Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa
File:                     3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (raw, json)
Hash identifier:          lxX01f+2x/UjlngAWpTAiovz1+y+HE76Lkuppz4YBsA=
Subject key identifier:   BC:21:86:E3:CA:6F:54:50:AF:68:88:FE:F2:7A:C5:3D:89:C6:46:A4
Certificate issuer:       /CN=2FD1962A21CE917021C7761F9A90E37DD427A749
Certificate serial:       1AC1D23DEBDADD95F500D0B4DD386F809CF9DF7E
Authority key identifier: 2F:D1:96:2A:21:CE:91:70:21:C7:76:1F:9A:90:E3:7D:D4:27:A7:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD1962A21CE917021C7761F9A90E37DD427A749.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa
Signing time:             Sun 24 Mar 2024 18:41:06 +0000
ROA not before:           Sun 24 Mar 2024 18:36:06 +0000
ROA not after:            Sun 23 Mar 2025 18:41:06 +0000
asID:                     272535
IP address blocks:        201.94.152.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c1:d2:3d:eb:da:dd:95:f5:00:d0:b4:dd:38:6f:80:9c:f9:df:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD1962A21CE917021C7761F9A90E37DD427A749
        Validity
            Not Before: Mar 24 18:36:06 2024 GMT
            Not After : Mar 23 18:41:06 2025 GMT
        Subject: CN=BC2186E3CA6F5450AF6888FEF27AC53D89C646A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:ed:f5:9c:7b:3b:2c:1d:a9:36:f5:47:83:
                    3c:ca:4d:4d:1d:09:e8:fa:01:31:7b:8a:2c:c8:4c:
                    da:e8:c7:04:80:fb:83:ec:dc:b4:2a:f0:f9:96:1c:
                    8f:04:0c:40:87:19:82:ed:f6:21:c6:cc:55:6a:bb:
                    5d:e5:e9:0d:f9:1c:cb:ca:88:51:4a:94:f7:2d:a3:
                    07:d5:f9:e7:ae:06:47:f3:ec:8f:68:fa:aa:8f:a0:
                    6b:0b:cc:a6:ab:a1:57:66:ba:31:0a:d1:bd:08:72:
                    1a:58:28:21:19:b5:5f:9f:84:4b:92:84:2a:c9:71:
                    4c:f6:d9:0d:38:6b:ae:78:03:d7:2b:02:25:02:51:
                    e0:0b:b3:26:c4:48:68:33:84:d3:3b:ff:18:55:04:
                    4b:fe:97:62:49:11:30:0a:61:68:aa:88:19:ff:4f:
                    ce:85:4c:32:a6:52:51:c1:97:69:a8:22:f1:b6:0d:
                    a3:09:1c:f1:9f:2a:ed:88:56:7f:93:58:9f:2c:f2:
                    77:97:3e:67:9c:8b:58:38:3a:ec:fa:7d:bb:58:03:
                    4d:a7:15:19:48:58:42:e6:2c:17:36:f5:7d:36:18:
                    74:ec:8d:36:5a:e7:a4:75:60:fe:5f:13:41:55:be:
                    d1:51:ef:ab:ae:95:0f:6b:e0:b7:27:14:b5:33:f3:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:86:E3:CA:6F:54:50:AF:68:88:FE:F2:7A:C5:3D:89:C6:46:A4
            X509v3 Authority Key Identifier:
                keyid:2F:D1:96:2A:21:CE:91:70:21:C7:76:1F:9A:90:E3:7D:D4:27:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/2FD1962A21CE917021C7761F9A90E37DD427A749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD1962A21CE917021C7761F9A90E37DD427A749.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/0/3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:12:2f:96:1a:66:55:54:d3:b9:7a:a9:48:8b:0f:6a:7f:27:
         95:be:42:fb:5b:bb:f6:41:26:f0:bd:75:63:cd:fc:0e:52:a3:
         f4:e2:26:12:49:b3:07:df:69:c5:e3:12:0f:e0:8b:4d:5c:bb:
         36:35:0f:7e:51:af:3a:93:84:aa:4d:6b:fd:24:1a:a0:3c:08:
         c2:2e:a6:de:83:d1:7d:2d:2a:74:c0:7f:2f:68:06:b5:5c:6e:
         a9:6c:76:f4:8d:00:d1:66:44:7f:94:8d:59:68:fa:66:d8:86:
         76:4c:69:18:79:63:ea:a1:9a:0a:53:d0:e1:fa:ae:ee:2b:bf:
         45:e4:fb:33:6d:3e:9f:14:69:85:cb:44:93:90:a3:3c:24:45:
         d5:07:3d:37:0e:28:3d:5f:4c:26:ba:60:d7:81:9f:47:2e:a7:
         35:a9:4e:25:f5:a0:e9:82:f8:bc:4c:a5:23:69:fd:76:51:bf:
         18:8b:41:33:4f:bf:98:6e:8c:fe:49:14:df:10:52:97:9e:8b:
         76:8c:a8:79:1f:29:48:01:a8:1b:8a:c3:20:4e:3e:31:47:cd:
         f9:6e:3b:77:50:e0:83:c3:17:e0:08:fb:94:bc:5a:ba:84:43:
         ac:92:06:8a:d1:31:e8:a8:f0:a4:8e:41:2f:d0:66:d7:72:a9:
         e9:05:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org