Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          lS7tKleD/lfshbnUOaVmPpE9CkhKeZZ5amvpzElhGJc=
Subject key identifier:   47:76:39:E2:A6:8C:3C:B7:44:A7:2B:21:84:D9:BA:99:3E:B6:01:AD
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       4EF13A33B85017E6CC6419489B7F9D4795DAE920
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:09 +0000
ROA not before:           Mon 18 Dec 2023 19:16:09 +0000
ROA not after:            Mon 16 Dec 2024 19:21:09 +0000
asID:                     270793
IP address blocks:        201.159.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:3a:33:b8:50:17:e6:cc:64:19:48:9b:7f:9d:47:95:da:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:09 2023 GMT
            Not After : Dec 16 19:21:09 2024 GMT
        Subject: CN=477639E2A68C3CB744A72B2184D9BA993EB601AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:72:33:f1:78:6a:8c:dc:ac:89:e2:b3:6c:
                    39:63:cd:52:5b:6b:18:56:b4:aa:6e:3d:90:79:50:
                    95:0c:fd:bb:84:45:35:90:c6:20:6d:fb:49:31:75:
                    63:b7:79:22:d2:28:63:85:4d:8d:f6:e0:be:fe:f8:
                    aa:df:44:20:88:c9:4b:fd:09:76:e2:6d:36:d4:7e:
                    fc:2b:5e:93:4c:b8:8f:48:8d:4f:19:bd:09:3c:1d:
                    5a:27:22:00:e3:5c:e2:72:ab:1c:9e:06:34:a6:85:
                    09:f9:a1:f7:0f:a3:7d:53:d0:34:25:5a:50:2f:02:
                    90:db:89:62:7a:df:5c:17:8b:4c:93:fc:17:6d:ea:
                    9c:e7:82:61:48:2f:69:6e:ac:ea:3c:e4:4f:7d:3e:
                    c8:f3:ca:df:1b:54:19:a6:77:62:72:e1:70:47:53:
                    2f:3c:cb:9c:d5:04:17:4d:87:0c:00:86:1d:77:86:
                    3b:e1:68:4c:d8:6c:cb:4b:c3:cb:b4:68:81:01:e8:
                    0e:17:ae:53:27:0e:64:01:8e:f4:26:16:5b:67:82:
                    9a:34:6a:9c:d0:f2:1f:27:3f:59:e4:82:da:20:42:
                    f2:b2:63:43:22:91:80:7a:32:3c:ad:82:1d:4a:2a:
                    c5:a7:29:aa:2d:be:c6:c7:1b:a3:df:fb:b9:8c:60:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:76:39:E2:A6:8C:3C:B7:44:A7:2B:21:84:D9:BA:99:3E:B6:01:AD
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:dd:79:4c:d9:86:ac:b2:ac:08:9c:84:04:84:c4:36:ee:
         a5:f1:fe:74:b1:ae:ca:f3:34:1e:e6:e6:f6:14:6e:9b:8a:e8:
         3c:30:ec:b4:2b:51:97:19:c6:1a:a0:6f:05:27:f2:07:e2:4a:
         d9:2b:1b:0a:23:85:8e:36:be:b3:99:55:98:e4:91:d3:ef:a9:
         d9:69:f2:63:0c:42:2b:79:e2:f4:ce:67:80:70:cf:15:8a:83:
         0b:16:81:6d:a3:9b:19:91:20:fe:64:27:1d:71:bc:b0:c4:73:
         de:13:8e:7d:44:3e:2a:86:21:3b:11:88:c2:8a:c5:54:fc:e4:
         32:25:85:cf:7b:b5:3a:3c:c9:f5:91:9e:d9:4f:ef:42:64:44:
         28:87:7b:e5:f8:b2:e3:ed:d4:25:d3:ae:69:6c:bc:bd:ae:18:
         d5:85:5e:61:12:ad:af:db:98:74:16:b3:92:1e:2f:db:1d:e7:
         4b:aa:74:3a:e6:fd:51:4a:35:a2:55:0a:7a:c0:1e:b5:1c:ce:
         a4:31:c1:f8:75:08:a6:65:02:3d:82:8b:30:0a:51:ae:e6:c0:
         66:9b:32:4e:e0:3e:43:c9:b9:b4:80:b9:3a:fb:6c:59:16:a6:
         90:ca:af:cc:84:96:b3:b7:fb:9f:1f:3b:b3:57:b8:4d:d0:1e:
         2a:20:c6:94
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTvE6M7hQF+bMZBlIm3+dR5Xa6SAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4NzA3NEY3M0RENTMwNDIxMzA2QTgxMUY2MkJBMTI3
QzU4QTA5QzAeFw0yMzEyMTgxOTE2MDlaFw0yNDEyMTYxOTIxMDlaMDMxMTAvBgNV
BAMTKDQ3NzYzOUUyQTY4QzNDQjc0NEE3MkIyMTg0RDlCQTk5M0VCNjAxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91XIz8XhqjNysieKzbDljzVJb
axhWtKpuPZB5UJUM/buERTWQxiBt+0kxdWO3eSLSKGOFTY324L7++KrfRCCIyUv9
CXbibTbUfvwrXpNMuI9IjU8ZvQk8HVonIgDjXOJyqxyeBjSmhQn5ofcPo31T0DQl
WlAvApDbiWJ631wXi0yT/Bdt6pzngmFIL2lurOo85E99Psjzyt8bVBmmd2Jy4XBH
Uy88y5zVBBdNhwwAhh13hjvhaEzYbMtLw8u0aIEB6A4XrlMnDmQBjvQmFltngpo0
apzQ8h8nP1nkgtogQvKyY0MikYB6Mjytgh1KKsWnKaotvsbHG6Pf+7mMYFxlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUR3Y54qaMPLdEpyshhNm6mT62Aa0wHwYDVR0j
BBgwFoAUmocHT3PdUwQhMGqBH2K6EnxYoJwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC85QTg3MDc0RjczREQ1MzA0MjEzMDZBODExRjYyQkExMjdDNThBMDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlBODcwNzRGNzNERDUzMDQy
MTMwNkE4MTFGNjJCQTEyN0M1OEEwOUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMmfozANBgkqhkiG9w0BAQsFAAOCAQEALrfd
eUzZhqyyrAichASExDbupfH+dLGuyvM0Hubm9hRum4roPDDstCtRlxnGGqBvBSfy
B+JK2SsbCiOFjja+s5lVmOSR0++p2WnyYwxCK3ni9M5ngHDPFYqDCxaBbaObGZEg
/mQnHXG8sMRz3hOOfUQ+KoYhOxGIworFVPzkMiWFz3u1OjzJ9ZGe2U/vQmREKId7
5fiy4+3UJdOuaWy8va4Y1YVeYRKtr9uYdBazkh4v2x3nS6p0Oub9UUo1olUKesAe
tRzOpDHB+HUIpmUCPYKLMApRrubAZpsyTuA+Q8m5tIC5OvtsWRamkMqvzISWs7f7
nx87s1e4TdAeKiDGlA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org