Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3234203d3e20323632393932.roa
File:                     3230312e3134392e3132302e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          QzF04UX85Kg8UlUz4SVA5AgEgmYUlajuWVM6fB7lYNQ=
Subject key identifier:   39:D1:AA:EB:1F:92:0E:33:96:0D:3F:F2:2D:1B:B4:AD:14:C4:36:B7
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       062A3B9D0F40F88FF98F2A18579B21603036B4AB
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 31 Jan 2024 14:31:14 +0000
ROA not before:           Wed 31 Jan 2024 14:26:14 +0000
ROA not after:            Wed 29 Jan 2025 14:31:14 +0000
asID:                     262992
IP address blocks:        201.149.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2a:3b:9d:0f:40:f8:8f:f9:8f:2a:18:57:9b:21:60:30:36:b4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:14 2024 GMT
            Not After : Jan 29 14:31:14 2025 GMT
        Subject: CN=39D1AAEB1F920E33960D3FF22D1BB4AD14C436B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:87:49:e7:db:fc:41:b8:bd:cf:a7:ec:99:
                    5f:6c:91:f0:be:36:ff:88:71:21:b9:f8:53:ab:d1:
                    e8:9c:52:49:11:df:0d:e6:53:23:27:aa:20:26:9f:
                    33:b6:6b:08:bd:29:bf:fc:8b:e6:58:6e:c2:07:11:
                    11:02:2c:5d:f7:85:9e:f0:22:a3:7d:1c:fc:f4:c2:
                    de:86:97:d3:4b:34:76:73:dc:c3:e5:6f:92:c5:77:
                    3d:3e:0f:2f:f4:46:61:e4:26:15:7c:86:3f:31:6f:
                    5b:f9:ee:c6:2b:80:4d:ee:8e:16:1b:cf:b5:f4:ca:
                    a9:d4:3c:fa:0e:28:dd:33:21:9d:28:c0:12:41:ee:
                    0a:dd:77:d9:e8:3a:8d:00:ac:bb:7e:1a:0f:41:91:
                    6b:05:36:a4:84:ad:08:49:99:2a:bf:de:55:bd:95:
                    3f:22:b1:cb:de:e1:c6:c7:82:c0:51:75:d5:77:35:
                    76:a7:96:83:24:c0:e2:5a:69:a0:da:34:e0:6f:08:
                    96:fc:02:88:0d:23:17:1b:99:50:35:31:60:48:2b:
                    0b:7b:26:ad:a5:0a:3d:a7:7a:94:10:76:ac:f4:fb:
                    36:0e:bc:47:fe:1b:02:16:49:3f:0b:40:71:d1:4b:
                    3d:65:2f:cb:7f:b2:73:bb:45:c7:9c:55:98:51:f5:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D1:AA:EB:1F:92:0E:33:96:0D:3F:F2:2D:1B:B4:AD:14:C4:36:B7
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:ad:49:b7:74:26:68:b4:c1:41:3f:3e:b7:2f:39:2b:99:
         64:24:fd:1b:0a:f3:dd:70:59:b9:8c:04:29:dc:87:0a:b9:d0:
         63:94:ea:77:d4:9f:77:db:4d:55:ea:2d:6e:89:ab:bc:70:75:
         e5:08:a0:6e:ef:98:29:fb:39:02:41:f3:b7:a2:c6:80:98:6e:
         b9:4e:5b:eb:88:04:b5:2c:00:4c:e1:80:5b:34:49:f4:82:04:
         29:5f:90:75:a3:32:a3:65:36:d6:52:ca:ab:a5:27:ae:2a:ea:
         d1:b1:d6:02:0b:55:74:c8:5f:59:c1:0e:1b:8d:d0:ed:16:88:
         6d:0a:82:ad:96:f2:e2:69:37:d2:d3:42:f5:59:b1:c3:00:1f:
         1f:cc:b3:66:6e:ba:a6:f3:b2:0c:b0:7f:c1:32:64:9b:3a:c6:
         18:69:33:6e:16:38:8a:be:d6:19:57:b5:4c:45:af:95:d7:a1:
         b0:3a:87:84:28:45:5e:d3:af:7b:6e:ef:62:19:b3:ac:d6:21:
         93:ab:9d:1f:70:75:d9:08:c2:93:b3:8b:97:49:4f:70:e7:fa:
         d1:ce:21:33:2c:9c:fe:d9:9c:f4:31:d3:40:88:e5:fb:ba:46:
         85:34:ee:c0:08:65:5a:ab:2a:93:ad:2d:d3:3b:23:31:0b:ba:
         85:48:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org