Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          keLtKMS27J7LWtUNeKvnEbdLrsoAN0Z74f/RQluGkfk=
Subject key identifier:   86:A8:79:8F:51:D9:A0:BB:00:47:4E:97:C9:53:BB:09:A6:E2:72:70
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       150643ED96FD4AF9FB3CF8AD2B01C9AADB4EBE43
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:21 +0000
ROA not before:           Sat 30 Mar 2024 00:56:21 +0000
ROA not after:            Sat 29 Mar 2025 01:01:21 +0000
asID:                     262569
IP address blocks:        143.137.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:06:43:ed:96:fd:4a:f9:fb:3c:f8:ad:2b:01:c9:aa:db:4e:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:21 2024 GMT
            Not After : Mar 29 01:01:21 2025 GMT
        Subject: CN=86A8798F51D9A0BB00474E97C953BB09A6E27270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:7b:d4:d3:93:70:6b:14:41:cb:a9:7c:7f:
                    8f:06:59:4d:0f:37:42:97:2b:56:d3:19:00:fe:f2:
                    cb:9b:07:ba:6a:a6:1e:ad:94:49:d7:69:c1:29:82:
                    17:49:38:6f:d0:45:8e:84:1d:d3:23:1a:7a:dd:8f:
                    a6:38:a7:8c:1e:17:45:52:83:ea:7c:ad:08:9f:cc:
                    be:aa:32:b3:be:fb:55:cf:f9:db:5d:c5:e5:ef:51:
                    f4:d1:30:f0:6f:90:6c:d2:45:14:bf:91:28:49:71:
                    44:00:5f:2a:a1:6c:c5:15:08:0e:23:43:4d:64:c1:
                    6e:02:87:24:87:ea:90:40:d5:83:7b:39:ad:fa:15:
                    77:2b:ae:d5:9f:cc:23:de:3e:a8:6d:b3:2d:0c:a3:
                    f0:99:4c:75:01:30:e8:44:4e:2a:e9:a6:9d:b1:42:
                    15:a8:df:b5:ff:86:3f:4c:20:f0:52:b8:43:ed:ca:
                    e2:e0:80:ee:74:3f:61:f1:7c:6a:c6:4d:94:43:41:
                    7b:de:41:9c:4c:9e:e9:02:c4:7a:7e:be:c0:00:be:
                    bc:c6:93:54:57:0b:ea:22:89:b9:d7:55:b0:fc:ab:
                    1b:da:08:47:f6:f3:59:4d:fb:ff:7b:9f:3b:db:27:
                    56:79:56:22:e1:96:30:a2:50:20:b8:e7:c5:ae:d0:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A8:79:8F:51:D9:A0:BB:00:47:4E:97:C9:53:BB:09:A6:E2:72:70
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36312e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:96:26:5c:cb:9c:99:37:0b:ce:0e:45:7d:1f:86:e8:3b:
         9d:71:c1:04:9d:f3:27:0c:dd:65:d1:ae:a3:5c:a9:89:68:1b:
         82:09:7b:66:23:66:c1:af:aa:d6:ec:c7:73:9b:c1:a1:94:46:
         c6:7b:d6:f5:7f:70:f1:73:34:a4:01:cc:0b:63:a1:e1:cc:a9:
         ae:8a:27:dd:99:80:ba:0f:17:bd:a9:f6:ba:54:c3:15:ce:15:
         90:62:61:03:b9:b1:36:01:22:8f:37:30:03:f7:ad:3e:3b:24:
         03:5f:f9:59:68:f7:2b:7e:85:e7:69:97:6f:2c:b9:51:78:ce:
         fe:73:fe:9a:03:94:ee:29:3d:5c:94:1e:e1:d8:c2:e5:20:c2:
         ea:2d:7e:d0:36:93:94:31:93:82:e2:97:c9:85:85:fc:4b:41:
         27:ae:23:2b:87:32:06:5a:9e:9b:6d:dc:22:8d:e8:19:3c:1b:
         9a:b2:a8:fa:35:5b:13:4f:c7:44:3e:45:72:f6:4e:57:fe:ac:
         ad:7e:de:69:13:72:29:43:6b:31:17:4a:19:2e:df:fb:7c:e5:
         ce:8c:a3:cb:58:bd:6b:be:8b:38:36:98:01:a3:3e:54:0c:e6:
         b1:57:b9:e1:1a:39:47:7f:f6:b0:8e:85:57:9f:6a:5d:31:60:
         36:09:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org