier:          8B3KINxxxGXinqxHvlrZrQKY1sCCK0878P2AJG80GI8=
Subject key identifier:   F3:0B:89:F4:77:55:6F:01:AE:18:75:FA:A9:97:1E:A0:66:DC:49:0E
Certificate issuer:       /CN=3E3293CF66479CC79346F97DCC606E532A1DA675
Certificate serial:       7662712F2A733163DE95A386AAFA67BAA0C507A2
Authority key identifier: 3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134362e302f32332d3234203d3e20323634303230.roa
Signing time:             Thu 06 Mar 2025 19:57:48 +0000
ROA not before:           Thu 06 Mar 2025 19:52:48 +0000
ROA not after:            Thu 05 Mar 2026 19:57:48 +0000
asID:                     264020
IP address blocks:        143.0.146.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:62:71:2f:2a:73:31:63:de:95:a3:86:aa:fa:67:ba:a0:c5:07:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3293CF66479CC79346F97DCC606E532A1DA675
        Validity
            Not Before: Mar  6 19:52:48 2025 GMT
            Not After : Mar  5 19:57:48 2026 GMT
        Subject: CN=F30B89F477556F01AE1875FAA9971EA066DC490E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:b1:b8:02:9e:87:72:da:d2:bf:34:7f:4b:
                    d6:eb:ef:f1:b6:bf:65:21:3e:48:e8:b4:3c:05:65:
                    04:e9:e7:e5:0d:f7:52:4c:e2:77:2a:83:6b:30:56:
                    4c:c0:da:87:f6:ca:4e:9e:2c:20:99:73:b9:a9:f4:
                    c8:d6:dc:8c:85:de:04:23:f9:99:3b:63:8e:4a:0b:
                    cb:ec:7e:63:f8:53:91:0c:3e:0c:69:af:24:1d:60:
                    c1:83:15:d4:e1:3b:46:72:58:c0:84:ff:80:e2:80:
                    49:af:4b:27:55:1f:1d:bd:86:1c:49:8a:f2:68:9f:
                    72:fd:30:dc:04:c6:14:6f:bb:5d:da:30:bb:2b:96:
                    82:f4:56:fa:da:ef:f0:4b:d8:95:fd:1e:7a:18:cf:
                    35:ae:d9:ca:f5:9e:19:47:d9:d5:53:49:28:eb:e4:
                    57:22:59:9e:b6:bd:d6:e3:a5:3a:fc:12:ec:f4:46:
                    d6:57:9e:63:0b:04:2e:d5:41:b6:93:b4:45:cd:a6:
                    cf:cb:b6:51:71:9c:e8:d5:be:dc:3c:47:eb:71:b5:
                    5f:9f:1f:f4:5d:26:39:e0:6b:a1:75:a3:22:08:8e:
                    fb:0e:4d:04:cd:8f:01:64:bd:a8:0d:e4:e2:16:92:
                    63:0b:f4:74:e1:f5:3c:6f:12:08:10:3c:84:96:aa:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:89:F4:77:55:6F:01:AE:18:75:FA:A9:97:1E:A0:66:DC:49:0E
            X509v3 Authority Key Identifier:
                keyid:3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134362e302f32332d3234203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:e9:cc:ec:6b:1c:17:09:b3:b4:8d:8d:e1:db:a9:ea:aa:
         95:35:86:16:be:dd:ac:d8:26:82:c8:b8:17:b0:1b:e4:ed:84:
         a5:8f:6e:16:49:7e:2b:45:86:c8:63:9e:32:e2:6d:ac:26:8a:
         0b:11:43:33:e7:6f:f3:58:35:7f:8b:3a:c1:6c:19:9b:50:cb:
         45:ec:b0:df:6b:50:ef:22:a5:43:e1:06:00:a1:ab:6b:d3:1c:
         48:e9:c1:e4:da:99:86:6e:7a:12:b5:38:0d:bd:06:ae:09:4a:
         ef:3d:98:6b:9c:27:45:05:6f:d3:3f:1e:f3:94:2a:77:57:28:
         84:2b:72:20:06:e8:60:3b:74:8a:b5:ec:f2:24:f6:6c:1f:b8:
         09:6e:16:e8:ba:ed:31:2c:8e:c8:f5:16:a8:f4:8f:f6:dd:60:
         4f:da:ee:5a:fe:4d:8d:82:a7:bc:9c:06:14:bb:87:19:2b:97:
         eb:b9:45:a3:e0:5e:a7:0f:62:9a:b6:92:b5:d6:d9:de:89:d6:
         98:4e:6b:7c:78:e0:df:c8:da:d1:5b:62:fc:be:0c:e9:b1:c0:
         1f:af:d0:14:4d:06:ef:1a:4f:98:f0:f1:f1:2e:f6:8a:b4:7c:
         3d:c9:7b:05:73:75:21:dd:03:da:0c:98:82:70:76:d5:a5:9b:
         61:e3:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:54:09 2025 by rpki-client