Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
File:                     3134332e3230382e34302e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          pGa+kzG6xltiXcZAsyXGKILYfXBtEUPMPytMfl6ohH4=
Subject key identifier:   E0:F2:BA:2E:42:01:7F:52:E7:A2:4B:B8:9E:54:BA:57:E8:D0:DA:23
Certificate issuer:       /CN=62BD461875786A00B21F073E8D02ACCE9BC15828
Certificate serial:       34960DF0C71FC7022127788A902013157BB58873
Authority key identifier: 62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa
Signing time:             Mon 17 Jul 2023 14:36:00 +0000
ROA not before:           Mon 17 Jul 2023 14:31:00 +0000
ROA not after:            Mon 15 Jul 2024 14:36:00 +0000
asID:                     28130
IP address blocks:        143.208.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:96:0d:f0:c7:1f:c7:02:21:27:78:8a:90:20:13:15:7b:b5:88:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BD461875786A00B21F073E8D02ACCE9BC15828
        Validity
            Not Before: Jul 17 14:31:00 2023 GMT
            Not After : Jul 15 14:36:00 2024 GMT
        Subject: CN=E0F2BA2E42017F52E7A24BB89E54BA57E8D0DA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:a1:8b:5c:03:ee:27:ef:c9:b5:b9:b5:ef:
                    3c:ad:d0:ad:19:fa:5a:dc:29:6c:ee:79:a7:db:96:
                    e8:7b:08:2b:f6:6d:82:5f:9c:be:2e:09:82:10:82:
                    9b:ce:8e:4a:1f:ac:74:23:44:7b:13:d1:80:d1:e7:
                    14:bb:b0:75:f0:a8:2e:01:15:4d:de:a6:ef:c7:13:
                    22:8e:64:fc:73:dd:39:b1:1e:bb:85:f7:c5:ac:46:
                    18:ce:4f:9c:70:f1:6d:c0:45:57:83:e3:12:b6:66:
                    a7:7c:4b:2c:88:69:36:85:97:e1:c3:48:33:46:0f:
                    11:62:b8:df:a3:54:5e:91:f7:91:32:84:d6:c6:ae:
                    31:3d:0b:15:28:8b:d0:4a:cc:03:32:d3:15:fa:ae:
                    8f:77:f3:66:e5:be:4d:97:0f:37:2d:bb:52:59:0d:
                    64:b8:f9:86:b4:11:02:a6:76:69:90:cd:55:46:cf:
                    ca:f2:f6:26:98:4a:31:f8:da:f1:27:55:a3:3a:a8:
                    6d:9a:2a:ee:1a:0a:eb:8a:58:33:ad:28:29:f7:a2:
                    d1:61:ea:47:eb:1a:3b:a4:68:79:27:2b:aa:4c:9f:
                    ef:c7:05:64:fc:03:70:3f:98:c2:6c:4b:aa:7a:3c:
                    2c:85:1a:44:fb:1b:ec:df:f7:65:7f:03:1b:dd:be:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:BA:2E:42:01:7F:52:E7:A2:4B:B8:9E:54:BA:57:E8:D0:DA:23
            X509v3 Authority Key Identifier:
                keyid:62:BD:46:18:75:78:6A:00:B2:1F:07:3E:8D:02:AC:CE:9B:C1:58:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/62BD461875786A00B21F073E8D02ACCE9BC15828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/62BD461875786A00B21F073E8D02ACCE9BC15828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/0/3134332e3230382e34302e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:0a:50:be:fd:06:b9:f3:f5:fb:00:7d:93:8d:e7:4e:8b:c2:
         fb:2b:90:a6:74:74:c1:5a:3f:0b:8c:3c:50:93:2c:89:28:02:
         00:d8:29:3f:0e:a2:1e:cf:b4:f7:94:70:97:da:f1:60:fc:81:
         f2:19:aa:3a:96:67:5e:9d:9e:8d:4b:bb:c2:84:7c:77:e1:41:
         36:6d:ef:ce:e1:37:46:65:d0:c1:60:8c:02:ce:19:09:88:93:
         1d:4f:9c:2c:53:32:53:05:6e:62:9b:15:ad:3f:28:fa:d2:a7:
         2f:c9:e3:71:ae:3f:10:24:a9:49:cd:46:78:9d:a9:f5:e1:18:
         e5:56:8b:f8:94:da:1f:03:f0:dc:97:ec:1b:78:4b:13:3a:d9:
         fe:d8:7a:fd:74:cd:03:e6:d6:e8:d3:68:43:86:ec:a9:1b:ff:
         96:7a:92:0a:a5:49:41:67:21:21:c0:4b:52:93:12:74:4c:8f:
         8c:7b:b9:19:4e:e0:a4:53:ec:bd:58:19:f4:7b:94:40:af:a4:
         c5:42:86:54:34:23:da:7e:5e:88:c0:40:17:f6:6b:a1:f7:08:
         6e:37:d5:53:2c:28:f7:ca:95:96:0f:1b:c9:cb:b3:9a:03:2c:
         8d:cd:d4:e9:4e:3c:96:68:74:2a:68:a6:e2:d1:5e:16:70:6b:
         22:f3:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org