Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa
File:                     3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          8SPcNlZP7/4WBCNVL/gKeTGLT38y1FnpQCD9Jxyfby8=
Subject key identifier:   F7:B1:F6:8D:66:DE:F1:34:80:B8:A7:82:68:69:98:19:D7:F7:F6:C1
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       4E3137E1458416D63159AEDBCCF9246C7AE2D272
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:03:34 +0000
ROA not before:           Wed 27 Sep 2023 19:58:34 +0000
ROA not after:            Wed 25 Sep 2024 20:03:34 +0000
asID:                     61588
IP address blocks:        201.148.236.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:31:37:e1:45:84:16:d6:31:59:ae:db:cc:f9:24:6c:7a:e2:d2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:58:34 2023 GMT
            Not After : Sep 25 20:03:34 2024 GMT
        Subject: CN=F7B1F68D66DEF13480B8A78268699819D7F7F6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:f5:df:2b:37:ed:3b:e8:9a:d7:0d:e3:d4:
                    b7:83:5d:29:2a:2e:30:d1:cb:0f:df:25:fd:c6:44:
                    ba:b6:53:b3:36:20:cf:ae:6b:26:0a:26:a9:e7:e7:
                    09:b8:35:05:6f:6a:10:36:c9:55:3a:fd:3a:20:9c:
                    6b:64:d0:1f:23:cf:3f:0f:e7:22:b6:b2:06:de:81:
                    92:d8:a6:b3:1e:aa:72:47:86:04:3a:49:36:a8:4d:
                    8e:d9:2b:8d:eb:0e:ee:38:3d:5f:fe:20:98:d2:a1:
                    f9:79:bd:9a:dd:12:79:a6:b8:bd:db:be:58:be:96:
                    36:26:e8:ae:86:45:1b:9c:f1:3c:c1:62:3f:0a:d9:
                    53:36:83:ed:cd:89:ca:cd:0f:3f:90:6b:81:66:77:
                    c3:a0:ee:23:81:57:64:0b:4a:47:d8:00:29:de:11:
                    5f:34:46:d5:3a:9e:9a:25:fa:8b:87:7d:14:fb:1d:
                    9c:fa:c1:ac:84:40:7f:d5:c5:11:0a:fe:df:2a:64:
                    ce:b7:d3:84:94:f4:37:c5:22:3f:f9:6f:0e:bf:e4:
                    14:2d:c9:e7:f5:ee:70:ec:94:a4:49:07:fd:10:72:
                    2b:34:c1:a1:f4:dc:a2:89:c0:4e:ee:ca:3d:7a:c4:
                    29:a0:d0:78:eb:ee:4b:07:f5:b8:0f:c0:59:78:b0:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:F6:8D:66:DE:F1:34:80:B8:A7:82:68:69:98:19:D7:F7:F6:C1
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3230312e3134382e3233362e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:14:70:60:95:da:be:76:8a:26:ee:de:af:af:c6:79:77:29:
         2c:b6:78:01:00:46:f4:e5:3d:dc:1f:29:01:36:34:e3:c2:0f:
         e8:44:5f:71:54:11:6b:e7:c9:d5:5c:fd:94:3e:24:99:97:11:
         e3:27:45:9d:d4:d3:62:0f:24:52:56:e7:c3:b2:36:58:95:51:
         f8:93:b8:fb:4e:2f:4c:58:c0:3f:3c:e9:e5:71:43:b3:f3:69:
         41:08:2c:e1:38:e1:25:f7:ba:8d:6c:ee:0a:10:7c:d6:17:6d:
         fa:04:0e:ac:b2:11:65:98:e7:7f:b1:d4:b5:bf:48:1b:cb:00:
         4f:ca:2b:3b:b7:08:2d:af:c5:8a:b8:f3:5c:05:d4:11:d6:c5:
         88:7f:2b:4d:b9:74:1a:a8:2e:15:2d:f8:21:11:5c:4f:a5:80:
         0f:23:2c:d8:72:16:67:bc:46:34:44:d9:7a:ac:e3:7c:57:00:
         43:62:4f:a3:20:c1:08:a3:e6:66:ef:44:e7:cf:f8:40:ff:e4:
         87:64:e8:18:d3:3c:9d:a9:ef:5f:67:1c:e0:a9:2d:3b:48:83:
         f6:16:48:98:86:ea:91:a0:c8:28:cf:79:13:c2:2c:2f:89:a2:
         5f:69:b7:a5:e4:bc:45:2f:d4:52:fa:d7:cf:e6:38:3c:61:e9:
         53:16:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org