Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/3230312e37312e3231362e302f32322d3234203d3e20323731313435.roa
File:                     3230312e37312e3231362e302f32322d3234203d3e20323731313435.roa (raw, json)
Hash identifier:          LdUZcGUY4OoO97B0PfWFZquGLKgsgJYaF/OKH+u0pPY=
Subject key identifier:   C8:D2:6D:7F:58:EF:7B:31:32:48:0D:A7:00:E7:ED:A4:23:FC:75:A1
Certificate issuer:       /CN=15D3F36B8922FF349E1B6AACACB04A8040E743CA
Certificate serial:       7AC4B154F6E8548EAA883380DBEB4EF419C0C746
Authority key identifier: 15:D3:F3:6B:89:22:FF:34:9E:1B:6A:AC:AC:B0:4A:80:40:E7:43:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/3230312e37312e3231362e302f32322d3234203d3e20323731313435.roa
Signing time:             Thu 07 Sep 2023 18:56:53 +0000
ROA not before:           Thu 07 Sep 2023 18:51:53 +0000
ROA not after:            Thu 05 Sep 2024 18:56:53 +0000
asID:                     271145
IP address blocks:        201.71.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c4:b1:54:f6:e8:54:8e:aa:88:33:80:db:eb:4e:f4:19:c0:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D3F36B8922FF349E1B6AACACB04A8040E743CA
        Validity
            Not Before: Sep  7 18:51:53 2023 GMT
            Not After : Sep  5 18:56:53 2024 GMT
        Subject: CN=C8D26D7F58EF7B3132480DA700E7EDA423FC75A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:68:84:d0:c9:1a:0a:97:69:1d:90:65:3a:
                    0e:61:90:85:f5:d5:a5:6e:27:3c:66:3c:96:d8:38:
                    e5:0d:74:8c:20:c8:33:96:5e:2c:40:cf:33:b1:e5:
                    93:1c:c5:18:43:b3:db:56:98:31:36:1e:8c:3e:39:
                    7c:d5:2c:7c:43:dd:4a:9f:df:f7:95:a4:8d:3b:57:
                    a4:10:3e:d7:cd:32:8b:f5:b8:c2:a2:0f:13:81:d6:
                    56:d7:37:6a:bf:8e:86:6c:a0:bf:f4:43:a4:c9:7a:
                    57:8b:38:7d:42:4c:14:90:b4:31:0f:06:ad:2d:44:
                    96:08:9c:84:8b:e9:d7:43:64:c5:af:c4:21:fe:e5:
                    a6:78:be:10:cf:d3:aa:9a:f0:ea:44:d7:f9:96:9e:
                    7c:3b:c4:67:c0:98:ed:0e:a5:c8:8e:c9:f7:e1:f3:
                    46:f2:f9:80:9e:85:5d:7e:33:9f:e6:e7:d0:0a:e1:
                    ef:74:34:f4:98:19:b4:f4:62:b6:94:e2:18:8c:9d:
                    bc:b2:30:68:96:37:98:14:1e:87:08:56:1c:bf:65:
                    50:49:7a:95:03:7f:17:2a:1c:8a:7a:7e:11:bd:db:
                    41:74:ed:b5:fe:b4:81:65:2d:1c:32:33:aa:bc:dd:
                    96:a3:c1:c1:5d:06:44:3f:0e:da:bc:35:6e:28:19:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D2:6D:7F:58:EF:7B:31:32:48:0D:A7:00:E7:ED:A4:23:FC:75:A1
            X509v3 Authority Key Identifier:
                keyid:15:D3:F3:6B:89:22:FF:34:9E:1B:6A:AC:AC:B0:4A:80:40:E7:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D3F36B8922FF349E1B6AACACB04A8040E743CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31bDzjNtxEUahULpC1NjApRNPhY5vzJkLZPgzWpoEgrf/0/3230312e37312e3231362e302f32322d3234203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:be:07:0b:b2:76:ea:c9:66:98:fb:26:2e:a1:07:39:cc:42:
         f7:5c:eb:a8:f1:c0:11:16:1e:33:30:74:a0:d3:d3:64:a8:37:
         83:50:97:c5:86:0a:ff:c4:2e:15:d8:4a:58:71:56:6d:65:93:
         dd:f7:01:eb:60:e3:9b:35:48:d6:6a:76:7e:92:b0:05:50:92:
         23:6f:71:d9:01:71:c1:c2:0b:2b:12:d0:80:49:a1:dc:77:a0:
         62:39:07:9e:15:7b:65:1f:d7:49:fd:7e:78:97:5d:96:22:33:
         5a:bd:b8:46:fc:5e:33:e6:50:ec:80:81:d0:96:98:3c:56:26:
         2b:3e:fd:45:b9:6f:32:9c:65:2d:a9:e6:aa:58:fe:84:12:3d:
         a7:f5:09:a0:db:74:69:1c:1b:75:4f:b5:1f:b4:ba:36:4f:74:
         80:d7:97:02:df:15:1e:20:b5:6b:cc:13:f3:71:4c:9c:88:b2:
         69:79:37:82:5e:ee:82:ef:01:6f:7d:cc:f2:8b:cc:28:d7:c3:
         47:52:1e:e1:98:b6:df:71:d4:de:09:a6:91:4f:02:50:d0:3c:
         37:f5:a5:1d:91:a4:27:28:83:0b:3e:77:81:4f:c1:32:dc:32:
         df:81:a6:ee:5b:2d:bf:8b:8a:0a:78:31:b1:a0:17:df:1d:84:
         9d:12:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org