Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3234203d3e20323632353639.roa
File:                     3134332e3133372e36302e302f32322d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          8aQQ8w7Mt+TBBT11i70bE4lLxoFFMUHP3NzHTo9ABic=
Subject key identifier:   37:A3:45:93:02:2D:9E:AF:9F:DE:4B:D4:91:7E:02:7E:09:A1:11:60
Certificate issuer:       /CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
Certificate serial:       2B0A420ABD13EC164DB9F3C734068F5205EC93DE
Authority key identifier: FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3234203d3e20323632353639.roa
Signing time:             Tue 30 Jan 2024 14:21:24 +0000
ROA not before:           Tue 30 Jan 2024 14:16:24 +0000
ROA not after:            Tue 28 Jan 2025 14:21:24 +0000
asID:                     262569
IP address blocks:        143.137.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0a:42:0a:bd:13:ec:16:4d:b9:f3:c7:34:06:8f:52:05:ec:93:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
        Validity
            Not Before: Jan 30 14:16:24 2024 GMT
            Not After : Jan 28 14:21:24 2025 GMT
        Subject: CN=37A34593022D9EAF9FDE4BD4917E027E09A11160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:b4:ea:03:d2:b2:21:cf:22:77:44:17:6f:
                    09:09:15:09:58:6b:ba:98:b7:e3:d1:c2:dd:a8:73:
                    ad:3b:b1:69:b5:39:7d:9b:12:3a:b2:d7:e5:ea:8b:
                    81:01:23:72:3e:a4:bd:21:fa:55:58:69:c3:a6:a1:
                    a2:8c:96:87:a1:f6:2f:ec:02:ff:55:2f:e4:a8:5b:
                    3c:7e:fa:0e:19:b7:f5:f4:60:ca:d7:ef:f4:d0:6d:
                    c3:39:dd:55:ff:23:fc:ec:dd:3c:62:a9:c1:83:89:
                    2d:fe:8c:60:f1:28:47:2a:9f:b3:74:bd:e4:28:1a:
                    0e:b3:b7:84:de:1b:51:3c:9d:6f:5b:23:1d:e2:02:
                    99:a7:00:76:f8:08:f9:9d:05:3c:83:63:20:09:34:
                    d0:47:15:e2:c9:74:f7:51:f2:aa:2c:c2:0d:47:14:
                    43:be:41:a7:80:fc:a3:dd:61:6e:d0:ab:81:1f:e2:
                    41:ad:f5:63:62:cf:45:36:7a:92:b0:81:4d:3d:6a:
                    dd:7d:48:7f:40:16:30:b7:0a:7c:d3:a8:dc:89:b2:
                    f2:b5:76:6a:a9:02:17:6a:e4:88:30:47:e5:a6:27:
                    02:46:2b:fe:ab:22:68:93:07:f4:6c:cd:59:80:f4:
                    2d:9c:39:07:6c:30:2a:68:91:b0:75:f1:cb:ea:73:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:45:93:02:2D:9E:AF:9F:DE:4B:D4:91:7E:02:7E:09:A1:11:60
            X509v3 Authority Key Identifier:
                keyid:FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32322d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:59:09:76:5d:0c:a3:06:92:b7:e7:fc:a6:56:8a:e8:cf:e0:
         fd:68:9e:a9:6b:22:61:3d:4b:8a:ed:6f:e9:87:84:06:1d:93:
         fd:d4:86:e4:b2:62:86:59:64:77:7d:d5:e2:e8:d3:52:28:b2:
         b0:a0:f0:57:6e:dc:b0:c3:ff:d2:9e:29:e9:40:db:d8:5b:c8:
         0e:4d:49:7c:4a:7a:59:53:70:e9:fd:28:75:f4:c1:21:1d:30:
         75:dd:89:52:fd:32:88:b1:de:40:df:12:3c:72:f4:6a:e8:50:
         88:cc:1c:10:4d:5b:39:c4:c8:88:8c:01:82:b8:5f:27:a4:b4:
         c9:95:67:c9:e2:02:b5:22:f3:8a:09:fa:a2:54:61:dc:2b:e8:
         1a:76:ae:93:46:0c:0c:3d:47:8e:66:59:a7:b2:7a:7b:8c:cd:
         05:cd:bf:f6:aa:2e:ad:89:df:4e:f7:a3:da:16:25:a3:34:92:
         ad:75:8c:d9:7c:f6:2c:6b:8d:eb:e4:6e:f5:d9:56:d9:ac:a2:
         66:c7:98:d6:23:2c:9b:dd:e9:4f:0f:e4:4d:cd:3e:72:7f:2e:
         cc:5c:72:fc:de:ec:0b:8c:29:38:4f:63:82:e7:e7:a9:31:96:
         16:c0:fb:50:15:81:66:20:02:d3:13:7e:c1:71:2b:f9:cd:1a:
         a9:76:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org