Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3134332e302e32302e302f32322d3234203d3e20323633393835.roa
File:                     3134332e302e32302e302f32322d3234203d3e20323633393835.roa (raw, json)
Hash identifier:          GGuXG1pvj8sKUCZDwsrJn4QDtJFloElNuZQ5rziCpew=
Subject key identifier:   51:A2:5D:C7:04:5C:96:86:8C:6B:32:C8:01:04:9A:80:5D:82:DC:BF
Certificate issuer:       /CN=01695794268D7D9A025FD7E9DFE19E3F00AACA35
Certificate serial:       68B784DD67F8CB0401B637242F54664410647D29
Authority key identifier: 01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3134332e302e32302e302f32322d3234203d3e20323633393835.roa
Signing time:             Thu 04 Apr 2024 17:43:10 +0000
ROA not before:           Thu 04 Apr 2024 17:38:10 +0000
ROA not after:            Thu 03 Apr 2025 17:43:10 +0000
asID:                     263985
IP address blocks:        143.0.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b7:84:dd:67:f8:cb:04:01:b6:37:24:2f:54:66:44:10:64:7d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01695794268D7D9A025FD7E9DFE19E3F00AACA35
        Validity
            Not Before: Apr  4 17:38:10 2024 GMT
            Not After : Apr  3 17:43:10 2025 GMT
        Subject: CN=51A25DC7045C96868C6B32C801049A805D82DCBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:01:34:0f:d5:72:0d:ef:0d:b8:db:9f:2c:
                    be:1c:34:85:dd:22:0b:d7:d8:34:d5:59:19:65:39:
                    95:f7:d6:2d:b1:99:e8:45:bb:1d:fd:d7:eb:2d:e3:
                    55:59:d4:bd:16:06:1e:d2:d0:75:4a:09:44:bf:c1:
                    9e:59:a3:60:70:2e:36:64:c7:39:fe:b1:e5:ec:1d:
                    63:87:62:37:73:f4:ad:ad:f9:ce:3b:67:e5:3c:cb:
                    cd:58:e2:9a:b1:33:cc:32:a8:65:89:d3:fe:56:8e:
                    3f:a1:f3:06:80:7a:3f:e7:17:fb:a4:06:c6:80:a5:
                    a6:35:96:64:46:f2:8c:db:6d:08:dc:d1:0a:d1:9c:
                    8e:dd:5c:45:f2:9a:bf:97:1a:12:03:69:67:34:fb:
                    d2:3d:de:20:3d:3e:a9:e7:b0:9f:bf:58:f8:70:0e:
                    0d:79:3c:1d:4c:1f:8f:a7:e6:27:2d:ea:8d:31:f3:
                    2b:d0:f4:a9:21:ad:0d:46:21:d4:c1:5f:4f:c0:9e:
                    80:5c:a2:45:0e:71:c5:46:8e:15:e3:a9:a1:11:d9:
                    03:a6:0d:23:fd:5b:bd:ca:6c:e9:3c:b0:cd:13:4c:
                    72:dd:26:3b:a7:d3:a5:11:ee:bd:01:62:f9:63:d9:
                    0d:87:c2:a1:1a:1a:22:73:80:c8:71:bc:e3:dd:16:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:5D:C7:04:5C:96:86:8C:6B:32:C8:01:04:9A:80:5D:82:DC:BF
            X509v3 Authority Key Identifier:
                keyid:01:69:57:94:26:8D:7D:9A:02:5F:D7:E9:DF:E1:9E:3F:00:AA:CA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01695794268D7D9A025FD7E9DFE19E3F00AACA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JHY5xXCYj2jYgycV2kK46aAPisxk1fPJjyMKidmUyXv/1/3134332e302e32302e302f32322d3234203d3e20323633393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:bb:f0:cb:f4:82:3b:bf:b0:c4:c1:f6:ed:fd:76:13:65:
         85:26:7a:47:d2:3e:c7:65:1f:2b:1e:d1:44:bc:99:79:27:7f:
         6b:0d:e8:95:3f:03:8e:c9:2c:a4:fd:08:c4:12:6d:bc:e4:eb:
         86:8d:99:2a:85:32:ba:4b:a6:c7:a9:b7:ac:72:77:e4:02:64:
         db:54:1c:e9:2a:9b:58:d8:89:58:6f:eb:f2:98:23:b9:d7:e6:
         57:33:70:59:a8:03:60:35:5a:5a:d9:ae:dd:91:f2:92:4d:f2:
         99:68:8a:36:db:36:09:74:79:2b:c6:90:6e:25:a7:31:27:17:
         89:37:8b:c9:ba:48:4a:7f:d8:39:39:4c:87:a2:61:3c:a7:2e:
         ed:9a:09:43:45:30:84:25:55:0c:68:6c:d0:7c:4f:d6:c9:8e:
         f9:93:fc:38:c2:1a:88:e8:c5:cd:1b:1a:14:a6:6a:d1:b1:a9:
         6d:f9:d3:97:04:a1:13:22:42:bd:da:44:6c:f0:db:7f:8a:e3:
         1f:b3:6f:45:2b:9e:8b:85:b2:d8:2a:2f:59:25:91:f8:94:f6:
         8b:e9:ee:80:5f:eb:37:67:7d:6e:83:9a:30:ed:94:a2:e5:34:
         93:b6:b3:e6:ed:e9:1b:6e:03:1a:fb:a2:81:f1:38:43:63:57:
         76:b1:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org