Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32312d3231203d3e203238363035.roa
File:                     3230312e32302e3135322e302f32312d3231203d3e203238363035.roa (raw, json)
Hash identifier:          3xdl2eI6jLUJ+YNLMhMMVCqsVcRJxfUcNqmvTFgZK8U=
Subject key identifier:   AF:9D:07:B2:A6:C7:69:12:DB:6B:53:54:3E:F5:4A:E1:79:CA:FC:A7
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       6561F21A9D20DF87523B123F6A0512FE503B028F
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32312d3231203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:18 +0000
ROA not before:           Fri 16 Dec 2022 21:11:18 +0000
ROA not after:            Fri 15 Dec 2023 21:16:18 +0000
asID:                     28605
IP address blocks:        201.20.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:f2:1a:9d:20:df:87:52:3b:12:3f:6a:05:12:fe:50:3b:02:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:18 2022 GMT
            Not After : Dec 15 21:16:18 2023 GMT
        Subject: CN=AF9D07B2A6C76912DB6B53543EF54AE179CAFCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:69:b6:2b:63:6e:3e:02:4c:2c:5f:a3:8b:
                    e0:b0:8e:d0:e8:5f:6d:28:c1:23:85:63:44:9d:12:
                    bb:f8:9a:33:c9:7a:43:6a:a7:2e:40:9e:dd:69:0e:
                    c5:ca:4d:45:68:f2:8e:de:10:be:f2:06:e2:a8:01:
                    6c:d4:a3:93:98:3f:62:d5:3b:1b:2a:8e:85:a8:a8:
                    73:77:74:bf:e4:4c:68:da:4f:f4:be:c5:39:3b:ae:
                    40:7a:9e:79:3e:3a:c4:18:e5:d4:2b:39:c8:87:18:
                    b0:62:a9:38:1a:c0:7a:11:c5:1e:81:1c:39:eb:f9:
                    fd:5a:cb:cf:85:a7:f3:e6:02:0b:0f:ec:8a:b2:bf:
                    b0:e1:d6:c5:a7:47:c6:80:01:c2:17:29:32:1e:f4:
                    b8:e5:1f:f8:83:5f:39:dd:ca:92:95:86:d5:c8:0e:
                    fe:0f:df:ec:f1:6c:98:04:c8:5c:c8:26:c4:81:98:
                    99:2b:21:7e:a1:22:b2:a3:26:11:4e:3c:ad:d5:5e:
                    3b:5b:b5:28:ed:71:5a:43:fe:fd:ba:fc:4c:69:d9:
                    b0:bf:7b:a3:1e:d0:a0:78:45:e1:85:93:10:b1:96:
                    49:5f:f0:e3:54:d7:1d:1b:f5:0e:ed:f6:53:47:77:
                    5a:74:23:f2:7c:cc:07:b5:66:a5:7a:59:7a:70:df:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:07:B2:A6:C7:69:12:DB:6B:53:54:3E:F5:4A:E1:79:CA:FC:A7
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32312d3231203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:65:6f:d8:96:62:d0:d2:dc:1f:e0:6d:62:19:1d:24:f5:
         a3:c7:8c:47:bb:f6:b6:cc:d3:36:80:19:cf:87:9e:af:9f:de:
         e8:98:d5:6f:f2:94:91:d5:4e:85:a4:5b:3b:46:df:a6:f4:84:
         8b:ee:28:67:ed:81:a2:55:73:c8:a9:08:80:ab:29:19:b4:74:
         c2:e7:c9:cc:c5:82:00:02:12:f5:25:96:b6:0e:2a:f2:30:41:
         b9:1a:0a:5e:6a:f1:07:74:fe:d9:3f:4a:9b:0a:9d:55:6f:72:
         25:0a:46:85:6c:82:6a:a1:e6:d4:86:62:ff:78:3c:cb:ae:32:
         81:9d:a1:73:f1:45:7d:1e:03:e2:2e:99:30:0d:4c:c5:c2:9b:
         50:3d:b0:5b:1b:32:4e:35:53:8b:ac:d4:e8:98:20:34:02:da:
         b4:69:4f:23:89:5f:b4:f3:b6:db:e5:57:ab:c9:ef:32:7f:0e:
         3b:2f:1a:8b:7c:e0:49:30:4f:24:06:80:73:4d:11:74:5a:c1:
         03:af:cd:63:67:52:78:ee:43:d9:55:25:27:34:31:68:df:92:
         78:a6:e9:44:c0:af:89:9c:2a:8d:d2:e8:c7:48:e9:18:57:ed:
         32:41:71:d0:6c:a6:47:4b:a8:ea:0a:92:a0:8f:0c:64:fd:65:
         d9:e3:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org