Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32322d3232203d3e203238363035.roa
File:                     3230312e32302e3135322e302f32322d3232203d3e203238363035.roa (raw, json)
Hash identifier:          /9fjbJ+irdLssEgTyfkZsxe3qNUs06emkhJofP2KTew=
Subject key identifier:   08:1A:F9:62:A0:25:DA:6A:37:F9:BD:55:8E:CC:F8:F8:D7:00:B2:EC
Certificate issuer:       /CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
Certificate serial:       179BA41DE2BBF39C3327D5EBA698F652C38B3E0E
Authority key identifier: 10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32322d3232203d3e203238363035.roa
Signing time:             Fri 16 Dec 2022 21:16:31 +0000
ROA not before:           Fri 16 Dec 2022 21:11:31 +0000
ROA not after:            Fri 15 Dec 2023 21:16:31 +0000
asID:                     28605
IP address blocks:        201.20.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:a4:1d:e2:bb:f3:9c:33:27:d5:eb:a6:98:f6:52:c3:8b:3e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10909E3FE3537956A00F98A682D8E578DEF82CEF
        Validity
            Not Before: Dec 16 21:11:31 2022 GMT
            Not After : Dec 15 21:16:31 2023 GMT
        Subject: CN=081AF962A025DA6A37F9BD558ECCF8F8D700B2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:ee:f9:7d:cc:5a:10:28:89:8b:9d:5c:2a:
                    0f:c9:1c:99:59:83:0c:25:4c:25:36:a1:4f:cd:22:
                    30:7f:75:16:35:46:23:a4:92:dd:23:90:28:a2:7a:
                    56:ba:2e:0f:48:19:40:9b:76:68:8b:c5:af:da:96:
                    d5:69:e9:05:f0:f4:84:dd:e7:a1:1a:e8:0c:88:fe:
                    a8:39:39:09:60:81:b8:a2:ce:a5:85:ad:45:a6:dc:
                    1b:3b:46:81:ab:ec:37:28:75:89:dc:13:1b:0b:bc:
                    a0:49:c1:cf:a4:36:1b:da:3e:7f:74:9e:5d:45:7e:
                    c0:7b:a2:93:62:3a:8a:55:6c:c3:84:6e:66:78:e5:
                    bb:f9:ee:a8:39:bb:11:bd:f9:00:c2:5e:13:66:a1:
                    71:29:5a:9f:52:a8:d8:1e:bc:b0:3e:50:bb:d9:d1:
                    09:08:8f:33:19:de:20:75:8a:44:1d:91:bf:36:99:
                    3e:b1:6c:82:08:cb:ff:0b:68:4a:b0:27:93:f5:dc:
                    03:bc:fd:4d:0c:60:c2:d5:5d:19:9a:01:2f:b8:c0:
                    5f:ef:c6:48:3e:60:06:c1:60:48:ff:ba:33:31:c0:
                    06:8a:ef:70:4d:e2:d4:88:f5:d3:2d:81:e4:d5:54:
                    51:e9:38:86:fb:c3:1c:49:bb:6f:45:33:79:49:ae:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1A:F9:62:A0:25:DA:6A:37:F9:BD:55:8E:CC:F8:F8:D7:00:B2:EC
            X509v3 Authority Key Identifier:
                keyid:10:90:9E:3F:E3:53:79:56:A0:0F:98:A6:82:D8:E5:78:DE:F8:2C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10909E3FE3537956A00F98A682D8E578DEF82CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3135322e302f32322d3232203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:f2:d4:93:2e:35:ff:b7:66:19:0b:82:a3:5d:68:a8:9e:
         69:04:a4:28:39:0b:ed:f3:db:ba:cd:65:a8:e3:a1:db:4d:cf:
         37:4d:e0:b3:4d:90:71:79:cf:9b:3d:1f:af:49:27:da:87:59:
         af:89:62:63:15:3f:f5:6b:d9:c3:8c:69:18:01:a6:7b:8b:93:
         31:d2:ca:0f:13:4e:f8:4f:0a:d1:5e:f9:8f:f2:09:1e:8a:1a:
         4b:ff:88:8f:36:aa:bc:ed:2e:95:56:f1:db:8d:f8:f9:60:40:
         26:82:83:01:a4:b0:5f:d3:92:c7:a6:b5:9a:d6:f2:8f:d5:6e:
         b3:ea:dd:d7:51:7a:bd:34:ec:f9:a3:e3:38:11:e2:47:06:73:
         f0:13:22:3a:4c:76:be:b1:49:1e:52:a8:fe:b7:ca:44:28:1c:
         8e:5a:8c:0a:55:4d:41:2c:cd:c1:37:ed:fc:71:de:ae:a3:dc:
         1e:8f:02:e7:35:a8:69:ed:7c:48:76:98:88:e4:b0:cc:28:06:
         ab:c7:56:50:e2:3e:23:33:c9:e6:0f:aa:7e:b9:2f:2b:3d:d0:
         6e:3c:19:7f:f8:bd:67:d9:14:90:2f:94:64:55:79:c7:9f:4b:
         47:26:5a:bd:bc:58:31:fb:d9:fe:38:31:24:33:b7:62:f1:8e:
         2e:c5:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org