Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3139312e302f32342d3234203d3e20323633303835.roa
File:                     3134332e3230322e3139312e302f32342d3234203d3e20323633303835.roa (raw, json)
Hash identifier:          817b7fWrNeuHOyMuzPqK2R3/6CxZYD33rmI/sErJUnE=
Subject key identifier:   69:FB:2F:63:60:1E:1A:CF:97:00:82:DD:AF:45:4F:28:2D:AD:BB:CF
Certificate issuer:       /CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
Certificate serial:       1EFE3C2091CF3E46C2D9196709AE919952B49CBC
Authority key identifier: 58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3139312e302f32342d3234203d3e20323633303835.roa
Signing time:             Wed 04 Oct 2023 14:31:04 +0000
ROA not before:           Wed 04 Oct 2023 14:26:04 +0000
ROA not after:            Wed 02 Oct 2024 14:31:04 +0000
asID:                     263085
IP address blocks:        143.202.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fe:3c:20:91:cf:3e:46:c2:d9:19:67:09:ae:91:99:52:b4:9c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD
        Validity
            Not Before: Oct  4 14:26:04 2023 GMT
            Not After : Oct  2 14:31:04 2024 GMT
        Subject: CN=69FB2F63601E1ACF970082DDAF454F282DADBBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:74:b2:28:c4:39:bb:fa:4f:2d:b0:24:ff:
                    86:8a:32:12:2b:85:6b:58:4d:5b:98:6e:a0:39:a7:
                    49:00:9f:68:c1:77:e1:e5:c7:eb:6b:36:70:a1:0e:
                    8a:05:c6:31:a0:2b:1f:c6:1c:55:e4:82:90:be:a5:
                    7e:a3:a6:75:e3:a1:74:d1:0f:ad:94:f6:3a:72:66:
                    f8:a8:5d:1d:a5:27:65:05:13:e0:cb:26:e1:3a:80:
                    fb:15:7c:62:8b:f7:eb:7a:f2:08:14:03:4c:d7:f6:
                    ef:7c:d2:08:44:39:1b:48:f3:5f:e2:2e:a3:c4:5c:
                    41:df:5c:f5:90:9c:8a:a9:fe:18:4b:d7:17:d6:ad:
                    a7:10:8f:49:02:56:f5:50:6b:a8:db:4a:be:8d:86:
                    e8:24:39:c7:57:8f:05:26:a7:5d:0f:a3:ab:61:5d:
                    3c:59:d9:78:9c:6a:c7:aa:7f:13:fe:e9:4d:19:3e:
                    89:78:2a:d8:c4:e8:90:6b:ad:9e:18:b6:b0:f9:f8:
                    6c:b9:82:87:dc:c4:ee:50:6f:29:ff:9f:19:2a:d1:
                    f3:47:b6:21:db:e3:0e:aa:66:ba:d1:16:7b:a8:50:
                    bb:47:5c:49:4a:9b:60:5a:9a:ff:81:e9:70:20:35:
                    fa:c6:9b:5d:0a:40:ba:15:79:a0:35:49:ca:39:13:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:2F:63:60:1E:1A:CF:97:00:82:DD:AF:45:4F:28:2D:AD:BB:CF
            X509v3 Authority Key Identifier:
                keyid:58:C8:7B:2A:1D:87:6A:B4:75:AA:47:7D:3B:9D:E4:F3:50:EA:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58C87B2A1D876AB475AA477D3B9DE4F350EAC5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3134332e3230322e3139312e302f32342d3234203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:2e:ca:4b:0f:2d:df:0e:7c:bb:54:36:35:12:73:cf:56:
         51:98:41:71:91:f6:c4:b0:34:72:ec:75:64:fb:1c:e8:44:e8:
         da:7c:5c:14:81:be:58:b7:10:b2:2f:18:12:c8:6c:cf:7b:10:
         14:09:63:4d:42:52:48:13:89:6d:3c:72:f4:13:a1:1d:a8:e8:
         7a:69:5e:43:4c:90:e7:7f:d8:98:5e:71:44:51:79:9c:10:54:
         3f:52:a5:1a:8d:72:11:a4:5d:4e:ee:4d:2d:9b:a0:d8:a1:15:
         da:e2:7d:ac:d1:fd:b0:00:f4:8b:48:80:7d:dc:46:df:ca:d6:
         fc:df:26:61:92:85:ca:be:35:19:88:92:d4:7b:ed:aa:f7:f2:
         89:91:2f:6f:ae:d2:64:b7:62:7e:b0:66:6f:ef:ba:d5:78:3e:
         60:47:6d:62:62:cc:00:43:96:d4:a7:58:ba:c0:1b:8d:1e:b2:
         86:af:15:8b:4d:d3:8a:76:7d:27:eb:57:01:de:7f:19:88:d9:
         2e:87:9b:b9:5d:8a:74:77:c7:b2:53:b0:b4:b8:58:58:7a:b1:
         1c:29:f3:3a:34:75:52:c8:5b:cb:06:78:30:33:6f:63:93:eb:
         f5:a3:f3:60:4b:c2:31:af:81:cc:64:97:d4:e0:5f:25:7e:e7:
         29:89:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org