Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          8G+WBNhLosBBByoxKOAWwwFtEPYO+GE73HzYV/HSznE=
Subject key identifier:   91:BE:DD:E0:E1:6B:2B:D7:EF:9D:C5:A6:B5:80:27:D4:D9:59:5C:CC
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       4475C2FFAF8DA3F93C1BA5FC1C7875D77B58D88B
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 26 Oct 2023 16:06:32 +0000
ROA not before:           Thu 26 Oct 2023 16:01:32 +0000
ROA not after:            Thu 24 Oct 2024 16:06:32 +0000
asID:                     52871
IP address blocks:        201.157.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:75:c2:ff:af:8d:a3:f9:3c:1b:a5:fc:1c:78:75:d7:7b:58:d8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 26 16:01:32 2023 GMT
            Not After : Oct 24 16:06:32 2024 GMT
        Subject: CN=91BEDDE0E16B2BD7EF9DC5A6B58027D4D9595CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:17:fa:18:29:86:b8:3c:df:2f:3a:55:e3:
                    36:06:7a:f3:58:24:cb:f5:29:ce:e5:80:66:26:1c:
                    61:61:ed:5f:b8:c3:e5:20:fe:42:ac:35:28:66:22:
                    74:e0:04:92:60:2c:db:71:c9:75:6f:b5:7a:15:fb:
                    14:9d:09:8e:e4:61:90:f4:a8:1b:41:e2:0d:f9:c9:
                    ff:d3:8f:53:48:ad:07:04:19:91:66:ea:e8:e6:e2:
                    8f:4f:97:45:18:53:40:47:98:34:b2:a5:05:c3:7d:
                    b2:9f:32:ac:ab:03:0b:27:24:73:93:a9:d5:1f:aa:
                    db:57:df:96:93:4d:df:05:79:e5:96:0c:8b:fc:7e:
                    c2:e9:0d:fd:48:ac:74:77:c8:42:75:79:3c:fe:c6:
                    6d:9c:5d:06:58:5a:67:0b:9a:ad:7c:d8:2b:24:e4:
                    e3:4d:51:5b:2f:32:5d:85:60:ae:77:7c:d1:0a:aa:
                    02:5c:f3:28:d9:e8:55:55:7f:fe:cb:60:99:22:32:
                    ca:6a:20:29:90:db:92:02:ed:c4:fd:82:d5:39:7f:
                    18:79:03:75:5d:8b:91:8b:e2:65:b5:99:f9:f7:a2:
                    12:6c:bf:2c:2c:5b:ec:9e:27:db:ba:2a:29:16:d4:
                    7d:e8:23:ad:f4:0d:61:82:c1:0e:ac:9a:f9:6a:e9:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:DD:E0:E1:6B:2B:D7:EF:9D:C5:A6:B5:80:27:D4:D9:59:5C:CC
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:99:5c:80:8a:1f:cb:c1:4e:e0:87:29:a0:c5:ef:1c:a9:86:
         33:a0:16:0e:ee:62:65:fd:78:2a:6e:27:77:a4:eb:cc:81:76:
         e2:02:9c:ab:4b:27:98:92:2d:87:e1:19:63:93:bb:6d:27:da:
         5c:96:35:27:eb:4f:c9:67:8d:77:f5:45:d0:d4:e3:e2:c2:49:
         b0:b7:15:2b:e4:cf:e5:dd:28:02:5e:04:2c:e9:33:7b:73:72:
         74:42:fe:35:c4:9f:55:d2:a2:a7:e8:75:8a:da:af:af:25:f1:
         c9:3d:e4:c7:87:7e:94:94:a7:33:ec:02:dd:db:5d:3d:1b:b6:
         60:9c:48:0d:34:36:2a:c9:c3:d5:c4:f9:03:c0:f0:2d:86:15:
         9c:b3:03:08:27:0f:09:5c:e9:b0:17:17:80:ff:59:bb:b4:38:
         1b:c9:3a:f4:55:29:f6:d4:eb:31:4f:55:84:88:54:27:00:88:
         11:98:56:52:fa:d0:18:2f:64:5d:44:77:3f:56:ff:94:00:79:
         b2:4c:d5:d3:2e:4b:10:14:a8:6d:29:aa:b3:7f:74:2e:7f:63:
         68:9e:00:58:9f:bb:42:c9:de:67:07:81:c4:b8:57:0f:9a:99:
         98:f0:4a:c6:9d:bb:25:2e:9b:a1:da:a9:9d:06:e1:eb:bf:f2:
         6e:cd:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org