Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/3230312e37362e3134342e302f32302d3234203d3e203237363536.roa
File:                     3230312e37362e3134342e302f32302d3234203d3e203237363536.roa (raw, json)
Hash identifier:          rBb0Kr2X/j5cVt8oB6nmZ75eyHstSkD70eIqoFonqE0=
Subject key identifier:   96:0D:9F:3D:87:FB:1B:28:89:79:2B:3F:02:68:24:D2:14:43:25:54
Certificate issuer:       /CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
Certificate serial:       46EC7A1726B3D5551E9981D90B2999FB1F747697
Authority key identifier: A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/3230312e37362e3134342e302f32302d3234203d3e203237363536.roa
Signing time:             Mon 29 Jan 2024 19:29:03 +0000
ROA not before:           Mon 29 Jan 2024 19:24:03 +0000
ROA not after:            Mon 27 Jan 2025 19:29:03 +0000
asID:                     27656
IP address blocks:        201.76.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ec:7a:17:26:b3:d5:55:1e:99:81:d9:0b:29:99:fb:1f:74:76:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
        Validity
            Not Before: Jan 29 19:24:03 2024 GMT
            Not After : Jan 27 19:29:03 2025 GMT
        Subject: CN=960D9F3D87FB1B2889792B3F026824D214432554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:40:77:a3:11:25:fd:ac:aa:4d:bd:11:13:
                    f7:8b:75:b5:ca:5f:fe:3d:d1:da:49:c0:c5:3a:03:
                    db:fa:98:6a:6f:10:18:b4:63:fc:b7:1b:94:4a:e8:
                    5d:cd:b1:da:5a:1d:1e:c6:c3:3f:91:ee:b6:ae:ca:
                    9a:e8:bd:ce:78:9f:3e:d9:ba:40:54:52:98:26:58:
                    71:dc:0e:18:4d:1b:ea:e5:7e:2e:35:23:e7:e3:40:
                    c6:04:ce:eb:cb:9d:95:40:42:87:4e:8a:f2:87:6c:
                    6e:f7:5d:34:29:78:d2:d7:f6:91:a8:a9:4a:49:c4:
                    6f:7e:75:80:a4:6c:0e:1d:7c:70:44:06:a2:7f:b9:
                    64:f2:45:9f:d2:17:e1:d3:09:64:63:98:1a:35:65:
                    e9:4a:04:c3:96:60:61:8d:8c:03:a5:38:44:d4:40:
                    e7:a3:6d:0d:1e:d2:87:93:7a:4b:79:94:ac:61:68:
                    b0:ea:0e:36:10:d9:fd:35:ff:25:86:73:25:24:e9:
                    37:9b:ed:38:8e:ac:4d:d9:ba:bd:98:78:83:d3:78:
                    03:30:31:cf:72:36:5e:07:c9:c2:a5:f6:86:4e:14:
                    df:ef:32:ed:6a:f4:f9:cc:f0:a5:aa:b2:43:ee:b5:
                    26:79:a4:66:b6:d6:70:e6:89:ce:bb:37:0c:d5:ef:
                    aa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0D:9F:3D:87:FB:1B:28:89:79:2B:3F:02:68:24:D2:14:43:25:54
            X509v3 Authority Key Identifier:
                keyid:A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/3230312e37362e3134342e302f32302d3234203d3e203237363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:fe:d7:23:80:bf:6a:63:70:03:ab:46:38:8e:2c:94:df:47:
         27:be:9c:2b:a8:be:3f:5e:3e:57:17:68:a1:58:5a:eb:ac:0f:
         e3:97:b4:74:a6:81:e9:9c:fe:c1:94:9c:dd:2a:97:94:27:b7:
         92:b2:96:94:ab:26:aa:63:83:d0:19:dc:ab:17:75:1c:6d:cc:
         c9:d3:05:cb:1c:74:b4:df:4a:25:2c:22:28:63:ec:9f:91:2c:
         1a:c6:3f:1b:87:be:a5:36:4a:2f:ab:58:03:ce:f8:bd:36:a1:
         f6:06:db:89:58:58:bb:8d:0a:5d:b9:c1:04:6d:d7:72:89:d8:
         b8:c4:1e:67:c0:4f:b4:14:27:ed:d0:72:cf:af:a9:dd:9d:df:
         4a:ee:ec:db:a5:74:09:05:a8:c4:0c:58:20:d0:ca:67:72:e5:
         fe:2e:a7:ac:c6:16:ce:c6:9f:4c:ae:de:03:be:d2:94:68:a6:
         a8:dd:7a:5b:2a:d9:6e:ea:47:27:b0:ce:da:31:2d:6d:bd:3f:
         a4:e2:22:5d:0f:fb:2b:fb:24:dc:d8:4e:69:46:e7:c1:26:81:
         2a:1c:63:9e:8c:4b:9e:29:7d:c7:a4:17:ae:0b:b3:9e:e1:e1:
         c4:dc:08:ba:44:6d:66:5f:34:cf:c5:73:5e:a1:ea:e7:b7:f4:
         25:6a:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org