Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          1OZ7KGJH8wXpcp1UX1TBkOeaXI2ExmHP3gzoPqdnN+A=
Subject key identifier:   FE:22:BE:CB:E8:F3:04:C3:08:D9:69:C3:32:AB:F4:FA:13:91:11:B8
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       0E6E2B0FC4A0A69AE41DFA107C83F9E936E0F2E9
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:33 +0000
ROA not before:           Tue 07 Nov 2023 11:39:33 +0000
ROA not after:            Tue 05 Nov 2024 11:44:33 +0000
asID:                     52871
IP address blocks:        201.157.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:2b:0f:c4:a0:a6:9a:e4:1d:fa:10:7c:83:f9:e9:36:e0:f2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:33 2023 GMT
            Not After : Nov  5 11:44:33 2024 GMT
        Subject: CN=FE22BECBE8F304C308D969C332ABF4FA139111B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:00:75:41:97:d2:cc:d8:5b:84:58:a7:aa:
                    f3:7c:e2:6a:33:f3:45:b1:8c:75:b4:f4:c0:35:54:
                    a4:e4:9a:38:af:50:af:09:1a:65:43:0f:a1:b1:9a:
                    9d:13:bc:c3:93:6a:6a:22:6d:86:8a:53:c6:99:a2:
                    69:87:c4:8a:1f:40:e6:70:00:5b:52:1f:d2:7a:72:
                    aa:92:90:f7:34:20:c9:3f:fc:28:5d:8d:bf:3e:58:
                    3a:53:3e:d2:c4:a5:f9:52:31:2e:64:c2:6d:07:39:
                    f2:ae:05:9b:09:6c:d3:8a:93:17:ba:62:22:da:53:
                    a9:85:39:c9:25:e5:95:b9:4d:d7:e3:47:4d:0c:ea:
                    cf:6b:57:eb:c7:13:04:63:b2:19:c8:b3:3d:28:69:
                    d6:c7:3a:06:10:39:2e:d9:c7:8c:b9:02:b8:78:72:
                    26:0d:0f:9d:13:0e:27:e9:68:03:7d:60:ce:c7:e2:
                    4b:16:d2:48:7f:00:6a:4e:3f:4e:c0:f9:2b:9d:21:
                    0e:a9:2d:75:1e:95:bf:23:57:cc:f7:f4:ec:68:b4:
                    0f:cb:3f:21:30:cf:37:8b:26:e1:78:81:a1:84:73:
                    55:74:30:b4:10:6f:48:c8:58:27:bc:4b:78:d6:4e:
                    b0:69:13:fa:0c:b1:07:c7:0f:7e:c5:fb:72:2f:6b:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:BE:CB:E8:F3:04:C3:08:D9:69:C3:32:AB:F4:FA:13:91:11:B8
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139392e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:23:aa:06:4d:69:05:18:6c:15:bc:9e:65:9f:f5:8c:bd:72:
         90:a3:80:ef:8c:74:33:c4:c8:19:07:d6:2a:4a:09:08:6e:f0:
         f6:fc:9e:54:c7:39:27:a2:f3:16:d5:c7:7e:f1:9d:21:3d:59:
         47:d2:2f:dc:8c:9c:80:ce:fb:aa:2d:9b:ea:1a:a6:e7:7e:5f:
         27:0e:34:92:14:0a:2e:98:25:b3:2a:f3:0b:d1:6a:c4:0d:00:
         ec:9a:86:cd:57:04:32:a8:ae:c1:ca:d7:3f:42:7c:a8:68:00:
         d7:6b:82:f6:4a:86:52:bd:65:ee:cc:af:a5:f9:fd:2c:67:8f:
         12:5c:7f:27:eb:5b:86:56:26:32:c4:f0:32:4c:08:79:17:9a:
         8a:b0:10:50:d3:ac:64:cc:24:6a:0d:80:9b:39:07:56:54:cb:
         a0:55:6a:49:fb:b4:6e:25:14:f3:10:7b:08:cf:e8:45:39:cb:
         29:45:1e:ec:b2:d2:4f:18:29:41:b9:7b:db:a7:36:17:32:4a:
         f1:c7:41:de:d3:3d:c2:dc:a2:43:2d:80:0b:59:30:ab:28:27:
         be:91:cd:9c:68:c2:b6:82:6f:b0:cf:63:fc:a6:67:18:5a:14:
         5d:b7:ae:9a:c3:21:76:75:41:89:29:07:0f:13:17:eb:bb:04:
         de:da:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org