Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa
File:                     3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          Ion3qlTveKFhHbqjqe8IVjk5WECPe7rMfoUp3sqaGUo=
Subject key identifier:   04:04:51:8C:38:52:21:D5:41:7B:D5:8E:EA:B9:77:70:3A:AF:46:90
Certificate issuer:       /CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
Certificate serial:       193BCF2B5CB91A232D425E69B660EBCF40ED2327
Authority key identifier: 46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa
Signing time:             Sat 30 Mar 2024 01:01:20 +0000
ROA not before:           Sat 30 Mar 2024 00:56:20 +0000
ROA not after:            Sat 29 Mar 2025 01:01:20 +0000
asID:                     262569
IP address blocks:        143.137.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3b:cf:2b:5c:b9:1a:23:2d:42:5e:69:b6:60:eb:cf:40:ed:23:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460CB57D1E492A566A0C319A02E5BE5DC2CACFBF
        Validity
            Not Before: Mar 30 00:56:20 2024 GMT
            Not After : Mar 29 01:01:20 2025 GMT
        Subject: CN=0404518C385221D5417BD58EEAB977703AAF4690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:a5:40:a0:ac:e7:51:de:54:c6:e7:67:55:
                    e5:1b:c8:21:65:16:2d:80:6b:5a:cb:1e:37:a5:e5:
                    ed:af:4f:cd:8b:02:ab:7a:9a:4b:04:fd:4c:c0:bf:
                    44:6c:1f:75:dd:f4:14:8d:09:da:6f:56:e6:fd:c9:
                    75:c0:53:aa:2a:34:1a:6d:a0:a6:05:c3:f1:5b:06:
                    c5:62:c1:44:d7:2d:09:e4:9d:ea:6b:66:76:71:fa:
                    6d:14:f2:4f:46:76:0d:d2:9d:d5:40:8a:c4:e0:97:
                    99:1b:54:ac:f9:31:35:0e:11:9f:1c:cc:38:aa:1c:
                    0e:a7:7e:0e:a9:38:65:90:c8:09:ae:b1:8e:3a:74:
                    60:82:24:40:32:2f:c3:cb:c4:ad:07:8c:88:05:3c:
                    35:49:2a:cb:11:a6:78:31:37:27:79:41:d4:7a:c7:
                    c4:dd:67:05:d3:a0:a5:1a:c8:63:e8:30:55:9d:58:
                    c7:50:6e:39:8f:da:d3:5d:16:0e:ab:12:af:99:f4:
                    24:00:62:9c:33:a2:5b:25:d2:b2:e6:44:3a:db:e8:
                    3e:19:3d:75:de:5c:13:19:b4:88:a6:0c:2a:9b:10:
                    5c:92:b9:aa:fc:19:0b:95:78:55:86:8f:18:1c:42:
                    2a:84:a7:38:e7:bd:2b:c0:a1:7a:7e:df:1a:11:b8:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:51:8C:38:52:21:D5:41:7B:D5:8E:EA:B9:77:70:3A:AF:46:90
            X509v3 Authority Key Identifier:
                keyid:46:0C:B5:7D:1E:49:2A:56:6A:0C:31:9A:02:E5:BE:5D:C2:CA:CF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/460CB57D1E492A566A0C319A02E5BE5DC2CACFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3134332e3133372e36322e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:e9:ae:f9:50:cd:4e:a5:9c:52:31:a0:c1:40:a8:35:dd:
         f5:eb:85:ee:da:8c:f0:b0:ae:06:32:5d:50:90:c8:31:cf:d2:
         63:f5:de:58:91:0c:aa:99:e4:67:a6:5c:a2:87:bf:26:69:e0:
         ee:80:c2:2b:22:19:18:a3:7d:80:0b:c2:7f:24:1a:f1:0d:3c:
         c7:7d:f1:9d:b2:9d:c7:0d:ac:bb:4f:6b:70:e3:55:8a:0a:f0:
         4a:94:b4:87:b4:5e:6f:f0:0e:89:3b:9e:d9:e4:1f:9d:2f:3f:
         f3:fb:7e:2d:8d:03:ff:55:3e:1e:cd:20:9c:2e:5f:09:19:10:
         b6:8c:b4:0a:70:a0:e6:a8:2b:fe:fb:51:be:a1:cd:ab:da:f9:
         ad:31:cb:34:24:c2:3f:87:7d:57:ab:0e:36:2d:27:b9:f4:4e:
         de:86:2a:d7:06:a8:76:47:ff:64:00:bb:47:70:eb:c0:13:30:
         eb:7c:67:6b:7b:3a:8f:f7:88:c0:bf:f9:b3:52:83:f3:45:43:
         56:b8:c7:67:4c:57:59:20:b8:92:83:df:00:7d:a7:d4:41:11:
         d7:80:3d:a3:4a:5a:e5:b1:e4:5d:d2:ae:58:e8:a9:2a:c1:da:
         bb:ef:30:68:70:2e:b5:9e:57:52:d7:26:18:a1:f5:ed:a3:76:
         d4:b4:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org