Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
File:                     3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa (raw, json)
Hash identifier:          hml9JJUWup0O4xglZqWlUj7sRSIWT5NuBDUx4hSNxkQ=
Subject key identifier:   07:32:EF:6C:C0:A6:8C:00:21:AD:6F:77:C0:53:68:66:BE:F7:DF:96
Certificate issuer:       /CN=359EDF7F87A0A0443D3E04432527D623FF673D05
Certificate serial:       49AC18E9EBCDB13C166A2C909FCC3AB66C2029FE
Authority key identifier: 35:9E:DF:7F:87:A0:A0:44:3D:3E:04:43:25:27:D6:23:FF:67:3D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359EDF7F87A0A0443D3E04432527D623FF673D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
Signing time:             Wed 03 Apr 2024 19:06:52 +0000
ROA not before:           Wed 03 Apr 2024 19:01:52 +0000
ROA not after:            Wed 02 Apr 2025 19:06:52 +0000
asID:                     265161
IP address blocks:        143.255.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ac:18:e9:eb:cd:b1:3c:16:6a:2c:90:9f:cc:3a:b6:6c:20:29:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359EDF7F87A0A0443D3E04432527D623FF673D05
        Validity
            Not Before: Apr  3 19:01:52 2024 GMT
            Not After : Apr  2 19:06:52 2025 GMT
        Subject: CN=0732EF6CC0A68C0021AD6F77C0536866BEF7DF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:8c:04:5b:9d:38:bf:d8:59:f7:5e:c1:b3:
                    5c:37:db:1b:cc:dc:b6:bb:d8:09:db:91:7b:91:16:
                    a5:a4:89:10:12:f5:fb:ba:0a:0d:5f:5b:1a:79:45:
                    2d:8a:77:7f:ad:7b:85:09:75:41:36:4e:8b:34:55:
                    88:cf:06:0c:2f:f2:f4:49:79:3a:49:f5:22:70:1b:
                    f7:5f:6b:ac:ed:d1:f2:eb:de:7e:47:1e:32:31:0f:
                    dc:29:43:26:ae:a5:b1:52:a7:6b:00:cc:cf:ab:f8:
                    03:13:50:12:16:6b:c2:94:dc:88:d5:f9:ef:96:ba:
                    ce:66:c0:ab:9e:cd:cb:d3:79:48:dc:a0:5f:5a:fc:
                    c8:cf:ba:8e:63:2d:46:f3:6c:85:16:19:90:7f:b1:
                    60:61:5f:33:47:50:7a:5e:2e:43:42:b3:cd:43:9a:
                    b8:07:a2:d9:c3:75:10:95:61:cf:35:5d:f1:1c:de:
                    c5:ad:81:19:ac:e1:3f:7d:94:70:c4:f1:66:04:2c:
                    68:ab:ca:2f:20:12:b9:8f:2b:2f:f6:17:cb:71:5f:
                    7f:60:34:fa:4e:c1:dc:84:34:03:96:ee:f1:88:bc:
                    19:ed:e0:44:83:54:0c:9e:aa:05:4a:c7:12:ba:91:
                    f1:f9:4c:42:3c:21:69:f8:54:2f:7d:7e:07:1b:0f:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:EF:6C:C0:A6:8C:00:21:AD:6F:77:C0:53:68:66:BE:F7:DF:96
            X509v3 Authority Key Identifier:
                keyid:35:9E:DF:7F:87:A0:A0:44:3D:3E:04:43:25:27:D6:23:FF:67:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/359EDF7F87A0A0443D3E04432527D623FF673D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/359EDF7F87A0A0443D3E04432527D623FF673D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/1/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:31:ce:0c:bd:09:09:69:ca:9c:3a:d8:0d:8c:9d:25:c5:63:
         f9:25:06:43:7e:74:f7:c2:41:ad:7f:63:f2:29:7b:a4:46:3e:
         81:6e:6a:a9:fc:4d:0e:11:4a:d8:b3:f8:50:2d:0e:29:3c:c3:
         16:df:eb:71:8b:15:4a:fd:33:a3:37:83:0e:f9:c8:ca:f2:15:
         21:10:9b:0c:0d:e2:e0:98:ff:03:97:cd:8f:16:88:7c:97:7c:
         8b:70:64:bf:86:e3:0a:ad:0b:8e:2d:41:e1:af:6f:09:39:ba:
         9c:30:25:66:c5:7e:69:a2:24:20:d4:94:29:6a:d4:aa:59:be:
         f7:9f:16:4d:32:74:37:d2:e6:78:63:fa:3b:1f:6f:07:8b:2a:
         a8:1a:6f:5f:7e:8c:d4:28:8f:2e:ec:7c:a0:54:9a:be:06:a5:
         c4:14:bc:6b:3c:53:60:36:86:da:b6:9d:70:ab:ce:3e:69:f2:
         ef:55:32:2f:2b:f1:f1:b7:0e:e8:2c:50:b3:e1:7d:43:5b:52:
         2d:94:ba:21:d8:e1:5e:dd:0f:58:5e:1c:66:cb:d0:1b:77:1a:
         a8:9e:7b:b0:fe:a4:f6:8f:38:ca:8b:8b:24:be:2e:8e:a5:4c:
         e4:fc:3d:b0:bd:c6:bb:50:50:04:80:dc:f4:16:49:13:41:fd:
         8e:51:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org