Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa
File:                     3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa (raw, json)
Hash identifier:          g/mUC0Bf5hkMrVV9dsFXDAhuzG01/rCoYlp/0ZNTkkg=
Subject key identifier:   82:6A:CD:6F:02:70:D5:D2:1A:46:E5:B7:1D:B3:F7:84:A6:BC:64:09
Certificate issuer:       /CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
Certificate serial:       3484AECA4C03045CAA9AEFED3E7A4B34B7F46E
Authority key identifier: 21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa
Signing time:             Mon 22 Jan 2024 12:12:20 +0000
ROA not before:           Mon 22 Jan 2024 12:07:20 +0000
ROA not after:            Mon 20 Jan 2025 12:12:20 +0000
asID:                     267549
IP address blocks:        201.182.236.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:84:ae:ca:4c:03:04:5c:aa:9a:ef:ed:3e:7a:4b:34:b7:f4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212F087EBCC43B9BA592104DEB42E5A1FFA94122
        Validity
            Not Before: Jan 22 12:07:20 2024 GMT
            Not After : Jan 20 12:12:20 2025 GMT
        Subject: CN=826ACD6F0270D5D21A46E5B71DB3F784A6BC6409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:7d:6c:59:c7:d6:3e:94:d6:5f:32:63:2c:
                    93:79:d6:d4:c6:49:87:92:be:47:0c:4d:01:c4:89:
                    c3:d5:9a:34:5a:73:9b:ca:58:30:4b:4d:69:d0:3e:
                    d6:45:04:9b:7e:18:78:58:ed:f2:3a:21:82:52:4b:
                    64:e7:bf:1f:88:3e:6f:53:37:9e:cd:93:3b:0e:31:
                    7f:61:46:bb:c6:ff:42:1c:81:cb:76:9d:f0:a8:a2:
                    d0:2a:7a:af:cf:32:e5:87:35:cd:3f:70:63:bc:bb:
                    0a:ad:07:d5:86:04:4e:57:1a:62:b6:37:07:32:fe:
                    aa:b3:90:da:ea:f5:87:1e:25:94:ce:7b:da:59:ef:
                    9a:c2:d1:1d:87:ee:e4:ed:92:3f:7d:7c:36:a8:5e:
                    f9:cf:28:57:1f:c7:0f:33:1a:c5:bf:2c:b5:f8:4e:
                    42:2f:4f:2c:f7:4c:ea:61:51:ed:57:0f:54:1d:30:
                    4b:60:b2:07:0c:90:10:4b:7e:5e:16:61:c5:c9:1d:
                    56:92:50:45:a5:a4:95:ad:cd:a8:95:13:8e:3f:59:
                    88:65:4a:1f:b2:fe:9f:6e:98:0f:d6:2f:e7:49:03:
                    a0:b0:14:ed:2f:7f:69:00:97:09:94:1e:aa:63:d0:
                    c4:92:3e:67:04:25:fd:be:b9:b6:17:9f:fd:96:43:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6A:CD:6F:02:70:D5:D2:1A:46:E5:B7:1D:B3:F7:84:A6:BC:64:09
            X509v3 Authority Key Identifier:
                keyid:21:2F:08:7E:BC:C4:3B:9B:A5:92:10:4D:EB:42:E5:A1:FF:A9:41:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/212F087EBCC43B9BA592104DEB42E5A1FFA94122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/3230312e3138322e3233362e302f32322d3332203d3e20323637353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:be:cb:22:ee:22:e9:88:6c:d5:c5:eb:f1:e3:ec:f5:fd:
         c0:2f:71:3b:6c:c6:81:48:1f:f7:34:e1:52:37:b5:72:87:83:
         7a:bc:07:ea:f0:40:6f:31:2e:32:9b:69:4b:25:d8:13:7a:b6:
         bb:50:38:da:24:b1:06:29:6f:91:24:08:01:f7:b0:e5:68:f1:
         14:ad:f5:9e:e0:8a:43:e1:e6:3f:87:9a:8e:f3:79:33:88:cd:
         42:77:df:ec:4f:e9:49:8d:a6:23:5c:54:02:12:53:64:64:01:
         ca:f5:61:12:d6:ce:e1:a5:d3:8e:00:ce:fc:ed:2e:bc:6c:55:
         7f:06:b8:df:d6:cb:e8:98:90:cf:a2:26:76:f7:4a:97:0d:c9:
         1d:9f:ec:37:cc:d7:a4:17:52:ec:71:8b:5f:1e:2f:68:be:c1:
         f5:47:be:54:23:0c:8f:17:1c:e7:8b:c8:67:30:38:df:2d:2a:
         03:d0:8c:05:ef:b1:34:ed:36:36:25:71:ef:6a:33:f9:e3:a2:
         25:9c:e2:4e:a0:b3:23:60:d8:cf:ba:6c:33:a7:5f:08:b9:ab:
         f3:be:35:49:cb:a1:71:67:cb:4e:0c:19:36:dc:cf:e6:f3:af:
         2f:d3:fd:28:74:37:b8:50:0a:04:42:8d:bd:b4:d0:5c:4e:64:
         6a:de:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:17 2024 by rpki-client on console-ams.rpki-client.org