Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa
File:                     3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa (raw, json)
Hash identifier:          LcEFq5yzVMJswjDkAG+Us4Jd5SVx03FxmgHJHU+vDtc=
Subject key identifier:   47:08:76:87:F7:A4:B1:65:A4:F5:FE:63:6F:99:1E:61:D5:82:39:51
Certificate issuer:       /CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
Certificate serial:       69A510CE354D74D68BA6FDE5D0845FA64CC39CB6
Authority key identifier: 03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa
Signing time:             Fri 19 Jan 2024 17:00:00 +0000
ROA not before:           Fri 19 Jan 2024 16:55:00 +0000
ROA not after:            Fri 17 Jan 2025 17:00:00 +0000
asID:                     61779
IP address blocks:        201.148.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:10:ce:35:4d:74:d6:8b:a6:fd:e5:d0:84:5f:a6:4c:c3:9c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033A18EDCCDDC601AF080AF01923CF610C9004AA
        Validity
            Not Before: Jan 19 16:55:00 2024 GMT
            Not After : Jan 17 17:00:00 2025 GMT
        Subject: CN=47087687F7A4B165A4F5FE636F991E61D5823951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:19:8e:3c:54:01:be:d7:20:6d:da:ef:e5:
                    cf:07:47:87:2a:77:24:9c:1b:45:f3:2f:0c:05:7c:
                    dc:a9:23:6f:e2:37:69:52:31:98:96:ab:e1:24:2f:
                    d1:96:ef:b2:b8:e7:81:a4:9a:75:54:0b:f4:d9:50:
                    c7:2e:59:72:ab:12:8e:7c:8e:8f:17:85:48:ca:7f:
                    8f:95:dc:6a:46:30:4c:41:38:d2:1e:4d:2d:5c:1e:
                    77:25:66:2a:e0:27:fc:c5:fa:ce:18:30:19:5d:83:
                    d8:48:db:9b:70:fd:c7:12:aa:f8:54:ab:d1:93:6d:
                    c4:89:42:b1:3e:86:0c:e8:9f:91:1f:a6:58:ba:bb:
                    d1:05:72:6c:97:a1:f8:62:b4:eb:d5:df:72:b1:43:
                    78:fa:3d:22:63:b4:d6:e9:37:a0:ee:e4:17:23:98:
                    3c:03:a4:85:0c:46:dc:b9:ac:cd:59:30:b7:47:d4:
                    bf:4d:8b:ce:09:fc:10:1b:32:b1:bc:00:82:d8:05:
                    c9:93:18:7c:71:48:7f:5e:0c:aa:6e:f5:b3:1f:f8:
                    10:42:67:b6:92:36:f7:d8:ce:3b:c8:39:a9:a4:04:
                    a6:52:8a:69:a8:ed:da:f5:f2:90:c0:c3:17:84:12:
                    71:99:82:1c:8d:74:82:2c:a5:82:ee:bf:23:3c:1d:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:76:87:F7:A4:B1:65:A4:F5:FE:63:6F:99:1E:61:D5:82:39:51
            X509v3 Authority Key Identifier:
                keyid:03:3A:18:ED:CC:DD:C6:01:AF:08:0A:F0:19:23:CF:61:0C:90:04:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033A18EDCCDDC601AF080AF01923CF610C9004AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/0/3230312e3134382e3232302e302f32322d3234203d3e203631373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:19:ed:f0:30:d8:be:34:cd:39:3b:50:a9:d0:f5:e9:0c:3b:
         14:14:45:00:f5:89:16:9a:92:2d:ff:b0:fd:a4:b0:9d:69:eb:
         cc:61:d2:d5:d1:77:8b:c2:46:0f:80:7b:b5:65:60:3f:d8:82:
         be:e3:69:57:60:f9:e6:a9:a4:ca:88:f6:52:3a:b1:2f:35:2a:
         4a:5c:90:34:14:76:f8:c8:76:de:82:8e:47:85:3d:42:02:b2:
         6a:2e:77:a3:5b:9f:92:88:87:dc:fb:d9:1f:05:0f:44:b4:c5:
         c8:fe:9d:b9:84:ab:61:b8:ed:3c:fa:4e:76:9d:0c:2a:2b:bc:
         d5:0e:cc:3e:04:21:a1:a6:37:6e:26:bd:df:78:79:9f:ae:c9:
         8e:9a:01:d4:62:66:a9:19:d5:e4:af:d9:d8:da:7d:4f:7d:39:
         f3:28:ca:85:31:18:7b:45:73:72:4e:3b:d2:3d:45:54:8b:d2:
         e6:bf:9b:f0:4c:38:1f:58:ac:e4:f4:b8:76:a9:b5:50:a0:c4:
         41:23:22:4c:d4:c7:f1:91:9a:93:5c:ce:8a:c4:7b:c6:d5:a5:
         f1:2e:7c:4a:04:50:f0:f8:64:85:4c:67:49:05:cb:90:30:90:
         fb:07:e2:a9:c3:5a:b9:0a:ee:11:65:82:7a:bc:e1:eb:54:bd:
         28:1f:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org