Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
File:                     3230312e3133302e32302e302f32322d3234203d3e203631383232.roa (raw, json)
Hash identifier:          Af8LSNaRI2T7VgymEHrOiq8mTOmKrD62AdKNme23oQE=
Subject key identifier:   28:B4:C0:B6:90:23:F2:F5:ED:DE:A4:EC:11:0F:F2:7B:34:73:9B:F7
Certificate issuer:       /CN=B6594718FFDD3374D78BED43B0A99EA95E3DE550
Certificate serial:       6262F695E0884910B544762C11FD16280E0462A1
Authority key identifier: B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa
Signing time:             Mon 16 Oct 2023 16:00:01 +0000
ROA not before:           Mon 16 Oct 2023 15:55:01 +0000
ROA not after:            Mon 14 Oct 2024 16:00:01 +0000
asID:                     61822
IP address blocks:        201.130.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:f6:95:e0:88:49:10:b5:44:76:2c:11:fd:16:28:0e:04:62:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6594718FFDD3374D78BED43B0A99EA95E3DE550
        Validity
            Not Before: Oct 16 15:55:01 2023 GMT
            Not After : Oct 14 16:00:01 2024 GMT
        Subject: CN=3082010A0282010100D98E3DD6D367C00792F69D55768A83E61296EA7D4D1726C4EE2A0BC4FCD5307263167B823B00F502D1CE034E3D9037B4A118FB4FF7FFE1FD5C29CE2FC25F52D666A710A6E9237AB56D59C32A66B73607249C521A496F5488E176834DE0374F76AD5A3B480C2F38E84F308C2338CC1377A70BFB7A97B5EF4715572FAE0031D998630FD05555D4C21ACBE7612EB489D5D98E184279F236BD007412D3AE5DF9A84D9F60D89EA4F4B5907F9DFFD8E10F806B847100C506B8CD56674F5C2B8EBC1568B5B2079CABDB9C16F99CA51AC95A11A1A15CE9E76EEA8C62939AE1BB3CEA29CA63333D4731A2227D7D9ADD0D2FAFC5D8146BD67C353E9F0456FCF736C9F1CBC70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:3d:d6:d3:67:c0:07:92:f6:9d:55:76:8a:
                    83:e6:12:96:ea:7d:4d:17:26:c4:ee:2a:0b:c4:fc:
                    d5:30:72:63:16:7b:82:3b:00:f5:02:d1:ce:03:4e:
                    3d:90:37:b4:a1:18:fb:4f:f7:ff:e1:fd:5c:29:ce:
                    2f:c2:5f:52:d6:66:a7:10:a6:e9:23:7a:b5:6d:59:
                    c3:2a:66:b7:36:07:24:9c:52:1a:49:6f:54:88:e1:
                    76:83:4d:e0:37:4f:76:ad:5a:3b:48:0c:2f:38:e8:
                    4f:30:8c:23:38:cc:13:77:a7:0b:fb:7a:97:b5:ef:
                    47:15:57:2f:ae:00:31:d9:98:63:0f:d0:55:55:d4:
                    c2:1a:cb:e7:61:2e:b4:89:d5:d9:8e:18:42:79:f2:
                    36:bd:00:74:12:d3:ae:5d:f9:a8:4d:9f:60:d8:9e:
                    a4:f4:b5:90:7f:9d:ff:d8:e1:0f:80:6b:84:71:00:
                    c5:06:b8:cd:56:67:4f:5c:2b:8e:bc:15:68:b5:b2:
                    07:9c:ab:db:9c:16:f9:9c:a5:1a:c9:5a:11:a1:a1:
                    5c:e9:e7:6e:ea:8c:62:93:9a:e1:bb:3c:ea:29:ca:
                    63:33:3d:47:31:a2:22:7d:7d:9a:dd:0d:2f:af:c5:
                    d8:14:6b:d6:7c:35:3e:9f:04:56:fc:f7:36:c9:f1:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B4:C0:B6:90:23:F2:F5:ED:DE:A4:EC:11:0F:F2:7B:34:73:9B:F7
            X509v3 Authority Key Identifier:
                keyid:B6:59:47:18:FF:DD:33:74:D7:8B:ED:43:B0:A9:9E:A9:5E:3D:E5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6594718FFDD3374D78BED43B0A99EA95E3DE550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/0/3230312e3133302e32302e302f32322d3234203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:34:a6:cc:e2:ab:3f:96:cc:3a:71:f8:a6:45:17:23:cd:32:
         25:16:1e:d2:99:65:5c:bf:a1:ed:6c:0c:20:7c:09:3c:b8:ed:
         6c:61:2b:95:07:ed:cf:fe:bd:59:e5:5c:1c:55:57:90:07:52:
         fa:ac:c7:e9:24:c1:54:96:04:10:1f:3e:bf:ce:3c:34:1c:3d:
         4f:06:57:c9:c8:5d:d2:16:dc:e0:0d:7b:ef:1e:c8:54:83:17:
         04:ce:8c:e6:58:eb:53:34:73:f2:25:3f:1f:cc:54:62:0d:d6:
         10:16:b8:77:d8:16:ed:86:c4:67:04:82:cb:24:c4:df:4d:a4:
         6e:e5:d6:0a:d0:de:e3:07:cf:fa:8d:01:3a:a6:59:26:97:de:
         aa:00:68:9f:d9:d3:95:ed:f5:4a:c5:37:43:f2:46:7f:14:6d:
         09:60:8f:06:e5:87:81:e7:ef:04:66:5d:03:45:48:fa:1e:55:
         a7:6e:ec:39:88:f9:3b:c4:f4:75:ca:4b:8f:4a:1c:56:51:36:
         38:d8:42:2f:c3:a5:c9:15:a0:e6:81:85:a8:5f:d1:ab:0a:c6:
         d9:4e:72:13:74:bc:8b:72:d1:f0:3c:de:2a:ac:5d:cb:74:2f:
         44:dc:29:23:d7:13:cf:9f:ae:72:31:12:1b:15:4b:94:c2:a0:
         8a:ce:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org