Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
File:                     3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          JdT6y3Gus1KVfKuBHDPz/z4k+UeMoCewvfxqmteE9CQ=
Subject key identifier:   4D:CE:0A:31:95:C2:72:D5:E3:08:FD:1B:6B:99:EA:04:FD:6F:FB:2B
Certificate issuer:       /CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
Certificate serial:       7CDA4A8EF35C0987C5E41D190AB6290A110DBA11
Authority key identifier: 5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
Signing time:             Thu 04 Apr 2024 05:19:58 +0000
ROA not before:           Thu 04 Apr 2024 05:14:58 +0000
ROA not after:            Thu 03 Apr 2025 05:19:58 +0000
asID:                     271573
IP address blocks:        201.131.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:4a:8e:f3:5c:09:87:c5:e4:1d:19:0a:b6:29:0a:11:0d:ba:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3F0107992B5594AAC8127D2D4984343707D1A1
        Validity
            Not Before: Apr  4 05:14:58 2024 GMT
            Not After : Apr  3 05:19:58 2025 GMT
        Subject: CN=4DCE0A3195C272D5E308FD1B6B99EA04FD6FFB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:35:28:46:7d:3b:ea:f9:8b:5a:0d:38:3b:
                    d2:90:43:58:2d:20:84:b9:ff:a5:2c:dd:74:26:a4:
                    e2:b9:c1:b2:ec:d3:ec:18:20:be:18:74:5d:b6:06:
                    7d:32:54:17:d0:80:0c:c9:63:f6:05:f3:9e:d3:61:
                    2b:91:2b:5c:e4:c2:ad:ff:91:09:15:9b:07:7b:0a:
                    33:51:b9:96:12:15:1b:dd:c1:78:ed:77:b8:cd:a4:
                    65:48:f3:5d:68:88:d9:9b:0b:52:cd:d8:22:32:a7:
                    3d:0b:fc:fc:32:73:3f:fa:d2:b2:6d:64:c2:35:09:
                    a4:7c:e9:ec:d0:75:1f:2a:6d:56:e7:fa:73:68:16:
                    43:9c:7f:c6:96:b6:81:9d:81:5f:cb:0b:25:1e:a3:
                    7a:dc:c7:37:f2:76:22:c5:76:28:c7:79:e8:60:e6:
                    e6:99:b4:28:d3:93:ac:0a:94:6b:f6:d3:85:b2:e4:
                    1b:5a:d8:0c:3e:dd:a3:5a:76:10:59:f1:fe:03:b1:
                    88:37:6d:c2:fb:06:5a:8b:f8:28:3e:e8:f7:10:82:
                    6d:07:44:47:8d:d6:d0:70:c6:9b:72:1a:cc:fb:5a:
                    20:0b:fb:a3:5c:48:42:18:36:63:1e:d3:9e:33:e8:
                    3f:d8:db:93:74:34:b7:ef:95:4f:66:ad:2d:ad:30:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:0A:31:95:C2:72:D5:E3:08:FD:1B:6B:99:EA:04:FD:6F:FB:2B
            X509v3 Authority Key Identifier:
                keyid:5A:3F:01:07:99:2B:55:94:AA:C8:12:7D:2D:49:84:34:37:07:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3F0107992B5594AAC8127D2D4984343707D1A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/1/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:22:80:34:92:00:9b:f2:6f:18:73:e1:3c:cb:92:3a:60:fe:
         4e:6f:cb:1a:28:99:04:4b:37:8c:f9:2b:c8:d5:fd:61:63:1b:
         f0:74:ed:5f:c0:c8:06:46:ca:f5:a1:1f:98:3f:6d:20:26:2f:
         81:96:30:20:b3:9a:41:6b:fb:a6:e7:9f:c5:db:aa:92:05:fd:
         24:0c:5d:b9:99:cd:f0:a3:10:73:dd:70:9b:38:30:54:20:aa:
         94:8f:ae:9d:a7:b2:e9:6b:b0:29:1b:15:12:f4:48:bf:33:1f:
         3f:03:ea:bf:1c:20:f4:f9:bd:70:25:f5:4c:1b:fe:32:9a:8e:
         94:3d:b2:96:19:5d:f3:dd:ad:47:06:dc:b0:94:cc:97:f2:98:
         cd:3a:38:28:cb:71:e6:bc:db:7c:3d:14:b2:5e:ca:bc:54:e6:
         ab:e5:2b:b0:3c:40:cd:21:0c:05:91:2f:05:29:39:ff:3d:bd:
         c4:1e:d9:40:93:3d:b3:28:4d:3b:f3:aa:cd:2f:d2:35:81:b1:
         7d:4d:64:4f:86:be:fd:9c:a1:d6:60:ff:7e:ee:ab:fd:7a:6e:
         5e:6b:07:ec:3c:52:22:80:7d:3b:62:6b:af:2e:59:55:ca:60:
         a6:41:18:29:f6:a4:6b:c5:ae:2d:e0:35:79:3a:15:98:da:19:
         7a:c1:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org