Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          AZZbnOlAAxbEMQOGwnips+CrIxkASbyNUGB68g1rpGI=
Subject key identifier:   7A:D8:0A:FA:49:11:C8:16:94:E5:46:7E:09:C0:B8:F5:C0:01:2F:90
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       077BDAE8D4D12B7C818C9DD55562D0AE47141DB5
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:33 +0000
ROA not before:           Tue 07 Nov 2023 11:39:33 +0000
ROA not after:            Tue 05 Nov 2024 11:44:33 +0000
asID:                     52871
IP address blocks:        201.157.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:da:e8:d4:d1:2b:7c:81:8c:9d:d5:55:62:d0:ae:47:14:1d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:33 2023 GMT
            Not After : Nov  5 11:44:33 2024 GMT
        Subject: CN=7AD80AFA4911C81694E5467E09C0B8F5C0012F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c3:a1:8e:f2:32:ac:3d:82:9e:43:7e:e8:ad:
                    8d:30:31:3f:20:39:85:6d:2d:b5:1b:23:12:41:7e:
                    bc:20:17:f3:29:ca:ae:01:fe:70:96:92:48:cc:52:
                    26:66:2b:5a:e8:ab:84:70:88:08:30:81:2b:d1:78:
                    0d:96:36:24:d1:31:52:28:6f:0a:49:ce:8a:42:00:
                    de:a2:13:29:7f:ef:95:9b:65:bb:c9:ca:cf:85:67:
                    47:c4:84:2a:f1:d0:2b:7a:33:27:7c:ae:9f:9a:89:
                    8c:fe:94:eb:42:a4:75:1f:d4:b8:1e:4f:e1:1a:63:
                    bd:f7:cc:4c:83:11:b5:d3:39:5c:47:0d:28:2e:30:
                    b4:f4:a4:e1:9e:99:02:5d:24:d5:05:04:bf:67:60:
                    02:51:79:12:52:2d:08:46:f4:c6:78:89:b1:80:4c:
                    15:42:74:40:b9:cb:ae:ab:37:a9:2f:ec:95:44:0c:
                    fc:7d:b4:a7:e6:45:da:6b:6a:23:b9:8a:35:5f:6b:
                    75:96:bd:58:92:e4:b4:02:7e:34:dd:54:36:09:6e:
                    27:00:97:27:a3:df:b3:87:d7:0c:57:9d:0f:c1:a5:
                    48:b4:75:ec:e2:b3:51:1f:8c:05:41:b3:c5:0f:2a:
                    93:73:ec:6c:b4:e3:df:63:aa:5f:f8:05:b0:24:f6:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:0A:FA:49:11:C8:16:94:E5:46:7E:09:C0:B8:F5:C0:01:2F:90
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:05:4f:ed:97:a2:d3:37:60:62:b1:0b:8c:16:c5:05:20:d3:
         35:82:44:11:7c:48:9e:e5:ad:15:90:4f:1e:60:aa:64:ff:d5:
         6e:80:1d:7e:ac:6a:79:65:52:88:9d:55:74:2f:0e:f9:94:39:
         4b:44:6c:cd:a2:f3:e8:f9:39:40:9e:b6:38:66:5f:81:d6:97:
         6b:b0:18:99:13:48:63:77:66:c2:44:de:21:b4:3c:2f:d3:8d:
         57:58:7b:a3:fc:f6:4d:26:9c:d8:55:5c:30:3d:66:7b:7d:dc:
         4e:91:38:d1:ca:d5:ea:6c:2b:53:b2:c4:3e:2e:f8:b0:0a:fb:
         9f:be:3c:49:9c:98:9d:e0:ad:e9:53:04:09:6d:c0:c2:9c:fa:
         7a:29:e6:61:08:f4:06:16:a0:b3:30:e9:c9:9f:1a:7e:99:e8:
         52:59:bb:13:f6:59:6f:ab:46:de:ed:1f:46:04:4f:90:d1:b4:
         e1:46:99:bf:c4:d5:38:a7:66:c2:e9:9f:84:7a:86:1d:09:3b:
         48:d9:2f:26:b1:cc:61:a9:30:e8:b6:5d:62:15:bd:31:ec:7e:
         3c:12:df:a6:69:f6:e6:aa:f7:b2:3e:c4:1d:20:bf:4b:eb:a9:
         79:d3:d2:0c:ac:a3:29:a1:57:3f:9a:2e:7e:02:34:fc:1a:c3:
         b6:a5:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org