Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa
File:                     3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa (raw, json)
Hash identifier:          Bn4n/6ZmMhHWDC7Y1+NfjV97yNF7TBHuZsT4kKAtbu0=
Subject key identifier:   F4:56:1C:06:C5:2E:63:81:19:C0:A8:9D:0E:E4:08:87:D2:4E:62:05
Certificate issuer:       /CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
Certificate serial:       5A3DE9B6C0D8FD20A1EB71F09435896467F69D57
Authority key identifier: 8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa
Signing time:             Thu 29 Feb 2024 17:28:02 +0000
ROA not before:           Thu 29 Feb 2024 17:23:02 +0000
ROA not after:            Thu 27 Feb 2025 17:28:02 +0000
asID:                     61820
IP address blocks:        201.131.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3d:e9:b6:c0:d8:fd:20:a1:eb:71:f0:94:35:89:64:67:f6:9d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Validity
            Not Before: Feb 29 17:23:02 2024 GMT
            Not After : Feb 27 17:28:02 2025 GMT
        Subject: CN=F4561C06C52E638119C0A89D0EE40887D24E6205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:de:89:8c:3b:a1:5b:68:e8:2e:69:91:3c:1e:
                    e3:03:73:aa:c1:a4:a4:82:6a:a2:e6:85:dc:21:0e:
                    ca:9f:8a:45:52:9f:b5:08:2e:28:c2:0e:d4:99:36:
                    91:3e:9b:7d:07:27:9b:b4:1d:00:c9:d6:48:dc:39:
                    ec:27:ad:d6:e3:5b:b9:6b:eb:1b:e0:2e:c9:01:cf:
                    ca:91:1d:4b:b0:ba:90:48:63:a4:77:14:ca:39:80:
                    0d:51:20:45:cc:4d:db:6c:52:23:de:d6:e4:93:51:
                    eb:51:9e:50:37:0f:79:17:14:56:0e:33:a7:ff:bb:
                    9f:1a:85:6d:84:95:d2:6e:d1:06:af:9c:41:36:1c:
                    14:15:f7:d9:3c:9a:7f:a1:9d:be:40:05:dc:4d:72:
                    47:e3:11:c3:92:23:71:7b:e0:62:0b:a6:fa:45:be:
                    9a:f2:b8:30:94:5d:28:09:57:72:87:a7:41:e4:36:
                    d9:19:69:79:ee:5a:4e:c9:53:1c:a3:e5:11:d3:eb:
                    cc:7f:6a:4d:2b:95:c5:4f:81:25:69:1c:76:cb:81:
                    9f:4a:1b:cd:82:79:e3:85:e4:6b:90:dc:5a:d2:91:
                    05:ef:c6:8e:7c:a8:5b:52:d2:9d:c5:be:f0:fd:85:
                    c7:7f:bb:a7:7f:d3:0a:9b:c4:76:ee:77:1d:ba:7e:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:56:1C:06:C5:2E:63:81:19:C0:A8:9D:0E:E4:08:87:D2:4E:62:05
            X509v3 Authority Key Identifier:
                keyid:8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:63:47:25:b6:21:a1:06:dc:be:cd:28:25:79:9f:19:bd:
         5d:3f:d2:15:65:5a:5f:b7:61:91:2f:d8:c6:ef:c8:e2:ef:72:
         75:7f:9b:2d:cc:e1:e1:4e:30:9d:59:c8:47:16:c9:fc:db:a2:
         58:b5:99:48:88:72:42:e5:68:14:06:5e:9b:57:48:1b:c2:d3:
         bc:b7:78:2f:e0:6e:36:07:e0:f6:56:85:5b:b5:75:44:0f:b6:
         ea:08:3f:f4:e0:12:6e:8d:ef:ff:65:ec:32:ec:06:41:38:52:
         8c:58:5d:f9:ba:3b:3e:e7:38:bf:66:fa:7a:c5:93:ec:d3:85:
         02:6c:9f:7b:04:91:0b:68:db:5d:eb:99:27:0a:4d:2e:ac:01:
         e5:82:1a:0f:97:18:8e:c5:fc:aa:b1:d4:01:41:b7:ee:cb:14:
         44:b5:89:d8:01:6e:9a:1f:99:5b:e4:6b:f1:fc:87:5b:f2:99:
         ae:29:80:71:46:fb:f6:c4:bb:12:36:b6:e5:32:7a:fc:33:96:
         80:37:fc:ff:25:bc:dc:c4:74:90:71:9b:65:18:c5:c9:10:95:
         ba:9d:ce:dc:c8:76:33:51:22:68:91:94:98:22:f5:7e:44:35:
         c3:2d:6b:e6:d9:fc:11:fd:90:71:cf:bb:fb:13:f0:15:56:ea:
         31:e8:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org