Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa (raw, json)
Hash identifier:          QshYSR3yzF5hrtK4DTzMQsnWtpz36DTwcxqTaQwaxYU=
Subject key identifier:   5D:11:2C:0E:EE:51:45:C4:B2:38:D2:17:C2:C6:A6:49:B4:61:A4:C5
Certificate issuer:       /CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
Certificate serial:       593504F633804F6F35130872E1D345B1E05ABBB3
Authority key identifier: 00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa
Signing time:             Wed 28 Feb 2024 20:15:49 +0000
ROA not before:           Wed 28 Feb 2024 20:10:49 +0000
ROA not after:            Wed 26 Feb 2025 20:15:49 +0000
asID:                     271466
IP address blocks:        201.49.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:35:04:f6:33:80:4f:6f:35:13:08:72:e1:d3:45:b1:e0:5a:bb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F57635F3A650812E4B7FA20D349EEC4B3C25E5
        Validity
            Not Before: Feb 28 20:10:49 2024 GMT
            Not After : Feb 26 20:15:49 2025 GMT
        Subject: CN=5D112C0EEE5145C4B238D217C2C6A649B461A4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:11:1c:e4:c9:8d:95:6f:e9:9a:78:56:d2:
                    b2:65:00:71:a5:fc:e7:4e:e4:18:71:6f:cd:cf:6e:
                    d0:79:c3:2c:b3:84:cb:2a:98:7c:3f:2f:90:a1:38:
                    73:3c:68:a0:c4:cf:91:43:29:3c:de:1a:93:99:63:
                    a2:33:09:b2:36:55:07:b5:63:ea:76:a8:19:2f:ec:
                    b9:e3:f0:44:35:5b:3f:91:a5:63:f9:5b:78:5c:63:
                    3b:99:52:a0:ae:c2:85:6b:6e:08:f3:09:06:49:28:
                    53:89:b1:df:6b:24:1a:0f:03:2e:24:63:f7:44:90:
                    58:53:c9:c5:9d:4c:48:ce:97:f1:f6:ce:56:83:5d:
                    50:4c:0a:ed:2d:0d:3e:42:07:6c:c6:bc:f3:ef:b4:
                    01:7e:46:eb:5a:e9:85:9c:13:ea:9d:9f:f9:aa:c3:
                    fc:d7:14:f3:ab:13:ce:99:dd:27:61:01:11:18:83:
                    4b:38:0e:2a:b3:8d:93:e4:34:5f:04:fa:a0:8d:94:
                    84:f1:9d:34:91:af:04:21:98:da:b0:60:75:46:47:
                    cd:76:cc:91:11:c0:60:7b:7e:a3:e6:7b:79:6b:1e:
                    57:ea:60:3b:df:ae:42:85:84:3d:e6:b6:2a:9c:e6:
                    4d:31:c6:75:64:ca:b0:a6:08:58:86:17:d3:63:a4:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:11:2C:0E:EE:51:45:C4:B2:38:D2:17:C2:C6:A6:49:B4:61:A4:C5
            X509v3 Authority Key Identifier:
                keyid:00:F5:76:35:F3:A6:50:81:2E:4B:7F:A2:0D:34:9E:EC:4B:3C:25:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00F57635F3A650812E4B7FA20D349EEC4B3C25E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32322d3232203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:b5:41:2f:e5:2d:75:b6:9b:32:7c:a6:48:fa:54:bd:6a:
         74:9a:41:9b:2a:b9:09:55:e9:3b:22:9b:72:13:9c:50:1a:f5:
         78:39:49:8d:f8:5f:45:31:bc:ea:3e:72:c2:51:ed:65:1d:0b:
         82:e0:2e:8d:04:3b:52:72:e6:d5:b2:ae:9b:41:ed:06:06:14:
         8d:94:43:da:08:2c:46:53:e7:a0:40:16:9b:04:c4:dc:f2:5d:
         39:c2:27:68:7f:5a:44:ee:4f:f3:5f:c7:a8:7f:d6:b4:8a:b0:
         45:e4:c9:ab:d4:34:82:1c:d8:4c:b2:91:02:12:7c:c2:7d:18:
         2d:86:c2:f2:c8:07:a5:df:c2:5c:ba:dc:77:74:9e:a3:d9:b7:
         3c:73:51:70:f7:95:4a:11:0b:10:6d:7a:3c:fa:d8:04:b8:d8:
         b1:14:2e:ac:98:06:30:89:51:ca:01:ba:af:7f:a6:64:58:a1:
         83:25:7d:56:5a:4a:c5:3f:6b:f8:52:e4:6d:5d:4e:bb:47:0b:
         6e:b4:07:7a:e7:15:59:99:27:ed:e4:e3:0a:c9:28:ab:85:0e:
         bc:dc:b4:81:59:27:5d:0f:4d:de:c5:c7:a8:63:96:96:8e:09:
         19:ff:7a:3c:de:22:89:47:75:7f:79:85:00:35:bf:b9:4c:d5:
         c6:6d:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org