Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa
File:                     3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa (raw, json)
Hash identifier:          +eNEUEgAg8P+ljdMqcMInEBikjLRNMGXfiJ3PYqqLic=
Subject key identifier:   58:4F:E0:6F:3C:A4:71:48:BD:66:A6:A1:F4:9F:D9:DE:68:29:56:2A
Certificate issuer:       /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial:       621BE35CAB20D467858EDE9D12E147176549979D
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa
Signing time:             Tue 17 Oct 2023 20:17:46 +0000
ROA not before:           Tue 17 Oct 2023 20:12:46 +0000
ROA not after:            Thu 17 Oct 2024 20:17:46 +0000
asID:                     28283
IP address blocks:        201.148.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1b:e3:5c:ab:20:d4:67:85:8e:de:9d:12:e1:47:17:65:49:97:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Validity
            Not Before: Oct 17 20:12:46 2023 GMT
            Not After : Oct 17 20:17:46 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:e8:20:e5:46:cd:1c:fc:1d:f9:ac:df:22:
                    9e:0f:67:d6:93:22:3c:66:b1:98:fa:53:14:2d:a9:
                    c4:94:48:f3:5a:83:3e:f8:cb:2d:84:ff:3d:41:b3:
                    4b:88:95:a1:c7:2c:50:96:89:ea:fc:c4:09:d2:d7:
                    1a:3d:b3:dd:2c:7b:2d:40:1a:16:3f:dc:7b:02:8a:
                    64:f2:07:b1:35:14:05:96:62:d9:1a:52:19:45:77:
                    fe:36:a8:0e:70:2c:6c:d6:d6:01:44:15:b9:8d:e6:
                    87:58:34:fb:db:d7:39:56:1d:64:fc:2d:b9:5c:aa:
                    04:bb:ad:56:1a:23:dd:7b:35:08:ed:1d:f3:08:8c:
                    2a:6d:aa:cd:55:e2:f4:b1:61:6a:0e:b1:5f:0f:a8:
                    ce:53:ee:e4:10:d3:ec:66:52:e1:e9:fe:f0:32:48:
                    c4:86:7d:e9:0d:52:35:f4:15:44:1e:12:f1:75:b6:
                    01:21:a0:44:e2:60:d1:0b:a0:d4:28:56:6a:67:11:
                    90:69:7a:b9:2a:20:93:79:75:18:a3:2b:ad:9d:f5:
                    be:c8:1e:f3:d9:1b:46:b5:83:9f:4a:cf:69:1c:6d:
                    1e:c5:ae:bf:a6:8a:02:e2:5a:7c:94:76:96:0a:f2:
                    c3:55:5f:da:39:59:28:11:d6:16:a2:07:7f:61:f4:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4F:E0:6F:3C:A4:71:48:BD:66:A6:A1:F4:9F:D9:DE:68:29:56:2A
            X509v3 Authority Key Identifier:
                keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:a4:71:78:77:90:d5:60:24:5d:76:07:53:d9:79:47:da:
         be:d1:51:41:72:fd:e3:c3:a5:bf:7e:84:17:3e:b8:a2:68:b3:
         7c:5a:6c:a0:18:13:6e:7f:13:29:9c:8c:2f:b2:69:d5:de:fd:
         74:f7:a4:b5:33:bf:12:16:05:1e:f7:0d:a4:08:92:e1:a5:a5:
         05:76:99:10:3a:a3:1e:b9:b7:68:33:05:49:80:72:ee:50:81:
         e9:cf:af:94:ed:d8:0a:b6:4c:03:9d:9a:e5:aa:6b:37:b5:95:
         81:29:9f:6f:a1:20:57:38:fd:2b:b5:1a:9a:71:e8:7b:80:ca:
         a4:f5:af:0b:71:51:a2:fe:13:c4:16:3b:c0:93:6f:92:47:93:
         4e:2f:6c:fd:67:e4:b9:c3:8d:9e:95:3b:d5:94:2e:d0:ac:25:
         4e:59:0e:27:cf:f6:86:49:a9:45:16:1a:0d:28:a6:e6:bc:2d:
         f5:f7:66:88:72:25:3d:ec:87:eb:15:4c:9d:b3:12:58:7b:56:
         5e:95:23:df:2a:e2:99:02:ff:61:e1:cb:4a:26:19:9b:9b:51:
         2c:fc:65:55:db:28:a7:ba:2a:d1:76:6b:fc:c1:20:32:6d:7e:
         39:a4:0e:1e:bb:8d:29:97:5c:b2:de:8d:0a:87:10:61:27:84:
         e4:a3:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org