Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
File:                     3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier:          DyuFuguA+vkzJKPKcMdKo33rI22toa/3nKswQVn7yIA=
Subject key identifier:   6A:AD:D2:0E:8F:5B:81:F8:78:6F:E1:04:E5:F0:A3:CA:44:E4:A2:4E
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       29CA168303F1852C2AF60370E271EBAD62024F41
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa
Signing time:             Fri 27 Oct 2023 11:38:48 +0000
ROA not before:           Fri 27 Oct 2023 11:33:48 +0000
ROA not after:            Fri 25 Oct 2024 11:38:48 +0000
asID:                     52871
IP address blocks:        201.157.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ca:16:83:03:f1:85:2c:2a:f6:03:70:e2:71:eb:ad:62:02:4f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 27 11:33:48 2023 GMT
            Not After : Oct 25 11:38:48 2024 GMT
        Subject: CN=6AADD20E8F5B81F8786FE104E5F0A3CA44E4A24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:aa:96:22:50:cb:71:3b:37:79:32:ea:44:
                    2d:67:65:cc:cc:dd:27:6f:5f:af:0b:95:41:3d:b1:
                    91:5b:0f:bc:6a:6c:59:1c:62:15:50:43:a6:e0:7f:
                    c7:1d:2b:f0:7f:50:b0:3f:65:65:67:db:5b:3f:c7:
                    72:2d:fd:d7:fe:23:2b:39:76:c0:64:e5:c4:5d:29:
                    38:d3:bd:ea:28:cc:60:fe:61:f5:e3:10:0e:a3:99:
                    96:2c:6c:c7:41:5a:bd:e3:39:67:2f:5d:48:a9:8e:
                    03:79:1c:c6:30:4f:05:4a:87:4d:1a:60:49:bd:42:
                    7d:ec:52:78:fb:f4:0c:81:43:be:28:c5:c9:4b:30:
                    33:cd:e1:41:79:2c:d0:a9:c5:6b:21:81:27:14:6b:
                    a1:54:3e:19:41:33:db:09:00:39:fb:91:37:3a:c6:
                    3d:b2:8b:67:71:bc:9b:61:83:60:36:95:29:ad:41:
                    4d:5e:7a:5a:0a:83:64:09:28:9d:56:b1:7a:ae:0b:
                    13:48:9e:d3:8d:b6:1a:4f:c2:46:3e:61:80:42:c9:
                    30:e9:45:b7:20:d7:3f:c7:fd:38:41:e3:ff:4d:20:
                    49:49:39:cd:ec:0c:66:c4:2e:7f:7b:d7:32:12:dc:
                    d5:59:21:34:2e:8c:5b:9b:09:fe:f2:0d:34:79:4c:
                    d4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AD:D2:0E:8F:5B:81:F8:78:6F:E1:04:E5:F0:A3:CA:44:E4:A2:4E
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230302e302f32312d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:39:e7:77:bb:c0:5b:65:2b:3d:a5:d4:2b:72:43:31:ae:
         ea:90:4d:ad:de:3c:3e:b4:96:3e:19:9a:e8:e5:9c:55:58:69:
         0b:40:23:e2:ce:3a:93:f1:b3:d2:08:ad:75:42:cf:91:3e:ef:
         d7:fb:e1:99:c0:c2:62:46:7e:2f:e8:fe:fb:a2:a8:1c:4e:61:
         93:4e:25:53:bf:49:31:37:11:33:20:d4:cd:f6:5b:ba:16:05:
         63:25:4f:a5:e5:e0:3f:1a:6b:99:41:9b:45:09:8b:ba:4d:f4:
         3a:73:3e:86:ab:52:7e:9b:26:1a:ce:93:5f:da:3f:97:a4:7e:
         20:f8:48:9f:46:49:9d:4c:02:78:d0:a2:c8:11:75:ee:ed:3a:
         27:60:06:8e:47:d0:5c:c4:48:92:4d:bb:2f:70:19:0d:04:fc:
         e2:3a:cd:8c:42:df:4c:27:06:3f:a7:d4:ce:72:5c:49:03:97:
         13:01:c1:53:32:29:d9:b1:01:e6:de:35:67:ae:7d:90:ec:72:
         01:81:dc:5d:0b:c2:85:65:a8:0d:1d:07:c7:6d:fb:ba:1d:17:
         c5:54:35:a6:e5:6b:07:8a:b3:66:93:1b:81:0b:44:46:fa:df:
         6c:3d:27:c8:8d:33:05:aa:58:bf:2d:20:c3:81:1c:89:a1:77:
         a5:05:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org