Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235312e302f32342d3234203d3e203631363936.roa
File:                     3230312e3134302e3235312e302f32342d3234203d3e203631363936.roa (raw, json)
Hash identifier:          8tP2UAtR0/Xx9a6EU9Imxmh6qX0B/erUh6VO2NLxNkg=
Subject key identifier:   1B:9D:18:4F:68:4A:EA:AA:70:7F:5E:75:05:56:B3:AC:F4:6A:33:2D
Certificate issuer:       /CN=C3C02E9BA820D2E706528BC873C80443D02CE667
Certificate serial:       639AF2DFB7A6FED1C733263A58DCBFDCC19D42D4
Authority key identifier: C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235312e302f32342d3234203d3e203631363936.roa
Signing time:             Fri 06 Oct 2023 19:47:08 +0000
ROA not before:           Fri 06 Oct 2023 19:42:08 +0000
ROA not after:            Fri 04 Oct 2024 19:47:08 +0000
asID:                     61696
IP address blocks:        201.140.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9a:f2:df:b7:a6:fe:d1:c7:33:26:3a:58:dc:bf:dc:c1:9d:42:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C02E9BA820D2E706528BC873C80443D02CE667
        Validity
            Not Before: Oct  6 19:42:08 2023 GMT
            Not After : Oct  4 19:47:08 2024 GMT
        Subject: CN=1B9D184F684AEAAA707F5E750556B3ACF46A332D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:17:3a:9d:0a:77:db:c8:8a:15:8c:fc:8f:
                    20:5c:27:d1:4a:05:ab:d4:f5:2c:1c:ac:12:0c:ed:
                    91:9f:35:3f:c4:90:2f:53:dd:e2:dd:91:c0:23:91:
                    16:1d:93:b6:88:e2:8e:7b:c0:25:3b:c6:23:6e:c0:
                    aa:f7:95:15:4e:4e:46:6a:f9:f2:0f:82:61:77:a4:
                    64:de:3f:36:e6:09:18:8e:aa:54:46:10:de:b9:7e:
                    c9:53:fe:de:44:06:b2:16:fa:84:d7:55:08:08:8b:
                    35:30:52:dc:36:e8:79:ee:fe:9f:f3:15:c0:de:d3:
                    dc:b4:bc:d9:1c:8b:c1:e7:e9:22:dc:02:fa:f5:47:
                    f2:f4:57:97:4a:26:bc:51:68:04:4d:b3:97:da:9f:
                    6e:98:87:d4:49:32:3c:88:b7:c4:25:c0:27:ad:f8:
                    a1:b1:a0:05:66:f4:14:e0:7c:2f:79:3c:11:fc:50:
                    df:04:0b:83:7c:3c:7a:a3:f1:92:d3:32:84:39:f1:
                    f7:92:c2:c6:39:7d:58:8f:6c:dc:76:b2:72:d8:a8:
                    ac:ec:88:bc:b3:fd:6a:94:ce:bc:78:8b:db:e4:eb:
                    c1:a1:5d:52:0c:59:91:dd:22:52:09:86:be:f0:53:
                    96:7c:32:e5:59:98:18:50:b0:22:80:3c:54:81:4f:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:18:4F:68:4A:EA:AA:70:7F:5E:75:05:56:B3:AC:F4:6A:33:2D
            X509v3 Authority Key Identifier:
                keyid:C3:C0:2E:9B:A8:20:D2:E7:06:52:8B:C8:73:C8:04:43:D0:2C:E6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/C3C02E9BA820D2E706528BC873C80443D02CE667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3C02E9BA820D2E706528BC873C80443D02CE667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/3230312e3134302e3235312e302f32342d3234203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:95:38:0a:3e:72:2d:73:ee:3c:54:b9:95:69:de:8e:b7:d3:
         ad:b2:80:ee:da:97:e4:80:9d:c6:cd:95:d0:1a:3a:b3:9f:6d:
         f0:99:ef:54:5e:a8:1b:51:8e:45:0e:b6:13:72:01:9f:36:97:
         14:cf:8c:eb:65:be:97:b4:8b:8d:0e:ba:0d:75:1b:14:a9:24:
         17:39:39:68:dc:97:98:38:df:3f:fb:5d:8a:3f:b9:78:c2:7e:
         05:d4:de:2f:76:d3:8e:00:29:4c:fb:d6:d0:4c:74:e3:c2:36:
         4b:61:1c:b4:32:39:57:a0:41:47:15:a5:05:ca:31:d7:21:13:
         ec:fe:80:66:54:05:02:6a:d5:0f:1a:0a:c3:03:94:7c:5c:f3:
         e9:64:87:dd:32:29:19:65:33:93:37:45:a9:2d:a3:39:27:c8:
         74:09:0d:f7:0e:57:20:66:7a:c5:ad:a5:b3:29:65:fe:6c:06:
         a5:90:af:ba:5e:d0:75:6e:fc:3d:1b:b4:12:62:6d:42:9a:8e:
         b1:b7:62:dc:98:5a:f7:4d:69:9c:3a:42:39:2d:e9:3e:30:37:
         f8:2f:27:25:64:28:ee:82:2d:16:bc:32:3d:a1:d0:23:67:4c:
         2c:15:3a:a8:a7:4e:23:84:6b:83:2b:5e:e4:22:d2:5e:ec:77:
         cb:18:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org