Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32312d3234203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32312d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          81gBk2Urrh2t9NOSyNJrLoZYE2EEn33eJJPDFwNzRCQ=
Subject key identifier:   86:60:B4:DB:85:06:C8:7B:30:B3:CC:97:4F:1A:A2:AE:EA:3F:07:03
Certificate issuer:       /CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
Certificate serial:       7555FD0D54634C7060C05F66AB08861601524E38
Authority key identifier: 9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32312d3234203d3e20323731343636.roa
Signing time:             Tue 31 Oct 2023 16:02:22 +0000
ROA not before:           Tue 31 Oct 2023 15:57:22 +0000
ROA not after:            Tue 29 Oct 2024 16:02:22 +0000
asID:                     271466
IP address blocks:        201.49.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:55:fd:0d:54:63:4c:70:60:c0:5f:66:ab:08:86:16:01:52:4e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C70B4472C9D58109895B5DC4990D4CDEA5A5723
        Validity
            Not Before: Oct 31 15:57:22 2023 GMT
            Not After : Oct 29 16:02:22 2024 GMT
        Subject: CN=8660B4DB8506C87B30B3CC974F1AA2AEEA3F0703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:9d:07:29:25:fa:94:81:f2:63:eb:1c:40:
                    54:50:cb:51:5b:9e:7d:68:30:a3:a3:af:b2:c6:36:
                    74:26:4e:2d:a4:9f:f4:de:d0:74:d4:7f:39:87:c9:
                    3d:33:b2:ac:6d:88:8e:d8:2f:2b:c6:f8:3b:51:86:
                    cd:7a:4e:33:75:90:bd:5a:e8:99:b8:4a:ac:0f:e6:
                    85:01:31:80:8b:af:71:e0:90:34:a9:25:89:f0:dc:
                    a7:c5:bd:4d:45:2c:c6:ab:7e:29:08:27:9e:6c:3a:
                    6f:ca:b2:0c:7a:d3:de:2a:61:a3:a5:f6:78:0d:58:
                    96:82:68:2b:ac:04:04:e5:7c:31:27:da:34:71:f6:
                    66:f8:67:d5:28:25:76:3a:96:72:fa:8b:51:20:b7:
                    f0:2f:ab:b3:2c:bc:c6:45:e0:08:48:a1:f2:37:84:
                    d3:3f:cb:d6:41:8f:9b:36:d7:fd:7a:d6:b8:11:8a:
                    43:d7:de:36:cf:db:a2:ad:d7:18:66:cc:59:c9:c8:
                    3f:9d:4e:bf:cc:cc:67:a8:ec:2b:6a:9f:8c:68:a7:
                    3a:81:6f:bd:f2:9a:4f:07:6c:82:e9:f9:72:ed:69:
                    9e:95:36:50:43:b5:ca:eb:a1:78:9c:2c:00:5a:86:
                    f8:8a:a4:32:14:8a:76:63:6e:09:d7:35:3c:81:5b:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:60:B4:DB:85:06:C8:7B:30:B3:CC:97:4F:1A:A2:AE:EA:3F:07:03
            X509v3 Authority Key Identifier:
                keyid:9C:70:B4:47:2C:9D:58:10:98:95:B5:DC:49:90:D4:CD:EA:5A:57:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C70B4472C9D58109895B5DC4990D4CDEA5A5723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32312d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:60:46:95:06:85:55:36:8b:fc:3b:8c:86:7b:00:5b:f6:
         61:a1:bc:5b:d8:d1:fd:60:ef:7f:04:d9:63:e7:40:fd:ca:81:
         e2:80:93:52:5c:f7:85:eb:ac:ed:10:13:30:a3:8b:80:43:4f:
         a1:12:f6:eb:89:4c:93:ef:6e:37:c6:97:dc:7b:9e:dc:4a:76:
         0a:53:70:5d:09:76:9a:61:a2:22:8f:29:8c:9e:a5:71:56:56:
         99:60:f8:3f:3b:b1:ee:63:7b:11:2e:36:c4:97:75:10:56:f1:
         bd:89:27:a4:85:0a:82:7d:9e:22:15:04:a0:bb:40:41:18:84:
         54:1f:6b:03:83:a5:f1:5b:59:83:9e:1d:b0:12:6e:98:ab:2f:
         39:cc:64:f0:cd:6f:67:ac:79:57:66:1a:ff:cf:aa:27:35:f4:
         3d:c8:be:49:64:e9:b6:71:c3:91:b7:46:0d:40:43:eb:c3:c4:
         c2:f6:7c:0f:b1:1a:08:32:cc:06:77:ad:4f:52:ef:65:3a:61:
         46:d6:a5:01:98:47:53:0c:62:7d:2e:5a:11:22:6e:a5:5f:c8:
         35:7b:51:3e:f6:2c:c2:81:85:b0:74:6b:a2:fc:20:fd:5d:54:
         d8:78:22:74:cb:03:94:3d:ea:47:42:e8:c4:68:fe:f3:11:3c:
         af:0c:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org