Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
File:                     3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (raw, json)
Hash identifier:          bsITVlyBpRuSNug8QTCgv8fu6WgfGQwzOi5DiMBRTrM=
Subject key identifier:   C9:8A:2F:24:FB:BD:9A:4F:6E:41:DD:88:50:CD:66:46:6A:F6:B1:82
Certificate issuer:       /CN=22D207B390CFA59F780C523D88AB044E809E9D96
Certificate serial:       79CE468E41B000BBD9E17BB4FE43026C067D0B1B
Authority key identifier: 22:D2:07:B3:90:CF:A5:9F:78:0C:52:3D:88:AB:04:4E:80:9E:9D:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D207B390CFA59F780C523D88AB044E809E9D96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
Signing time:             Thu 18 May 2023 17:28:34 +0000
ROA not before:           Thu 18 May 2023 17:23:34 +0000
ROA not after:            Thu 16 May 2024 17:28:34 +0000
asID:                     272435
IP address blocks:        201.216.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ce:46:8e:41:b0:00:bb:d9:e1:7b:b4:fe:43:02:6c:06:7d:0b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D207B390CFA59F780C523D88AB044E809E9D96
        Validity
            Not Before: May 18 17:23:34 2023 GMT
            Not After : May 16 17:28:34 2024 GMT
        Subject: CN=C98A2F24FBBD9A4F6E41DD8850CD66466AF6B182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:a1:9c:fc:6a:19:07:17:2a:a4:25:ba:c7:
                    3b:95:26:b8:ee:e9:ff:32:f6:8a:f2:2b:0d:aa:76:
                    09:74:a0:9c:a4:26:ec:db:9d:8c:cb:10:41:87:3a:
                    71:71:f7:a7:3c:f3:24:88:eb:03:ee:e9:18:17:2f:
                    a3:b1:b7:24:7e:9f:d7:52:60:23:d6:4c:5d:7a:5e:
                    cb:88:63:b7:2c:c5:06:82:ee:d5:1d:2f:06:04:60:
                    30:28:1a:f5:c9:2a:d8:43:17:04:42:c4:bf:5a:c1:
                    77:90:35:ca:7a:80:9f:79:02:c1:52:f0:48:18:7e:
                    c8:f0:c8:20:f1:ae:5f:ce:23:05:bc:c5:69:55:1b:
                    c8:6d:45:87:a8:60:ca:87:17:06:a8:8a:68:61:e3:
                    77:33:8f:4e:2c:24:aa:b4:1b:7a:52:32:76:95:20:
                    06:13:83:55:bb:73:db:36:83:8f:41:2d:2f:03:6b:
                    e0:35:8d:ba:3f:ca:bd:3a:0c:5f:87:81:75:59:32:
                    2f:73:df:a9:f2:e5:a3:d0:a2:a3:72:9f:63:b1:79:
                    b9:d4:b4:49:1d:c1:fa:a8:cc:63:1f:12:df:c2:5d:
                    e9:7c:94:5c:4b:38:90:cd:74:08:a2:67:9e:b7:ae:
                    14:2a:f9:18:6a:2f:30:cf:1c:2f:d8:55:7b:1b:cc:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8A:2F:24:FB:BD:9A:4F:6E:41:DD:88:50:CD:66:46:6A:F6:B1:82
            X509v3 Authority Key Identifier:
                keyid:22:D2:07:B3:90:CF:A5:9F:78:0C:52:3D:88:AB:04:4E:80:9E:9D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/22D207B390CFA59F780C523D88AB044E809E9D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/22D207B390CFA59F780C523D88AB044E809E9D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/1/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:89:85:87:74:e7:4d:d5:62:07:04:1d:9e:8a:80:f8:37:
         86:ec:4f:cf:0d:5c:29:8d:83:b1:e0:b8:76:e6:34:7a:c6:8a:
         b5:2b:39:bc:df:48:85:98:f1:e0:86:aa:d2:4a:33:9b:f4:e3:
         5c:2d:73:ae:26:a7:e1:d4:06:df:27:04:6f:56:f6:4b:36:3e:
         d1:98:53:47:bf:bd:62:93:99:8b:2b:bd:ab:8f:e4:ba:b2:17:
         46:9a:5a:2d:bc:7b:da:08:79:28:60:8e:e3:cd:a0:e2:02:3e:
         58:da:0f:6b:79:3a:33:d6:42:2d:4d:58:42:1a:81:3e:16:3b:
         93:d6:0e:05:07:fd:96:81:07:f3:aa:d9:36:91:28:9b:3b:3e:
         1f:a2:66:b7:9b:51:01:e4:66:7f:29:0b:2e:c8:cb:af:90:11:
         8e:dd:c2:e0:7e:45:64:72:69:8f:6c:63:27:cd:3d:28:a5:d0:
         60:e2:78:42:9a:ce:23:3a:a6:01:d4:fc:8b:de:a3:c4:01:83:
         72:e2:6a:68:a2:ce:3d:7d:b3:c2:dc:3a:00:a3:b1:2d:92:f5:
         5e:f9:98:3a:84:c5:1b:56:83:86:5a:66:d5:12:d3:47:c8:39:
         97:dc:34:a7:0b:d2:cb:62:eb:e6:29:4c:db:7d:f5:ff:83:70:
         77:e2:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org