Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32342d3234203d3e20323633303835.roa
File:                     3134332e3230322e3138382e302f32342d3234203d3e20323633303835.roa (raw, json)
Hash identifier:          QMOdGRoUS7wMB6ZsIJJ2QvN8+YZkdaBO8PQ+4zr04TE=
Subject key identifier:   DD:B9:5D:44:47:B5:5E:ED:C4:5D:E4:D2:17:ED:02:26:D1:6C:DE:1C
Certificate issuer:       /CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
Certificate serial:       69780648F8F3269BDCADEECBE0DFB1FC706852AA
Authority key identifier: 58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32342d3234203d3e20323633303835.roa
Signing time:             Wed 04 Oct 2023 14:30:50 +0000
ROA not before:           Wed 04 Oct 2023 14:25:50 +0000
ROA not after:            Wed 02 Oct 2024 14:30:50 +0000
asID:                     263085
IP address blocks:        143.202.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:78:06:48:f8:f3:26:9b:dc:ad:ee:cb:e0:df:b1:fc:70:68:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
        Validity
            Not Before: Oct  4 14:25:50 2023 GMT
            Not After : Oct  2 14:30:50 2024 GMT
        Subject: CN=DDB95D4447B55EEDC45DE4D217ED0226D16CDE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:39:d7:1e:6f:c5:57:eb:69:33:ca:4c:dd:
                    74:36:36:08:b1:bd:84:90:7a:99:66:12:b0:3f:b1:
                    b1:36:ab:e3:57:47:8e:b8:2e:d7:b3:1c:d7:aa:89:
                    b9:8e:a0:a9:c7:dd:49:d5:91:30:64:a7:54:6e:bf:
                    38:c0:f9:f7:42:0f:e3:6e:f2:62:8f:9f:69:70:f1:
                    ec:3f:b6:55:ba:e4:de:df:82:5a:7d:6d:cd:78:7e:
                    bb:2b:c9:8d:11:e7:bc:52:e5:7f:d8:f2:7d:ab:4e:
                    66:24:53:b4:a1:ca:89:20:40:67:3a:64:a9:b7:c1:
                    20:d6:18:f8:7c:f8:44:62:af:c3:17:bc:be:71:4b:
                    8a:1d:5b:73:ac:f5:d8:8c:4b:fa:3e:96:98:6b:c4:
                    43:19:8a:e9:de:0e:ac:00:f6:eb:94:62:ef:49:24:
                    5e:a3:2d:92:dd:4c:a0:a8:2a:3c:af:64:65:a6:61:
                    32:47:d1:fd:19:55:96:ec:c5:9f:5b:e8:0f:a6:b4:
                    ff:6e:4e:8d:bc:d0:de:be:0f:1d:72:4b:8a:a3:aa:
                    60:72:9e:ae:2b:be:eb:89:7d:95:8c:bd:30:25:a6:
                    f9:b9:06:f8:fd:79:82:8f:8b:ae:72:62:27:c8:a2:
                    1a:b6:f8:87:96:98:57:5a:95:e4:90:b9:17:e8:41:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:5D:44:47:B5:5E:ED:C4:5D:E4:D2:17:ED:02:26:D1:6C:DE:1C
            X509v3 Authority Key Identifier:
                keyid:58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3138382e302f32342d3234203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:73:2a:fd:c9:27:e6:bb:8c:66:d6:95:a8:4a:46:96:cd:14:
         ac:20:a3:77:b4:78:1f:78:4d:68:82:20:9f:fc:a8:0c:a3:21:
         d5:46:3c:3e:11:52:38:dd:62:02:5b:1e:4d:f3:f6:18:71:4f:
         f3:5a:51:af:c2:7d:cf:0b:54:fe:00:33:77:ba:1a:9c:bd:5a:
         15:bb:af:57:bf:c2:38:b5:de:31:f5:a3:4a:c0:1a:a9:c3:dd:
         23:1f:9e:35:74:a7:51:2d:e0:95:f2:e2:4c:08:4b:45:44:ac:
         a9:96:46:0c:5b:4f:dd:76:2f:9b:70:e4:cc:6d:f8:a2:f3:49:
         94:6a:51:26:08:08:c1:de:ba:e3:84:aa:75:38:45:f9:66:3e:
         15:f7:bc:d6:f7:51:f4:d6:55:02:c5:e0:88:c8:e2:ca:e6:85:
         6c:3e:1d:62:18:2b:a4:7c:b5:70:89:a6:90:bc:e2:fe:ad:80:
         cd:2c:e6:69:57:0c:47:32:01:da:24:34:b0:20:c7:bc:35:62:
         0d:72:4f:9d:62:2a:a7:ea:1d:a6:d7:08:61:8c:85:eb:7c:37:
         ea:8f:43:d4:a5:4a:9a:4e:f9:3b:3a:e1:49:9f:26:94:e2:44:
         b1:ac:99:4d:80:2f:84:ed:92:dc:4a:de:fb:dd:59:db:a9:a7:
         21:67:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org