Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
File:                     3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          ooHVi3rsXqIGNlMjp0Bcta8zQqdp4aOdps69/OZ4Llg=
Subject key identifier:   12:11:00:C1:A8:54:AD:68:D7:72:36:BC:A6:AE:BE:99:11:F7:BB:24
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       7DA4A2370B3DDDF4BDAE9D2E4B4775F601FE0265
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:22 +0000
ROA not before:           Sat 30 Mar 2024 00:56:22 +0000
ROA not after:            Sat 29 Mar 2025 01:01:22 +0000
asID:                     262569
IP address blocks:        143.137.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a4:a2:37:0b:3d:dd:f4:bd:ae:9d:2e:4b:47:75:f6:01:fe:02:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:22 2024 GMT
            Not After : Mar 29 01:01:22 2025 GMT
        Subject: CN=121100C1A854AD68D77236BCA6AEBE9911F7BB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:41:62:48:f9:2f:2b:90:f3:64:30:4e:f0:
                    e0:8b:4e:a0:f5:6d:60:30:50:9b:0d:d8:d8:60:c2:
                    8e:7d:88:15:90:86:d0:42:e8:ca:56:b2:7f:0b:cc:
                    b4:0f:57:5b:43:b7:c5:0e:53:dd:e1:b8:37:48:2c:
                    df:19:75:44:41:f5:56:e9:db:14:ae:73:0e:ec:d7:
                    e5:09:6a:7e:37:3f:7d:5e:b5:d5:1d:35:5a:df:08:
                    bc:37:c1:3f:ac:b3:71:c5:59:24:b8:2c:87:e3:53:
                    5e:18:30:e6:59:66:25:79:ba:f8:cd:6a:1e:f9:b6:
                    75:4f:32:75:c9:46:a0:5d:d7:61:76:8c:b2:4b:20:
                    fb:cc:3f:ac:e8:71:03:c7:44:9f:40:e5:fc:f8:01:
                    b2:54:be:c2:c2:c6:b6:86:ec:1f:ef:46:d4:40:51:
                    e5:c5:27:18:1a:dd:88:34:15:78:d3:f5:cb:65:49:
                    7b:df:bd:05:16:17:c7:4a:c4:dc:fb:07:06:7b:44:
                    5a:3b:37:84:74:90:4f:bf:65:8d:6b:19:3f:bf:6f:
                    2e:5a:3c:76:c0:f3:38:a9:7c:f8:36:1e:7e:57:82:
                    99:73:e7:f4:3c:63:96:01:b7:bc:eb:c0:f3:4d:f9:
                    54:ba:99:cd:de:45:cb:0e:86:a7:f4:4e:0d:3f:a4:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:00:C1:A8:54:AD:68:D7:72:36:BC:A6:AE:BE:99:11:F7:BB:24
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:ac:cb:f7:5f:92:e4:7e:cf:6d:2b:32:de:ad:59:9a:fb:
         81:73:51:85:94:32:01:ba:87:de:84:0f:86:b2:d6:28:a7:25:
         d9:b0:8f:7a:f8:84:5f:d7:0b:d7:05:ba:87:9d:c9:75:16:ba:
         b4:df:4b:a8:30:b7:d3:23:e8:d3:80:42:8a:26:13:ac:56:c9:
         bd:7f:a9:63:e7:45:78:45:00:c7:d5:e1:5f:08:54:b2:02:71:
         5a:79:25:30:49:16:1b:64:88:37:3d:88:2e:8f:c1:5d:b0:1c:
         a0:fe:ce:6a:13:6b:0b:a8:a2:01:3b:f4:70:2c:62:6a:cf:54:
         64:fd:19:33:3a:2d:6d:88:00:3c:26:c1:b7:37:be:41:46:e0:
         c8:9d:22:04:f4:57:58:e1:9f:f2:3d:9d:ce:94:47:93:d2:44:
         32:57:18:13:92:f4:d4:d4:51:70:b6:ec:65:ee:2b:0f:2c:4e:
         2b:72:9f:fe:e0:ef:2f:11:ed:bc:7e:8d:71:fb:e3:08:e4:14:
         0c:cb:58:fe:66:b8:24:ee:7b:8e:31:d6:e2:72:6e:26:7b:2b:
         81:8c:ee:15:37:24:94:c2:53:e9:32:d8:1e:54:02:25:ba:9a:
         36:39:36:6c:bc:13:0c:2e:e1:c7:15:42:c6:7c:d7:72:81:60:
         f9:f4:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org