Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa
File:                     3230312e37372e3136302e302f32302d3230203d3e203238363536.roa (raw, json)
Hash identifier:          MEFoNhnoLqzjiJluGPG/0fZporeq9N3jgGpkrQyl3Dk=
Subject key identifier:   1A:F0:B4:13:B3:64:54:A8:EC:C4:54:44:B5:E5:2A:8B:FB:9E:43:FA
Certificate issuer:       /CN=4504054E9F641914E3EF0F436CCB1E127C868221
Certificate serial:       41952174A74544D49D2AD43CD64DBEB564FA4186
Authority key identifier: 45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa
Signing time:             Wed 19 Oct 2022 03:17:47 +0000
ROA not before:           Wed 19 Oct 2022 03:12:47 +0000
ROA not after:            Wed 18 Oct 2023 03:17:47 +0000
asID:                     28656
IP address blocks:        201.77.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:21:74:a7:45:44:d4:9d:2a:d4:3c:d6:4d:be:b5:64:fa:41:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Validity
            Not Before: Oct 19 03:12:47 2022 GMT
            Not After : Oct 18 03:17:47 2023 GMT
        Subject: CN=1AF0B413B36454A8ECC45444B5E52A8BFB9E43FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:f5:0d:73:d7:1b:ec:d6:d8:42:17:f4:37:
                    81:79:3f:bd:cb:a5:8a:ed:e6:27:6e:d2:35:d4:05:
                    98:a5:ed:83:df:9d:2d:80:ad:b3:f1:72:d4:40:96:
                    1c:3d:2a:7a:2b:27:56:f5:70:7f:9b:b6:90:cd:81:
                    76:e7:a4:38:f8:0d:83:15:13:44:31:1a:87:18:01:
                    e1:82:46:84:0d:71:c5:38:e2:bb:e5:88:65:14:11:
                    99:d9:61:b5:9e:25:14:05:43:9a:3b:2e:04:21:d4:
                    f0:0d:0f:43:46:7a:f4:0a:2d:ef:c8:84:c7:64:b6:
                    d9:ba:58:73:de:ce:68:a2:3c:fa:1e:71:40:3d:89:
                    9f:b6:9a:c0:49:d3:e3:a0:ce:c4:0c:44:53:18:bd:
                    6d:7a:49:69:2e:7d:a8:cc:93:75:89:3f:61:89:13:
                    0b:0e:83:0c:31:cf:82:7b:ff:20:da:8e:02:54:69:
                    a4:b9:aa:9d:99:c7:c5:0b:4f:67:9e:7f:3c:4c:51:
                    6d:ee:a5:ea:43:dd:5a:90:11:d7:d7:73:84:f7:2c:
                    eb:14:ef:1d:b2:6d:7a:a4:6a:77:5c:b8:84:85:08:
                    77:ce:e2:94:20:f0:fb:21:c5:8c:16:c9:eb:59:87:
                    dc:6c:1a:93:dc:85:c1:fa:cb:b1:24:71:e6:f8:f1:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:B4:13:B3:64:54:A8:EC:C4:54:44:B5:E5:2A:8B:FB:9E:43:FA
            X509v3 Authority Key Identifier:
                keyid:45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/3230312e37372e3136302e302f32302d3230203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:9a:dc:52:0d:41:3f:5f:38:13:11:0b:b6:42:4d:98:76:
         54:66:da:e9:a9:d5:06:b4:79:a1:47:3d:12:4f:1d:87:af:65:
         3f:d9:57:9b:57:e5:42:e0:a6:15:ef:f7:4f:d2:14:41:15:d2:
         91:2e:91:3f:99:92:be:34:8b:78:ff:47:a3:2a:92:ec:28:88:
         5a:9a:94:b1:37:41:7f:27:aa:55:f8:7e:cc:1d:0b:c3:f4:dc:
         22:63:d7:e3:de:75:61:b8:26:b6:2e:be:98:dd:77:e6:b2:1e:
         04:96:03:a5:cd:ce:31:ed:92:83:f5:30:cd:4c:e8:a3:d8:66:
         f9:98:5c:ad:4c:fc:cd:9b:ea:11:d0:27:a7:1a:12:77:43:1c:
         7c:94:fa:b3:7e:67:53:97:16:ae:10:df:cb:fa:2d:77:d7:21:
         99:f2:72:45:c4:84:ac:99:4e:61:1f:88:a6:09:ea:b6:3c:6f:
         6f:57:78:76:2b:9b:a6:24:29:c6:b8:10:b2:c8:16:73:05:46:
         81:38:db:b1:2c:cf:02:3f:d8:b9:b3:07:7b:df:ba:25:a0:97:
         06:1b:74:75:82:01:3c:12:08:62:76:f5:20:33:5f:97:e2:67:
         e1:dc:af:0a:54:f0:2c:5e:66:fb:56:b7:a2:5b:16:69:97:ec:
         58:99:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org