Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
File:                     3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (raw, json)
Hash identifier:          ywuoUpJpg6lFsW9Dgm1kVBR2WhnTQiBafS3SMqii76c=
Subject key identifier:   5E:37:25:CB:00:E5:E5:46:E6:0D:BB:18:FD:D3:35:C3:29:31:CF:C6
Certificate issuer:       /CN=D63C20563BA26C504096AB105F96D77EB9D755E4
Certificate serial:       70B7FE946D32E85355259D83D175C248C5B993D1
Authority key identifier: D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63C20563BA26C504096AB105F96D77EB9D755E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
Signing time:             Fri 05 Jan 2024 18:50:26 +0000
ROA not before:           Fri 05 Jan 2024 18:45:26 +0000
ROA not after:            Fri 03 Jan 2025 18:50:26 +0000
asID:                     267492
IP address blocks:        201.182.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b7:fe:94:6d:32:e8:53:55:25:9d:83:d1:75:c2:48:c5:b9:93:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63C20563BA26C504096AB105F96D77EB9D755E4
        Validity
            Not Before: Jan  5 18:45:26 2024 GMT
            Not After : Jan  3 18:50:26 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:c7:19:9b:3c:bd:05:ea:a7:2c:a1:da:58:
                    86:58:29:4d:d7:63:06:71:2d:e9:f8:69:4e:8d:cb:
                    c9:0b:07:22:8e:e4:81:43:d9:86:ae:63:b5:26:cd:
                    9c:0f:13:bb:19:69:90:cc:aa:b9:b4:70:72:d0:07:
                    50:db:81:52:47:11:e5:9d:32:6a:c3:2d:d9:e9:ef:
                    9b:db:ed:21:7f:48:63:9f:b0:f6:55:8e:59:2b:14:
                    00:19:7d:f0:f2:5a:42:8e:15:37:70:11:20:a1:8f:
                    ef:20:10:d0:eb:aa:ec:d4:90:ff:7a:7f:61:dd:9d:
                    93:c8:68:8c:bf:f4:1c:0a:a3:32:c2:20:fa:22:0a:
                    f1:33:ad:40:91:8d:9d:3a:25:3d:32:a9:17:0c:3a:
                    0b:55:75:bb:3a:6e:d8:7b:3b:fc:7e:e4:b8:77:5c:
                    98:15:b9:d0:8b:5a:12:a5:5d:43:37:55:06:30:59:
                    87:ca:5e:32:1e:74:75:2f:5a:18:83:13:d9:21:81:
                    b8:af:f1:0c:7e:df:f1:25:c8:e9:c7:67:8e:74:af:
                    50:d1:5c:d2:48:9d:40:be:f5:a3:c8:22:fc:a7:8a:
                    a3:e8:f2:47:d4:4c:a5:19:2b:79:c0:d2:46:87:09:
                    d3:38:4a:6a:eb:fb:32:97:10:e9:c8:42:ef:82:bf:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:25:CB:00:E5:E5:46:E6:0D:BB:18:FD:D3:35:C3:29:31:CF:C6
            X509v3 Authority Key Identifier:
                keyid:D6:3C:20:56:3B:A2:6C:50:40:96:AB:10:5F:96:D7:7E:B9:D7:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/D63C20563BA26C504096AB105F96D77EB9D755E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63C20563BA26C504096AB105F96D77EB9D755E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:e7:42:dd:8e:04:55:d7:67:7e:88:7d:15:2e:1b:d0:04:
         17:66:ca:96:87:e6:95:13:83:08:80:2f:5b:fd:4a:5b:6a:c0:
         d8:15:b8:8e:63:30:ec:ee:cd:1a:db:dc:f6:89:17:ae:20:0c:
         65:dd:d6:d7:d3:56:4d:62:95:31:43:8a:18:f1:11:b9:1d:0c:
         21:74:7a:b1:75:83:ad:2c:e6:72:80:0f:8e:41:6d:e6:c0:54:
         d1:67:6c:a4:d4:11:4f:22:d4:9a:ec:bf:b3:a1:91:3b:00:7f:
         01:ee:56:7b:c6:ef:f7:b0:61:9c:f3:27:89:c5:03:0f:b4:38:
         e8:6c:3f:45:63:68:fe:07:e1:a9:70:81:36:51:a7:dc:56:85:
         14:68:47:92:2a:45:29:68:63:8f:f5:16:80:4c:8f:c9:e9:4c:
         8f:41:2b:29:03:9a:8a:20:52:2e:6f:5b:45:a8:c6:bb:ee:26:
         04:1b:ef:6a:e1:e5:a7:2a:80:28:83:fc:ab:83:72:8e:5a:32:
         d8:95:11:da:a2:ba:0b:fa:ca:7a:93:c0:74:9e:06:d5:8e:8d:
         96:a0:f4:52:20:37:7d:18:8a:ad:f1:5c:41:db:6c:bd:10:a6:
         1c:fa:53:fe:9e:43:8c:99:a3:76:35:f9:c1:e8:39:81:14:20:
         36:6d:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org