Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3232203d3e20323632353639.roa
File:                     3134332e3133372e36302e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier:          4A3cl9pK9HS4cD8+WkZu0X+X9spCp0l7fVoVoYSY9Hw=
Subject key identifier:   47:E5:C3:55:93:43:AB:02:55:69:90:44:2C:02:31:BB:F6:87:ED:5B
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       4B7539A4268F123FC5EFDC7DF97BF9B8C78CB596
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3232203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:22 +0000
ROA not before:           Sat 30 Mar 2024 00:56:22 +0000
ROA not after:            Sat 29 Mar 2025 01:01:22 +0000
asID:                     262569
IP address blocks:        143.137.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:39:a4:26:8f:12:3f:c5:ef:dc:7d:f9:7b:f9:b8:c7:8c:b5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:22 2024 GMT
            Not After : Mar 29 01:01:22 2025 GMT
        Subject: CN=47E5C3559343AB02556990442C0231BBF687ED5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:8b:82:69:a7:bc:f5:52:a5:8c:90:75:31:
                    cc:c2:51:cf:30:20:34:a2:89:dd:d1:db:9e:ed:eb:
                    89:de:c3:e4:a6:5d:7d:cf:e2:b9:0b:f8:89:3e:51:
                    34:e4:c6:87:f2:10:8b:92:e7:df:e3:95:86:1c:4e:
                    67:5e:10:5c:13:d5:fc:2a:66:8d:f0:c0:d5:15:67:
                    bf:43:cc:32:f3:48:dd:c3:72:18:11:00:bb:e8:d9:
                    48:ca:b9:09:85:5d:f5:b1:52:b8:ce:26:74:da:5c:
                    b8:12:28:81:f8:9d:b4:17:99:36:1c:71:dd:17:50:
                    70:cd:4f:d7:66:56:ff:9c:8f:0b:1c:5b:05:66:ca:
                    1a:21:7b:bc:ea:d0:46:76:db:90:a5:97:71:b3:ec:
                    3e:cc:ce:0a:4c:91:74:5b:3f:7e:44:8c:1f:65:9b:
                    f4:54:81:60:7c:b8:85:af:35:27:47:b2:75:f5:84:
                    4d:10:5a:a3:72:97:69:8e:2a:5c:0d:b3:5b:c8:bd:
                    45:4c:73:d3:9c:2a:b1:dc:d9:0f:06:a7:91:a3:a0:
                    64:8c:63:0a:56:3e:a7:21:29:dd:b5:2b:49:33:4b:
                    bd:e3:ed:b4:21:72:cf:1d:ea:c1:08:ac:af:90:32:
                    68:e5:9c:10:b9:dc:50:bf:79:87:b2:e2:28:a9:a7:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:C3:55:93:43:AB:02:55:69:90:44:2C:02:31:BB:F6:87:ED:5B
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3232203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:06:95:92:f8:dd:4a:ec:76:d6:23:66:9a:70:b7:12:75:
         c2:0a:d9:d8:23:47:da:8e:9b:90:f5:ae:86:1d:e4:63:d4:51:
         5d:5f:10:85:b4:14:2c:e4:4e:f5:cb:37:06:cf:17:0d:81:5e:
         68:43:6b:cc:a7:52:fc:7d:dd:df:6c:b7:6b:37:0c:58:0a:14:
         f7:9e:a9:ec:24:fa:fd:71:97:b9:36:c8:6c:e8:a7:86:05:04:
         6c:36:4b:ac:b6:59:9a:75:75:5b:aa:58:33:aa:41:ce:95:e0:
         ff:ef:b2:ff:55:34:f5:ae:4f:2c:40:3a:31:e0:de:68:5c:b4:
         9a:cb:97:f0:1a:65:9a:39:ab:bf:5b:5a:93:a4:6a:c5:08:2c:
         cb:89:38:09:99:23:51:6a:92:88:1a:ad:40:25:51:86:8e:ec:
         84:99:11:04:f4:33:e6:1f:d0:4f:15:c8:81:cb:c6:5a:43:fc:
         a4:c9:42:d8:84:fd:57:96:3f:58:46:4b:83:a7:cc:7e:18:75:
         83:2c:be:f7:3a:20:ad:63:fc:b5:61:d6:e9:2a:19:5a:3c:60:
         af:93:1d:df:7e:96:40:f7:c1:b2:35:9c:78:97:7f:a5:dc:e0:
         26:f7:46:a4:19:1c:a8:bf:76:a4:c8:ca:16:2f:6d:ae:f5:58:
         48:4d:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org