Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32322d3232203d3e203238363035.roa
File:                     3230312e32302e3134342e302f32322d3232203d3e203238363035.roa (raw, json)
Hash identifier:          iWZljgdguO4wyqd6gjD9DMugbpziLwveBbeIvAVvinU=
Subject key identifier:   27:FF:88:01:91:27:B4:C8:EC:46:2D:A4:19:98:28:52:59:21:40:3F
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       3826234D42192BF5D95AB919CF297F246DE1BB50
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32322d3232203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:04 +0000
ROA not before:           Fri 16 Dec 2022 21:11:04 +0000
ROA not after:            Fri 15 Dec 2023 21:16:04 +0000
asID:                     28605
IP address blocks:        201.20.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:26:23:4d:42:19:2b:f5:d9:5a:b9:19:cf:29:7f:24:6d:e1:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:04 2022 GMT
            Not After : Dec 15 21:16:04 2023 GMT
        Subject: CN=27FF88019127B4C8EC462DA4199828525921403F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:b7:6c:28:a2:1d:aa:1b:64:cb:c8:d8:f3:
                    e8:95:c8:92:08:ca:e2:04:13:66:fa:d7:5d:df:e3:
                    48:75:e4:0c:31:7c:43:1a:c8:f6:5e:c6:2e:b8:b6:
                    52:ca:da:c7:f7:73:a6:9c:b4:e9:34:33:00:93:4e:
                    fb:79:d9:1e:8c:3e:a4:6d:51:1e:ea:30:7d:e1:84:
                    0b:35:f2:0e:8c:fb:c3:9f:8d:d0:3c:19:95:22:86:
                    3e:c1:e7:e1:88:a9:67:cb:f9:e2:b3:b7:6a:2c:dd:
                    5f:20:c5:ba:88:4f:71:9e:39:a6:66:b2:de:50:c0:
                    44:07:e1:b7:f1:d4:5a:88:6c:a2:a6:1a:20:6b:93:
                    8e:b5:2f:31:e2:23:68:be:2f:97:73:dd:14:78:15:
                    1d:61:62:da:68:2a:37:8e:b1:ed:ec:b9:67:94:18:
                    1e:b7:83:ee:81:0c:f1:7b:3f:44:8c:9b:de:24:8c:
                    4e:69:e5:3c:f4:ad:23:5b:53:f1:01:de:76:31:56:
                    a9:af:af:2f:49:0d:b7:70:d6:fe:f3:ba:65:7b:85:
                    5f:2d:a7:bb:27:53:54:3f:3f:81:30:fd:84:49:7b:
                    ea:ae:30:d8:c2:c6:88:ec:07:32:83:80:af:35:ed:
                    4a:ea:02:b1:da:13:5e:0d:d5:c9:54:0e:63:40:33:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FF:88:01:91:27:B4:C8:EC:46:2D:A4:19:98:28:52:59:21:40:3F
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32322d3232203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:80:90:4a:d7:89:87:0b:32:a6:e5:66:67:8e:8f:b9:36:
         f5:4e:09:85:ce:1c:0e:d3:18:7b:bd:24:cc:28:48:3b:fa:c2:
         a5:31:46:69:26:16:74:83:24:39:33:c4:61:48:0d:64:05:d5:
         77:61:33:f9:bd:53:3d:9a:73:4a:24:92:05:e9:86:20:21:76:
         60:f7:7e:8f:6c:a8:65:91:dd:24:7f:6b:4f:41:14:24:ae:8e:
         5c:9e:c2:9f:94:d6:fb:ac:7a:29:6d:6e:9b:80:a3:51:0d:46:
         41:1b:0d:ee:4b:85:54:7b:50:3c:f3:5c:51:77:f4:b1:33:3c:
         5a:7f:a7:ea:f5:aa:70:84:68:b4:c3:12:20:20:32:23:bf:e4:
         91:71:81:1e:18:c0:de:d9:50:c0:7a:71:b9:fa:af:ef:f8:2d:
         12:4c:0d:8e:5d:fc:2d:25:b2:0a:bd:bf:6c:fd:88:f7:64:6e:
         39:5b:2e:e1:06:05:d4:30:9a:b7:c8:ef:67:0b:52:a1:0c:25:
         56:db:3e:51:6b:88:28:30:36:23:94:14:77:21:07:58:4c:ed:
         2a:67:fa:d0:7a:b0:6f:e5:4d:c3:c9:db:03:fe:1c:45:0b:64:
         f1:9a:37:85:91:8a:ef:b3:dc:c3:4b:12:64:c3:b4:33:94:78:
         c6:8f:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org