Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa
File:                     3230312e35342e3136302e302f32302d3332203d3e203238363234.roa (raw, json)
Hash identifier:          tIWwkZhQ29pJE9k5bX4V5S91qqFhGHUQKOIyod57fzM=
Subject key identifier:   72:BB:DF:2D:6C:FF:3F:BB:19:28:F1:92:70:50:40:71:4B:40:00:62
Certificate issuer:       /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial:       74909B1C73AB4308297A34FB20779CBAF6E01CB9
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa
Signing time:             Tue 02 Apr 2024 13:18:34 +0000
ROA not before:           Tue 02 Apr 2024 13:13:34 +0000
ROA not after:            Tue 01 Apr 2025 13:18:34 +0000
asID:                     28624
IP address blocks:        201.54.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:90:9b:1c:73:ab:43:08:29:7a:34:fb:20:77:9c:ba:f6:e0:1c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
        Validity
            Not Before: Apr  2 13:13:34 2024 GMT
            Not After : Apr  1 13:18:34 2025 GMT
        Subject: CN=72BBDF2D6CFF3FBB1928F192705040714B400062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:07:f6:c2:6c:b6:50:59:a6:7f:ec:26:96:
                    53:56:a7:bf:3b:0d:9c:ee:d3:34:77:18:75:b2:88:
                    6d:74:10:87:0c:cf:99:20:2c:dd:f3:99:20:e3:ce:
                    0b:2a:96:82:15:70:f7:c2:fa:f6:ac:a2:6a:68:d1:
                    ce:df:c3:a3:00:65:4c:e8:79:f2:8e:bb:1f:39:5a:
                    f7:93:64:b3:18:06:1d:92:14:6e:13:c0:60:de:6c:
                    af:95:46:bf:23:3b:f9:de:f9:7a:af:da:92:92:4c:
                    b1:34:09:a6:40:5b:ed:64:a5:df:af:dd:d0:12:ba:
                    78:21:0e:5f:45:83:2a:07:49:77:c6:65:77:50:4c:
                    aa:74:f2:7d:21:11:26:5e:0e:b1:98:32:79:13:40:
                    54:86:40:24:17:72:89:13:74:5d:7a:d3:51:35:04:
                    8c:1c:00:81:06:e6:bf:27:57:d1:65:9a:33:21:ca:
                    59:81:79:05:78:38:09:5d:66:7a:7f:c5:a6:3d:3c:
                    39:50:7e:5c:2e:16:8d:c6:0b:db:d3:a2:76:cd:4e:
                    05:ee:58:88:0f:24:0f:64:71:be:d2:2b:b3:8c:7b:
                    c9:ba:f4:77:05:fa:4a:6c:12:e8:69:53:37:61:97:
                    37:45:75:50:68:3c:af:62:e4:33:47:16:f5:4e:91:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:DF:2D:6C:FF:3F:BB:19:28:F1:92:70:50:40:71:4B:40:00:62
            X509v3 Authority Key Identifier:
                keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:25:0a:fe:6a:13:4a:dd:14:eb:19:20:31:fc:60:1d:b0:55:
         4f:b0:77:56:42:45:d3:20:35:90:af:90:2e:f9:09:8b:e3:b8:
         51:af:d9:00:d4:33:6d:2f:2e:d1:82:dd:30:46:a6:7e:84:59:
         0f:17:19:ab:05:ef:0c:dc:44:02:41:f6:26:94:d1:b1:cd:42:
         3c:90:4c:7d:79:30:96:a5:e7:18:29:9c:95:4e:85:d1:ef:73:
         bc:ff:2d:d2:1e:d7:7b:93:bb:cb:50:ce:fe:57:66:99:5e:4f:
         1c:ae:cb:1c:52:9e:e1:66:06:32:74:04:a0:dc:a5:c9:f0:ea:
         80:bd:fd:df:ec:8c:c8:38:6d:e4:b6:cf:40:6c:de:30:8e:f9:
         d5:2e:3d:b7:a3:6e:2d:1c:86:83:1a:f2:a9:01:15:71:51:c5:
         79:2c:55:b8:bb:14:54:65:07:c3:80:da:82:48:1a:49:39:dc:
         eb:5e:d5:dc:bd:ed:0f:96:d4:e3:45:7c:8a:a6:d4:31:a8:d6:
         ce:ed:ba:e0:bc:f9:3a:ec:60:e3:ce:d2:f8:60:02:9b:16:16:
         f8:7a:42:42:96:72:5e:09:8b:4f:2e:25:39:91:20:c4:21:19:
         f3:42:f5:dd:29:48:26:1f:0a:af:48:d2:ec:5c:46:1c:81:8f:
         e1:ee:65:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdJCbHHOrQwgpejT7IHecuvbgHLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCMkRBNDUyQzIyNTQzRDYxMkVDRjMwNTFGQURCN0I3
MTdCNzg4NjAeFw0yNDA0MDIxMzEzMzRaFw0yNTA0MDExMzE4MzRaMDMxMTAvBgNV
BAMTKDcyQkJERjJENkNGRjNGQkIxOTI4RjE5MjcwNTA0MDcxNEI0MDAwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6Qf2wmy2UFmmf+wmllNWp787
DZzu0zR3GHWyiG10EIcMz5kgLN3zmSDjzgsqloIVcPfC+vasompo0c7fw6MAZUzo
efKOux85WveTZLMYBh2SFG4TwGDebK+VRr8jO/ne+Xqv2pKSTLE0CaZAW+1kpd+v
3dASunghDl9FgyoHSXfGZXdQTKp08n0hESZeDrGYMnkTQFSGQCQXcokTdF1601E1
BIwcAIEG5r8nV9FlmjMhylmBeQV4OAldZnp/xaY9PDlQflwuFo3GC9vTonbNTgXu
WIgPJA9kcb7SK7OMe8m69HcF+kpsEuhpUzdhlzdFdVBoPK9i5DNHFvVOkacJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcrvfLWz/P7sZKPGScFBAcUtAAGIwHwYDVR0j
BBgwFoAU3bLaRSwiVD1hLs8wUfrbe3F7eIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9EREIyREE0NTJDMjI1NDNENjEyRUNGMzA1MUZBREI3QjcxN0I3ODg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REQjJEQTQ1MkMyMjU0M0Q2
MTJFQ0YzMDUxRkFEQjdCNzE3Qjc4ODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzMDMxMmUzNTM0MmUzMTM2MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyTagMA0GCSqGSIb3DQEBCwUAA4IBAQBZJQr+ahNK
3RTrGSAx/GAdsFVPsHdWQkXTIDWQr5Au+QmL47hRr9kA1DNtLy7Rgt0wRqZ+hFkP
FxmrBe8M3EQCQfYmlNGxzUI8kEx9eTCWpecYKZyVToXR73O8/y3SHtd7k7vLUM7+
V2aZXk8crsscUp7hZgYydASg3KXJ8OqAvf3f7IzIOG3kts9AbN4wjvnVLj23o24t
HIaDGvKpARVxUcV5LFW4uxRUZQfDgNqCSBpJOdzrXtXcve0PltTjRXyKptQxqNbO
7brgvPk67GDjztL4YAKbFhb4ekJClnJeCYtPLiU5kSDEIRnzQvXdKUgmHwqvSNLs
XEYcgY/h7mWz
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org