Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134382e302f32322d3232203d3e203238363035.roa
File:                     3230312e32302e3134382e302f32322d3232203d3e203238363035.roa (raw, json)
Hash identifier:          kdH1sJuuem8GCNgpdAuj0AjO0VaFPtGe0mw0WTIiCr4=
Subject key identifier:   ED:F3:04:44:ED:DD:75:39:D6:25:72:BE:05:48:F5:BC:FF:15:8F:EA
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       5E7643161C0CE531F6F6B7DEDBAF6A677DD0C9A4
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134382e302f32322d3232203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:10 +0000
ROA not before:           Fri 16 Dec 2022 21:11:10 +0000
ROA not after:            Fri 15 Dec 2023 21:16:10 +0000
asID:                     28605
IP address blocks:        201.20.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:76:43:16:1c:0c:e5:31:f6:f6:b7:de:db:af:6a:67:7d:d0:c9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:10 2022 GMT
            Not After : Dec 15 21:16:10 2023 GMT
        Subject: CN=EDF30444EDDD7539D62572BE0548F5BCFF158FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:2d:80:53:a0:43:a1:95:31:3b:11:31:c2:
                    1a:5d:d7:f7:4c:af:85:1a:e8:6d:95:10:df:c3:c9:
                    48:2b:9d:33:ea:fa:ad:57:f2:8c:c1:96:8e:5a:a0:
                    6e:77:ad:83:79:aa:fe:82:19:f5:02:e2:20:23:c9:
                    60:8b:f5:f1:d7:9c:87:13:b3:98:45:9f:1c:95:da:
                    d7:b9:79:1c:a9:ba:c8:fc:bf:61:54:fe:3a:51:25:
                    53:83:9b:cd:8d:42:80:bc:e9:80:40:ad:e9:aa:20:
                    96:1b:f4:d2:56:c9:4c:b1:41:88:7c:7b:f9:0a:f1:
                    73:49:1b:c2:58:45:0a:43:75:96:90:0f:73:8c:a8:
                    e7:fe:0f:05:ce:37:dd:7d:c1:ad:3b:24:1d:22:31:
                    d8:77:74:12:bc:2e:ee:cc:f8:d1:49:28:2c:58:44:
                    f8:ea:4e:c6:49:cf:28:4f:41:b1:78:65:d9:61:e3:
                    af:9a:bc:f8:88:83:b0:d9:e2:9a:f4:95:97:6d:0b:
                    1a:7d:c4:cd:9c:98:e0:b8:c3:6f:e8:7d:9b:d1:96:
                    39:42:74:c1:96:5d:92:0e:74:df:54:25:86:9e:1f:
                    66:70:03:f3:de:ee:e4:19:96:89:25:82:f8:9c:a4:
                    88:35:dd:b1:89:f1:84:1a:22:82:d8:9e:46:df:69:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:04:44:ED:DD:75:39:D6:25:72:BE:05:48:F5:BC:FF:15:8F:EA
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134382e302f32322d3232203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:60:14:27:21:b5:30:bc:25:4c:c0:f1:d0:24:57:99:61:31:
         11:a8:fc:e7:5d:ad:48:b3:77:44:e9:62:87:ee:b9:bd:ed:9b:
         88:f4:15:b1:aa:18:d7:4c:7c:c0:ec:8e:97:33:58:e8:e5:a6:
         87:10:9c:f5:f7:a6:f7:f0:7a:9a:d1:20:53:49:32:ba:38:db:
         33:e0:59:42:fa:f0:6a:7e:0b:1f:45:5c:1b:c0:00:ca:ab:b2:
         78:b2:d3:d9:2f:9a:de:84:5f:48:22:eb:2b:68:26:8f:30:f5:
         5e:bf:59:ee:7c:dc:ce:82:1e:31:02:b8:3a:d3:d8:85:c1:34:
         a4:93:26:9e:b7:4c:fd:b4:a9:b6:d7:7e:2c:0d:f7:37:5f:cc:
         4b:68:1c:a6:0f:aa:e9:ad:9e:a3:04:a2:06:08:5d:bd:67:4a:
         87:eb:33:06:96:c2:64:59:94:02:ef:45:35:4e:21:3d:2b:93:
         4f:02:ca:b6:88:3f:b3:0b:ee:eb:fb:21:cb:71:c3:6c:06:fd:
         70:5f:c5:bb:c6:90:2d:1f:b0:3d:ab:b0:3f:c4:98:c3:e9:2b:
         c9:7f:f4:83:90:ae:8e:0e:d2:ae:b3:43:86:63:69:05:b7:42:
         f3:66:dd:fa:6f:b8:53:a8:f4:5b:47:84:04:ae:b1:91:b4:f2:
         82:3a:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org