Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa
File:                     3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa (raw, json)
Hash identifier:          vJzUvq68GXq9J3Thn5ZfsXs8vy394ng3ZRC0frjh3C4=
Subject key identifier:   90:75:20:EF:DD:30:0D:2A:64:9C:AD:8E:9B:8E:F6:B4:BD:D5:A5:5A
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       729BE0A7A876AA5C677A164F73D0AA0668FE8C53
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa
Signing time:             Thu 06 Oct 2022 17:40:04 +0000
ROA not before:           Thu 06 Oct 2022 17:35:04 +0000
ROA not after:            Thu 05 Oct 2023 17:40:04 +0000
asID:                     266555
IP address blocks:        201.149.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9b:e0:a7:a8:76:aa:5c:67:7a:16:4f:73:d0:aa:06:68:fe:8c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 17:35:04 2022 GMT
            Not After : Oct  5 17:40:04 2023 GMT
        Subject: CN=907520EFDD300D2A649CAD8E9B8EF6B4BDD5A55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:2f:fc:1d:cc:03:94:00:2a:92:25:08:41:
                    24:4f:1c:8f:30:d3:71:56:46:08:c6:bb:b9:a3:61:
                    c5:b5:8a:7f:85:b0:d9:19:e2:ce:a6:84:6d:c9:79:
                    91:b5:bb:b9:1c:88:9a:47:45:53:cf:7b:9e:4d:6a:
                    75:df:92:60:fa:5e:08:35:c2:23:ea:c5:c8:cc:cd:
                    85:ce:5d:0e:b1:e4:2c:78:ba:7a:76:c3:43:c8:61:
                    6c:5a:78:21:f1:f0:d2:6e:27:e9:86:e8:62:7f:aa:
                    b4:cc:87:46:63:f3:4c:95:c2:a1:c9:f3:d5:6b:21:
                    8e:6f:40:34:ff:77:72:33:1a:ac:72:ef:99:c2:38:
                    ba:d3:c1:63:e8:fc:94:00:db:4e:2c:63:28:41:da:
                    f4:89:7b:1a:08:1d:ef:14:0c:75:34:db:0e:ba:e9:
                    eb:d3:41:05:22:50:37:0b:c6:a0:86:7f:fc:99:2c:
                    0c:c7:9d:04:75:db:84:3d:55:ab:54:9e:d9:38:f2:
                    8b:1a:8d:0c:6b:b3:11:eb:1c:dc:2e:31:21:17:05:
                    e9:c7:5a:78:2e:88:54:b7:b5:4b:51:80:f2:28:9e:
                    40:8a:3d:e7:12:3a:c5:9b:eb:9b:17:f6:47:59:42:
                    2e:15:16:43:59:14:6c:91:6d:ef:73:41:b9:af:f7:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:20:EF:DD:30:0D:2A:64:9C:AD:8E:9B:8E:F6:B4:BD:D5:A5:5A
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3230312e3134392e3132302e302f32322d3232203d3e20323636353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:b7:7b:99:ee:a9:67:72:de:c7:8b:bc:5f:5e:eb:58:ae:
         3a:aa:16:53:c3:c2:00:f5:50:63:2e:d3:1c:b4:36:bb:ae:ea:
         9e:57:3c:de:18:04:11:f9:7a:03:75:62:f8:a8:a4:f7:2d:36:
         f2:db:eb:6e:e6:2c:ce:ad:24:fa:0b:35:2b:8e:e6:a8:17:8e:
         86:25:8f:79:6b:76:4c:05:c9:07:23:d9:ba:5a:93:9f:82:d9:
         3a:39:40:23:f8:6c:9f:62:55:db:b5:17:8e:8f:14:f3:d1:59:
         2c:7c:75:d3:28:b9:13:80:60:b9:17:e8:20:35:05:e8:b4:ed:
         5b:05:cc:31:4c:45:1e:ea:52:0c:4b:83:e2:5c:53:03:57:3d:
         63:07:ec:0d:da:e5:e5:ee:f5:17:5d:27:a5:7b:35:5e:26:07:
         74:fa:3b:b7:e4:39:75:1f:f9:6d:f4:d6:fe:94:19:da:dd:45:
         54:34:4f:35:f3:52:99:b3:c1:7c:0c:6c:fd:53:c1:b0:83:83:
         29:51:6a:73:9d:88:e5:70:45:9a:1c:a5:f8:a8:75:1c:b8:67:
         e4:19:dd:f5:18:74:ab:45:73:4b:9d:bb:ac:be:90:17:03:bb:
         02:48:9f:00:ec:98:14:6f:aa:0c:51:6d:b7:1c:23:cb:b4:35:
         46:77:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org