Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32332d3233203d3e203631363936.roa
File:                     3230312e3134302e3235302e302f32332d3233203d3e203631363936.roa (raw, json)
Hash identifier:          P32Nv141raN+KXb85rZtzPESSRr+EBaqczZqi/Fz+Es=
Subject key identifier:   E2:DF:96:41:9C:9F:C6:B6:60:48:3A:B7:AE:1B:0B:CD:40:11:38:A6
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       2933C02F87261D0FB2261A73BE9FBAA3421B53D0
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32332d3233203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:02 +0000
ROA not before:           Fri 06 Oct 2023 19:42:02 +0000
ROA not after:            Fri 04 Oct 2024 19:47:02 +0000
asID:                     61696
IP address blocks:        201.140.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:c0:2f:87:26:1d:0f:b2:26:1a:73:be:9f:ba:a3:42:1b:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:02 2023 GMT
            Not After : Oct  4 19:47:02 2024 GMT
        Subject: CN=E2DF96419C9FC6B660483AB7AE1B0BCD401138A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:be:74:62:3e:e6:31:f1:6e:12:1a:5d:a5:e5:
                    94:53:d5:51:5c:98:50:c7:66:15:c9:31:fc:75:65:
                    68:b7:09:e5:bb:e1:4a:cb:72:b9:83:0b:4a:4f:d0:
                    2e:74:ae:5b:81:fa:73:b9:bf:13:f8:29:36:df:3f:
                    1e:12:48:d2:f6:17:62:06:4a:31:b4:c5:84:ab:d4:
                    df:23:c7:93:cd:a8:f0:16:68:4d:42:13:4c:f7:86:
                    ed:ed:33:11:57:a3:93:b7:74:c6:16:90:21:f6:30:
                    30:0a:c6:de:e2:90:15:d3:d4:3c:62:05:0d:50:b0:
                    fd:90:d1:3a:0c:48:1b:01:9b:8c:ea:59:a1:a5:a6:
                    60:09:b6:a8:eb:c2:c2:12:ea:67:7f:94:f6:e2:ef:
                    e9:b4:b9:0a:ce:7e:47:1a:d7:c2:1c:52:6f:b7:e7:
                    7e:6a:b6:8c:f8:d2:44:00:ee:86:e6:48:c5:dd:cb:
                    42:b2:8d:7e:3d:f0:98:02:d5:1f:57:0e:09:52:85:
                    6c:01:a1:b9:08:2c:60:ba:eb:4d:a2:9d:14:fc:a5:
                    a2:f8:76:a9:77:15:61:ac:55:95:9f:81:57:6c:86:
                    2b:ee:e0:32:1f:60:45:69:6e:be:65:34:7e:d2:38:
                    f7:21:a0:f9:30:05:21:7f:3d:ca:04:b7:63:86:fe:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:96:41:9C:9F:C6:B6:60:48:3A:B7:AE:1B:0B:CD:40:11:38:A6
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235302e302f32332d3233203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:78:04:f4:e1:ee:b2:cc:95:fa:6b:79:23:64:40:66:25:5c:
         a2:df:6b:be:85:42:52:5e:98:0c:c2:64:e3:59:ed:75:c2:8f:
         2f:3a:4f:cd:41:b6:ac:a3:ae:89:1d:01:5c:fe:f4:62:b2:65:
         5f:ed:ad:3f:f8:18:b1:e6:e8:73:a1:37:72:c0:b5:32:fe:23:
         d5:b3:c2:a2:25:96:84:a0:d3:ee:b3:07:24:27:11:58:67:ee:
         34:cb:ec:62:ae:81:4c:08:c2:15:f7:51:0d:7b:35:81:40:2d:
         ed:8a:97:b1:95:3a:2d:d5:f3:89:81:67:3a:87:dc:3f:c3:e9:
         03:86:eb:5e:3a:6b:4a:61:54:46:84:a6:62:fa:1f:b9:e3:d7:
         69:59:6f:4f:7a:09:98:fd:16:60:9f:3f:fa:13:b9:75:14:38:
         25:dc:c7:e3:6c:09:f5:10:72:e7:8e:ac:28:fe:46:99:c8:e1:
         d1:0f:66:3f:d1:45:f5:19:29:5d:b4:eb:32:e8:7c:41:1d:38:
         4f:00:92:d7:3c:39:eb:82:d7:91:10:28:9f:86:a2:da:8c:3c:
         38:9f:89:cf:b0:d6:03:e6:db:e9:ab:ec:33:d1:ff:f2:1c:54:
         98:65:a0:fa:ea:7d:8c:bb:38:91:27:c5:f0:c8:32:b5:95:a2:
         a1:47:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org