Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa
File:                     3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa (raw, json)
Hash identifier:          e0ywz34r/3K582QU15j5mzIyf4LVAAlgCTsS9PcvO6o=
Subject key identifier:   9E:36:91:E5:11:DF:94:AF:F5:17:9D:95:C8:28:2A:4F:7D:07:30:68
Certificate issuer:       /CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
Certificate serial:       33727A5B374710D18B2067ACCE62328F9D648AD5
Authority key identifier: 8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa
Signing time:             Thu 29 Feb 2024 17:28:02 +0000
ROA not before:           Thu 29 Feb 2024 17:23:02 +0000
ROA not after:            Thu 27 Feb 2025 17:28:02 +0000
asID:                     61820
IP address blocks:        201.131.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:72:7a:5b:37:47:10:d1:8b:20:67:ac:ce:62:32:8f:9d:64:8a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11
        Validity
            Not Before: Feb 29 17:23:02 2024 GMT
            Not After : Feb 27 17:28:02 2025 GMT
        Subject: CN=9E3691E511DF94AFF5179D95C8282A4F7D073068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:53:6c:88:5c:fd:6d:a3:6f:99:69:87:35:
                    fa:41:ca:a5:97:1b:f8:64:de:3f:59:f3:33:2b:17:
                    a4:5f:32:ea:da:84:7b:90:21:a0:dd:83:c3:e6:3d:
                    92:26:05:bc:64:4f:84:73:02:d2:2a:cb:d8:ec:b3:
                    a6:84:0c:7e:d7:ac:8d:a3:9a:de:f3:d6:0a:64:9f:
                    9c:65:c7:ae:17:4e:c3:c2:f8:a5:e1:41:2e:71:1a:
                    4b:8f:a2:dd:47:eb:15:2f:24:e2:f8:57:27:9b:6f:
                    10:4d:2b:9a:bb:43:0a:93:fe:2d:53:e6:cd:1c:1a:
                    b4:35:5b:78:de:52:b4:22:27:1c:6f:73:87:38:77:
                    81:b7:41:a0:dd:2b:90:be:f7:b0:58:29:4d:7c:e8:
                    68:72:e6:ce:23:4c:1c:76:b7:cc:6b:ce:12:90:76:
                    dc:8a:9f:ab:ce:bf:7f:a5:2d:fb:96:a2:eb:18:9c:
                    23:09:b3:a3:b2:ed:7f:0a:4e:5a:d1:af:bd:4e:22:
                    f2:70:dd:86:96:33:23:d4:10:19:94:36:8a:45:72:
                    0b:4e:d8:da:2b:4e:7b:9b:75:a4:d4:4a:f7:39:95:
                    40:5f:46:e0:cc:46:95:5b:93:6b:0c:d0:fb:aa:2e:
                    07:91:7e:59:ac:d3:91:35:dc:39:f1:73:a3:47:6b:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:36:91:E5:11:DF:94:AF:F5:17:9D:95:C8:28:2A:4F:7D:07:30:68
            X509v3 Authority Key Identifier:
                keyid:8E:53:05:51:06:EE:DE:2F:0D:FB:F8:E2:D7:2E:71:F1:E4:EE:2C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E53055106EEDE2F0DFBF8E2D72E71F1E4EE2C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/0/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:a5:c8:30:b2:13:e7:d5:7b:e0:63:9a:31:98:9b:3a:29:
         8d:bd:a7:64:00:06:25:60:3d:50:00:99:d0:ed:c1:28:0a:26:
         72:30:57:35:13:cf:c2:60:da:19:57:de:83:c2:33:3e:9c:c2:
         02:4f:f5:11:46:c3:bd:e1:a7:bd:a0:38:4e:4e:02:11:d7:9d:
         e2:d5:c6:cc:4f:a2:84:c8:f2:59:0e:00:44:47:52:30:5a:40:
         05:2e:f5:9f:a6:8b:c0:17:95:74:ed:bc:5b:59:48:68:eb:6d:
         77:fa:d9:ae:ce:5e:98:14:f5:cc:01:10:87:ad:89:8b:51:ff:
         43:e5:5d:5b:f7:f3:ce:09:ea:0c:95:64:13:d2:d4:01:34:62:
         32:20:f8:2d:31:be:ad:bb:2b:90:da:4a:38:e2:4d:37:d8:ca:
         53:c6:7f:e7:61:7f:4b:25:fa:ec:9e:99:1b:6f:69:4c:8f:01:
         04:23:40:af:c5:64:76:be:c3:c2:17:d2:56:bc:2b:af:6f:a9:
         f1:d1:56:14:c3:eb:95:2f:48:3e:fc:33:2b:be:81:52:d6:4d:
         38:21:cf:03:81:8a:88:67:4d:6e:66:b1:61:ee:2d:41:60:4a:
         c8:a3:8e:a7:de:a7:96:01:bf:7f:36:47:cc:3e:0a:d3:2a:17:
         75:2e:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org