Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3232203d3e20323633303835.roa
File:                     3134332e3230322e3138382e302f32322d3232203d3e20323633303835.roa (raw, json)
Hash identifier:          VJnmyymPbt8zvPAmHyByT1HPGvxWQZb1Wxw44Hqc0Vk=
Subject key identifier:   A7:2B:7D:B0:18:DE:48:4A:E3:56:55:FB:A5:0E:5A:42:E4:A7:BE:46
Certificate issuer:       /CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
Certificate serial:       5F4912137C8D1AA4AC925CA63A02016878DD7A28
Authority key identifier: 58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3232203d3e20323633303835.roa
Signing time:             Wed 04 Oct 2023 14:30:45 +0000
ROA not before:           Wed 04 Oct 2023 14:25:45 +0000
ROA not after:            Wed 02 Oct 2024 14:30:45 +0000
asID:                     263085
IP address blocks:        143.202.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:12:13:7c:8d:1a:a4:ac:92:5c:a6:3a:02:01:68:78:dd:7a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
        Validity
            Not Before: Oct  4 14:25:45 2023 GMT
            Not After : Oct  2 14:30:45 2024 GMT
        Subject: CN=A72B7DB018DE484AE35655FBA50E5A42E4A7BE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:23:1f:c3:53:09:e9:3f:64:cb:8b:5d:22:e3:
                    9e:2a:ae:b7:88:51:f1:43:75:85:9b:4b:a2:72:98:
                    97:df:1a:4c:38:ed:51:d0:c4:43:34:e8:26:12:67:
                    7e:02:21:d8:d8:fd:a8:7a:30:dc:dc:b4:eb:5a:c7:
                    bc:27:f6:6d:48:a4:e1:57:02:d8:06:b3:41:55:e8:
                    33:3e:b7:42:c7:5c:d8:f7:55:fc:4d:7e:85:c2:1c:
                    92:98:7a:91:bf:e3:17:1a:6b:e8:20:40:30:d6:de:
                    24:d6:bb:38:33:17:93:30:ea:2c:fd:48:40:e2:d3:
                    49:57:aa:d1:24:79:14:7b:cb:f9:8d:4e:51:88:2b:
                    f0:0e:51:b9:3d:25:f3:c3:29:df:aa:94:00:1f:4c:
                    22:85:05:c2:bd:8b:ca:dd:4c:23:4a:d4:3d:75:40:
                    bf:ab:37:6a:be:2e:20:ca:56:22:9a:15:18:e4:e9:
                    1f:97:9b:06:7a:a8:49:75:a3:65:e9:51:9b:e5:00:
                    da:b9:d4:60:c3:32:74:5b:c2:b2:91:c0:01:16:6b:
                    4b:8d:b6:c8:ab:eb:d4:dd:71:04:66:a3:d5:2c:85:
                    e0:80:8d:fe:fa:14:7a:7e:1d:83:aa:c2:19:eb:fc:
                    a2:c9:9e:ee:73:ff:4b:89:63:2d:59:87:e8:62:7c:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2B:7D:B0:18:DE:48:4A:E3:56:55:FB:A5:0E:5A:42:E4:A7:BE:46
            X509v3 Authority Key Identifier:
                keyid:58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32322d3232203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:0f:ba:c0:8e:75:52:e6:3e:9b:b0:bb:be:a6:d9:d9:93:
         97:17:6a:37:8f:11:75:30:a3:a5:6f:95:d5:11:bd:37:bb:cb:
         9f:71:ba:69:22:bf:e8:91:74:e2:5f:d6:c3:8c:9f:66:43:d2:
         68:0f:a3:f6:a3:c7:ff:34:3c:f2:0a:12:b4:3c:4b:26:d1:e2:
         1f:87:4c:b2:71:8b:57:ce:ea:47:4a:34:87:91:27:57:22:bf:
         ca:db:ef:d0:1a:e2:08:a7:db:bf:1d:31:c4:d8:c4:db:3c:2d:
         3a:8d:ad:72:7f:2a:6e:5a:14:35:07:a9:7d:89:d9:fa:12:3e:
         80:d9:77:c6:2d:05:00:23:0e:6a:68:66:af:68:81:5d:dc:6d:
         92:65:45:e0:4c:c9:61:f8:22:39:8f:cc:f5:ce:c6:eb:f8:d7:
         e8:6a:47:11:0f:03:fc:d4:2b:67:86:ff:22:c0:e9:fc:d2:67:
         a6:d2:d6:01:eb:5e:ee:be:e0:3f:28:0f:99:7c:cb:6a:5d:47:
         c2:f2:d6:f8:15:59:72:85:ba:b2:9d:9f:1f:c2:c6:72:1b:d5:
         9b:71:ba:bb:14:c6:06:5f:0f:67:37:7f:32:d2:a9:1f:16:71:
         fa:d4:2a:48:7d:bc:b8:36:6e:da:c6:55:00:8c:38:be:a2:87:
         e5:b4:c6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org