Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3234203d3e20323732353335.roa
File:                     3230312e39342e3135322e302f32322d3234203d3e20323732353335.roa (raw, json)
Hash identifier:          bRskLlgDv/CCJ4aFIGeFN8gr2Wmay96eN+fMRpX11LM=
Subject key identifier:   E2:73:76:AA:EB:BB:5B:21:DB:C5:F1:7D:34:82:16:46:C7:77:19:B2
Certificate issuer:       /CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
Certificate serial:       4DEE9BAB96072F63CBC6738EEF999AC7B98AC360
Authority key identifier: 3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3234203d3e20323732353335.roa
Signing time:             Sun 23 Apr 2023 16:44:56 +0000
ROA not before:           Sun 23 Apr 2023 16:39:56 +0000
ROA not after:            Sun 21 Apr 2024 16:44:56 +0000
asID:                     272535
IP address blocks:        201.94.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ee:9b:ab:96:07:2f:63:cb:c6:73:8e:ef:99:9a:c7:b9:8a:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98
        Validity
            Not Before: Apr 23 16:39:56 2023 GMT
            Not After : Apr 21 16:44:56 2024 GMT
        Subject: CN=E27376AAEBBB5B21DBC5F17D34821646C77719B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:de:5f:18:58:08:06:f4:7b:7c:e1:24:dc:
                    a5:e7:ee:85:9b:4e:06:37:cf:43:7c:b1:6c:ad:50:
                    a3:77:d9:67:ed:c6:43:f6:29:aa:b6:74:e0:ae:11:
                    60:4e:e5:05:11:3a:4d:d6:ca:dc:64:06:c7:46:2d:
                    d2:5c:94:c5:63:0f:70:1c:60:b0:65:a2:6c:ff:86:
                    34:49:b2:fe:c8:82:b5:09:69:e6:c7:03:6a:96:00:
                    f1:37:72:e9:1e:99:75:07:21:20:4d:32:26:f1:30:
                    1d:76:d9:8b:73:cf:52:4a:fb:94:7e:28:3c:ce:9f:
                    18:21:b4:ed:4e:79:c1:e6:80:c7:89:36:b0:80:c2:
                    30:97:f7:24:4c:7f:9d:99:12:a2:d7:cf:3f:16:74:
                    a9:7a:13:06:fb:5e:66:3e:6c:01:bf:5d:6e:99:97:
                    16:8b:5a:6e:50:ea:c1:0e:b0:5e:35:99:c0:85:a9:
                    be:30:29:7b:95:d6:96:c0:9a:8f:db:8f:1f:e5:09:
                    86:16:87:4a:47:12:4a:bb:76:97:cb:03:15:0d:34:
                    d6:ca:3c:23:b7:cd:30:7f:ec:f4:31:e8:4c:56:e4:
                    26:a2:c3:c1:de:eb:18:eb:69:2e:9e:a7:d1:de:e1:
                    aa:3e:5c:ac:4d:06:85:fa:09:f8:f3:ab:7e:aa:5a:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:76:AA:EB:BB:5B:21:DB:C5:F1:7D:34:82:16:46:C7:77:19:B2
            X509v3 Authority Key Identifier:
                keyid:3D:92:BD:1D:86:D9:53:1F:C6:4C:CA:64:8B:A9:AA:D0:FE:20:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D92BD1D86D9531FC64CCA648BA9AAD0FE20DC98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/3230312e39342e3135322e302f32322d3234203d3e20323732353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:90:cd:17:f0:17:d7:a2:80:05:94:1d:89:47:91:c6:96:
         80:d3:cd:89:56:72:50:6b:42:ad:53:19:00:cb:92:b2:76:78:
         7b:69:54:ca:79:a5:87:53:c5:da:b0:ad:2a:81:51:d2:16:80:
         e4:fc:95:d4:7e:96:38:41:3a:e8:72:65:86:ce:f2:aa:9f:d0:
         fa:9e:ed:4d:37:cf:19:0e:6d:2b:35:90:54:32:1b:37:17:84:
         d2:25:36:95:63:51:39:ec:89:b1:4f:02:df:09:73:0b:c5:3f:
         cf:94:6a:17:82:52:fe:f7:9e:b5:5a:eb:60:31:42:8c:b4:99:
         57:99:7c:80:03:92:2a:ca:a1:79:6e:ae:53:38:61:1a:8e:7c:
         c2:6f:96:48:9d:02:14:5c:56:7b:9a:5f:47:29:1b:55:87:65:
         a3:f5:1f:2a:97:19:87:f9:6d:27:00:cb:f4:a4:90:72:25:29:
         ee:85:9e:a1:6f:72:4f:d3:88:03:c7:e1:a2:2c:84:88:ab:65:
         91:42:3a:d8:ca:34:b3:e4:54:36:78:0c:b3:b9:e3:32:51:f5:
         78:ea:76:4a:dd:5d:95:4e:ad:cc:8e:f5:bb:39:42:13:40:4d:
         51:8f:68:20:fc:9d:1c:26:71:a5:c5:ee:d2:1a:22:e2:1b:4c:
         e7:bc:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org