Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
File:                     3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          dCIUmDB8IA7VrXHFXKQNz3gYS4WhizNMDhz05TRoAAE=
Subject key identifier:   3E:77:09:24:24:F0:C7:36:6B:86:C6:BC:76:7B:39:49:B3:95:7E:BA
Certificate issuer:       /CN=2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6
Certificate serial:       5D118548B9DDC69FCDB8D97DB2368606065BD6B6
Authority key identifier: 2A:E5:CC:1A:0B:6C:6E:7B:A9:B0:3F:90:BB:CC:F2:88:08:BF:D7:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
Signing time:             Fri 15 Sep 2023 17:36:30 +0000
ROA not before:           Fri 15 Sep 2023 17:31:30 +0000
ROA not after:            Fri 13 Sep 2024 17:36:30 +0000
asID:                     61834
IP address blocks:        201.150.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:85:48:b9:dd:c6:9f:cd:b8:d9:7d:b2:36:86:06:06:5b:d6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6
        Validity
            Not Before: Sep 15 17:31:30 2023 GMT
            Not After : Sep 13 17:36:30 2024 GMT
        Subject: CN=3E77092424F0C7366B86C6BC767B3949B3957EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:56:2c:bd:0a:e8:ea:24:0e:22:16:41:e3:
                    65:0d:49:8f:6e:f8:38:1f:40:c8:b2:6b:cf:ac:1e:
                    60:d6:68:4a:ad:7f:6e:df:b5:94:f3:c7:67:d6:30:
                    39:e6:d8:97:89:4a:35:4f:cb:e4:8e:a6:f1:88:66:
                    ea:23:44:83:4c:94:44:cc:e2:c3:63:9f:d5:00:62:
                    a4:a4:8d:ed:3e:e6:ef:39:d0:cd:6b:2f:33:ce:43:
                    10:5a:9b:15:92:ae:f8:e2:85:2b:07:37:a6:ab:89:
                    cf:0f:55:44:55:9f:1d:66:f2:1b:45:55:18:e9:16:
                    1c:27:31:b7:dd:b8:d7:d5:5d:e2:7b:3e:ec:f4:f5:
                    05:93:e2:0c:95:76:27:ab:aa:5d:f6:c9:35:f5:e2:
                    19:df:2c:ff:a5:54:e0:09:d5:21:bc:ec:b3:d1:75:
                    f8:91:49:ea:e1:60:15:e6:40:36:cb:ce:96:4e:bf:
                    6a:f8:91:38:34:cb:46:ba:45:00:9e:f8:9d:46:45:
                    e2:53:21:af:5a:77:a4:be:8a:26:f8:26:17:09:5e:
                    fd:b4:67:66:f2:0b:5d:0f:b9:27:54:0c:b9:e9:9d:
                    38:9c:93:0e:a0:00:74:d1:5c:bf:da:8f:bc:29:94:
                    d4:f8:74:e9:24:a7:cb:bc:bd:6f:9c:a9:07:84:66:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:09:24:24:F0:C7:36:6B:86:C6:BC:76:7B:39:49:B3:95:7E:BA
            X509v3 Authority Key Identifier:
                keyid:2A:E5:CC:1A:0B:6C:6E:7B:A9:B0:3F:90:BB:CC:F2:88:08:BF:D7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AE5CC1A0B6C6E7BA9B03F90BBCCF28808BFD7A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/0/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:08:cb:8e:21:54:58:76:1b:f3:5c:04:88:d9:e3:11:5b:
         fa:fb:71:9e:b9:64:26:ef:12:dd:67:5d:d2:1f:49:1c:2d:c4:
         3a:e2:cc:29:cf:88:8b:9d:5a:c5:06:86:46:39:19:33:67:6e:
         06:e9:eb:43:e9:09:c8:da:1e:aa:c2:cf:de:65:3a:3d:7d:a5:
         65:bc:42:d3:98:70:4a:b6:2a:51:10:99:e6:c5:24:c6:8a:8b:
         ef:2b:5e:4a:30:3a:3b:21:0d:b8:bc:e9:ff:ea:25:0a:75:f1:
         a7:e9:51:f3:69:4e:76:aa:57:b6:12:74:bf:1a:0c:b9:e1:63:
         c3:2e:de:51:0a:f9:6f:8d:37:58:79:d8:fc:ff:5d:10:45:dd:
         46:7e:2c:9b:1d:48:74:d8:e3:20:11:4b:2d:cb:4f:09:da:d0:
         db:1a:4e:43:a6:da:41:2a:cb:3a:5b:fe:0a:fc:32:d3:cf:25:
         4f:01:b6:e4:20:90:b3:94:4f:be:cd:b8:3e:58:d4:e8:c6:e0:
         4f:59:64:9d:f3:34:3c:f5:80:15:2d:48:f6:43:7e:de:d5:0f:
         b2:bd:70:fc:8e:22:32:33:a0:63:f7:1f:28:c5:df:50:a9:3a:
         92:b8:8f:a8:b0:93:d9:45:ea:f4:d8:53:cf:eb:c2:ec:c9:d2:
         2a:ec:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org