Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa
File:                     3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          0WGORnQA3kaOlJ1/8whWNJ80STDlm8VULX5wKooyntg=
Subject key identifier:   75:1D:2D:E1:4F:95:FB:83:B2:B0:2C:F5:C0:A1:37:7F:E5:53:4A:99
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       19AFEB9C76DFADE263BFE85731D71071C3B3D5C6
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:41 +0000
ROA not before:           Fri 03 Mar 2023 12:14:41 +0000
ROA not after:            Fri 01 Mar 2024 12:19:41 +0000
asID:                     53059
IP address blocks:        201.148.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:eb:9c:76:df:ad:e2:63:bf:e8:57:31:d7:10:71:c3:b3:d5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:41 2023 GMT
            Not After : Mar  1 12:19:41 2024 GMT
        Subject: CN=751D2DE14F95FB83B2B02CF5C0A1377FE5534A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:4e:6f:77:4d:b3:56:50:88:45:22:86:5d:
                    ae:26:4e:da:01:59:d0:5c:9e:9f:13:f2:e0:eb:33:
                    74:e4:50:37:6e:2d:b9:d5:85:1b:b5:c7:cb:8b:39:
                    79:07:ac:3b:df:73:e1:20:63:1c:14:d7:de:72:84:
                    4c:ed:a2:8c:e9:e5:41:32:94:aa:e8:80:18:3b:38:
                    f0:47:bb:de:55:e6:a2:4c:c0:6c:21:5e:ac:8b:1a:
                    2d:62:90:38:c8:3d:c9:b5:8b:f6:8f:5d:af:22:3d:
                    fd:b6:f9:fc:90:27:ae:65:83:9c:26:fc:90:e3:72:
                    b0:98:c8:59:2c:e7:77:dc:44:cc:45:19:d0:38:a5:
                    bd:e7:a0:cc:41:da:35:47:46:62:63:eb:df:7c:85:
                    5c:de:cb:9c:ce:b5:a0:92:b9:d4:7d:83:d2:ea:2b:
                    0b:e4:8f:fc:ac:ea:97:96:e6:42:16:f3:f8:92:ef:
                    f9:c3:9d:06:05:e5:da:f5:11:37:82:74:01:32:c2:
                    98:41:be:54:3b:94:81:05:81:e0:c7:c9:64:1a:21:
                    5b:00:57:0a:7f:72:bb:af:64:9f:43:fc:83:a8:e7:
                    6d:79:f5:88:6b:6b:d8:de:ff:5e:8a:11:84:c9:68:
                    8e:1a:e9:fb:90:ce:f0:bd:06:02:3e:fe:a4:6f:a5:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1D:2D:E1:4F:95:FB:83:B2:B0:2C:F5:C0:A1:37:7F:E5:53:4A:99
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:fc:8d:0f:d7:4d:0c:2f:66:db:99:35:cd:4c:86:94:be:
         06:0b:3c:34:5c:de:97:86:21:15:8e:2f:86:ac:e1:c8:4c:7a:
         49:3a:0e:73:87:ab:98:2f:3f:8b:c4:28:5b:93:13:1e:ee:44:
         aa:22:50:4a:33:81:08:6c:5a:78:42:3a:66:66:7c:f6:89:5f:
         1a:29:2c:fc:ee:51:50:d8:6c:31:25:7c:33:14:ad:9a:16:32:
         06:79:2a:4e:fb:fc:c6:4f:d4:26:cd:08:37:32:37:2b:24:2d:
         c3:80:aa:58:88:20:09:52:75:77:80:12:9b:08:ab:81:69:55:
         ec:e1:39:7b:94:da:15:76:c8:cc:b6:ab:2d:32:d2:d0:25:47:
         f5:ea:a6:5c:82:70:8d:45:b0:1f:9b:15:5d:d6:b4:57:fd:db:
         59:81:0e:44:36:f3:56:51:76:06:66:02:51:fc:91:01:60:87:
         af:ff:4a:c9:49:1f:5a:b5:fa:f5:57:95:73:9a:56:5d:23:1d:
         08:20:b2:87:46:b2:0f:73:1c:89:f4:62:7b:94:5f:23:2f:c4:
         34:98:b0:45:f6:2d:d7:bc:d2:6b:c9:53:e7:e2:0e:a6:ab:a8:
         35:63:e2:26:f7:ce:a3:bd:5d:85:38:8a:64:69:43:17:10:c1:
         c7:6a:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org