Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32332d3233203d3e20323633303835.roa
File:                     3134332e3230322e3138382e302f32332d3233203d3e20323633303835.roa (raw, json)
Hash identifier:          kll2o6gaXFUIDB0lo3naZWtgqD/l5AzNlMpwCxHUnVk=
Subject key identifier:   EF:5A:24:33:83:9E:9B:91:F2:21:6D:07:7C:93:9F:10:F0:86:D4:7D
Certificate issuer:       /CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
Certificate serial:       08B71F9A98F320EC47CB2A6BCA77245DCBF0D983
Authority key identifier: 58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32332d3233203d3e20323633303835.roa
Signing time:             Wed 04 Oct 2023 14:30:47 +0000
ROA not before:           Wed 04 Oct 2023 14:25:47 +0000
ROA not after:            Wed 02 Oct 2024 14:30:47 +0000
asID:                     263085
IP address blocks:        143.202.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:1f:9a:98:f3:20:ec:47:cb:2a:6b:ca:77:24:5d:cb:f0:d9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
        Validity
            Not Before: Oct  4 14:25:47 2023 GMT
            Not After : Oct  2 14:30:47 2024 GMT
        Subject: CN=EF5A2433839E9B91F2216D077C939F10F086D47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:9b:c4:c7:0b:e2:3a:2b:a2:2c:35:f3:0b:
                    5a:b1:59:74:bb:60:7c:a1:c2:16:8f:84:05:97:08:
                    1e:24:b5:17:a7:46:84:89:74:43:b9:37:76:df:64:
                    16:d8:46:7d:a3:65:45:9b:6c:58:a2:fa:66:34:8a:
                    39:20:17:7a:fd:de:52:6e:70:09:dd:c6:6a:39:bd:
                    4f:7b:0b:b2:b2:77:ee:46:fe:fe:2c:1b:9f:bc:d3:
                    49:c9:ea:d0:3d:7e:a8:da:7c:b6:e0:f2:27:89:5e:
                    98:0d:89:82:a5:74:77:65:ed:ef:a6:36:56:35:51:
                    0a:8d:b4:5d:62:db:9b:2a:09:a7:b3:56:0a:6a:01:
                    11:f9:44:fd:35:ee:32:c2:66:a4:2f:fd:44:97:eb:
                    fc:ed:1d:62:40:ce:64:18:a1:d2:c1:19:5e:4f:f8:
                    b6:77:bd:49:04:f7:04:de:ed:22:19:68:c6:5a:9e:
                    28:5f:dd:b0:79:8a:7f:b2:94:33:b3:66:6a:1d:b6:
                    41:6f:75:10:6b:c9:1a:14:da:82:8f:c5:12:f1:1a:
                    b1:24:bc:0d:c0:f8:ea:67:01:e4:27:7c:63:e1:42:
                    5c:a7:2c:20:fb:2a:85:d9:91:f5:0b:1a:39:34:ef:
                    07:5d:04:b9:fc:40:c1:fa:45:d5:fb:0e:94:4f:0c:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:24:33:83:9E:9B:91:F2:21:6D:07:7C:93:9F:10:F0:86:D4:7D
            X509v3 Authority Key Identifier:
                keyid:58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32332d3233203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:e3:30:5a:f0:dc:ef:c8:ce:35:5d:b5:d0:98:89:3a:24:7b:
         0e:f8:b9:d7:f5:83:87:37:da:ac:16:82:b9:13:f1:c7:ed:6d:
         e0:65:59:cc:2b:78:8f:a9:e1:8e:79:f3:db:1d:fa:60:ec:d0:
         1c:f1:23:5d:46:0d:6f:dd:03:60:ac:3b:3c:11:0a:4f:d0:b9:
         e8:5e:78:14:f5:17:54:36:c8:cf:04:61:b9:55:d0:4a:16:90:
         8e:fb:33:86:28:05:6e:32:88:d1:ea:bc:26:80:0f:ad:b1:d6:
         7f:64:db:a6:59:74:13:97:9c:54:da:5c:a4:f2:62:f7:a2:f4:
         04:4e:66:c0:3e:58:0d:d5:46:47:e9:7c:4a:3c:2a:93:e8:1a:
         89:41:12:06:5d:bb:f8:c6:f0:25:1d:3f:e1:1e:60:5e:d4:61:
         07:c5:9e:ad:55:b7:60:9a:54:28:b7:b5:c0:b3:13:0c:f4:9b:
         a4:22:8f:a0:6b:b6:be:1f:db:3e:ec:17:6d:53:62:b0:85:84:
         f9:53:27:41:15:ef:33:e0:7d:07:cb:ae:bc:42:ca:89:25:2d:
         93:50:7a:57:1f:64:40:b1:cb:44:7d:53:32:c1:e1:d1:bd:18:
         4b:29:cf:55:5f:8d:27:2f:c3:82:2d:e3:f2:bc:f4:93:6f:54:
         f4:a2:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org