Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          DipgwmaHl5K5QzI7FNoaO/EdT4aNHbKjGw+bbCCxNIE=
Subject key identifier:   92:1B:E1:06:6F:C3:47:37:51:B9:59:19:C1:C0:16:01:7C:03:D4:40
Certificate issuer:       /CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
Certificate serial:       599B91A75D849A72CD587305391D11F34FE3838A
Authority key identifier: AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa
Signing time:             Tue 12 Mar 2024 16:33:08 +0000
ROA not before:           Tue 12 Mar 2024 16:28:08 +0000
ROA not after:            Tue 11 Mar 2025 16:33:08 +0000
asID:                     267511
IP address blocks:        201.182.100.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:91:a7:5d:84:9a:72:cd:58:73:05:39:1d:11:f3:4f:e3:83:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
        Validity
            Not Before: Mar 12 16:28:08 2024 GMT
            Not After : Mar 11 16:33:08 2025 GMT
        Subject: CN=921BE1066FC3473751B95919C1C016017C03D440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:0a:1a:f1:f7:32:71:2a:0e:51:cb:81:76:
                    6b:54:ac:b9:5f:d9:eb:56:5e:68:72:6f:e4:f4:db:
                    3c:a6:e7:19:8e:82:2a:2b:14:d3:fc:5d:28:7b:7f:
                    cf:c6:85:9b:ca:53:9c:fd:ca:c0:5c:1b:9f:86:35:
                    fb:48:49:05:d7:46:ca:d6:9c:d6:2a:00:ed:22:c3:
                    27:83:e7:34:70:7b:56:96:8c:28:65:45:31:33:de:
                    cc:1d:1b:64:59:e1:a0:15:25:cd:34:e0:92:db:7d:
                    65:cf:40:42:12:0e:34:a7:63:30:38:46:4e:d1:c8:
                    02:f3:e5:77:90:cf:37:f8:77:5b:bd:de:5c:db:73:
                    66:72:fd:f9:72:0c:d1:0b:95:26:cb:14:92:4b:e8:
                    b1:72:fc:ad:d7:6e:c1:26:8d:e0:04:8a:75:90:29:
                    4b:d2:a8:82:7d:fc:f8:c3:7f:4e:9a:7a:a0:29:27:
                    7b:16:9f:22:49:59:3c:86:af:30:4d:8f:70:1f:86:
                    33:d3:d7:c5:0b:b7:69:c7:db:7c:7b:91:d7:12:14:
                    dd:c6:01:0b:eb:51:1e:44:7c:fe:c0:2d:3d:db:ec:
                    e2:62:f3:bd:df:11:17:27:54:91:9b:08:f8:24:a2:
                    19:3c:18:a2:b5:be:8c:8b:c7:f7:f9:ff:2d:f2:e9:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:E1:06:6F:C3:47:37:51:B9:59:19:C1:C0:16:01:7C:03:D4:40
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:27:26:dd:92:13:4f:a9:91:61:cc:9e:f2:b6:e5:68:58:96:
         a0:3c:93:3e:1e:31:03:3e:02:6f:ad:d9:0a:df:57:9a:60:63:
         3b:ec:0e:50:43:29:14:33:b1:4f:fd:e4:ba:e6:f4:5d:77:86:
         ac:4c:32:31:49:b7:8c:dc:3f:2a:5b:bb:69:0e:28:f2:85:50:
         ca:c6:32:f0:0c:e6:32:3f:39:42:30:8b:04:f9:fc:af:8b:69:
         67:5a:86:90:6a:67:51:a3:f3:7e:72:5c:43:35:29:3b:cd:09:
         52:0c:02:6c:09:48:50:bd:a0:a3:db:82:8c:6b:63:75:1c:f3:
         af:e1:14:c6:dd:a6:6f:86:78:7c:fc:d3:4b:c0:50:f5:17:18:
         67:02:7e:5d:8e:e6:c2:4b:be:d2:af:99:b0:6c:45:5b:ce:00:
         74:f7:6c:3d:78:b6:46:d9:67:46:ab:94:1b:b0:ee:e0:a9:b7:
         51:b8:7e:96:cd:85:09:6c:16:fe:8d:76:94:70:8a:1a:02:03:
         60:58:0c:b3:e5:38:2c:7d:22:9c:aa:d9:5e:f5:01:b6:94:b5:
         ef:97:25:f9:26:87:8c:c3:eb:95:67:81:bb:7a:75:5d:7d:8e:
         06:50:20:82:e2:5d:a7:dc:85:81:1a:8f:59:f8:10:4f:8d:1c:
         4a:11:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org