Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa
File:                     3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          sDbh44hZt9KstF6DqUHUb4H16Yr392zN2WUFZ0NQzuY=
Subject key identifier:   C2:5F:4D:AB:67:18:FE:77:FB:B9:DB:AF:4E:49:DB:E7:5C:93:6C:5E
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       0B8CEC1FDEEBF6CB347AB36B0B04352412C3C298
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa
Signing time:             Thu 26 Oct 2023 15:44:17 +0000
ROA not before:           Thu 26 Oct 2023 15:39:17 +0000
ROA not after:            Thu 24 Oct 2024 15:44:17 +0000
asID:                     28346
IP address blocks:        201.157.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8c:ec:1f:de:eb:f6:cb:34:7a:b3:6b:0b:04:35:24:12:c3:c2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 26 15:39:17 2023 GMT
            Not After : Oct 24 15:44:17 2024 GMT
        Subject: CN=C25F4DAB6718FE77FBB9DBAF4E49DBE75C936C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:e3:5f:d8:ee:67:3d:12:0d:bf:be:63:3b:
                    b2:64:51:77:e1:10:13:d4:6f:c5:d1:77:4b:d4:04:
                    0b:4e:31:2d:89:18:3c:84:4a:ea:48:53:0e:6d:8f:
                    a0:59:38:e3:48:be:92:82:72:37:4e:8f:63:ff:da:
                    6f:f6:31:47:c7:08:05:04:50:31:77:22:52:b2:45:
                    0e:7a:2d:83:b8:6f:01:87:ea:37:b1:a6:d8:4e:ad:
                    ca:cc:b3:f0:54:f5:d6:cd:35:b7:3b:1c:1f:3d:3a:
                    7b:91:ee:8d:ca:f7:c3:03:16:53:57:37:d9:9d:1b:
                    12:d0:8d:1d:d1:ab:de:7f:82:61:97:de:a0:43:03:
                    b7:0e:5f:34:22:03:3a:ca:a2:7c:2f:cf:1f:8f:fe:
                    8d:20:24:c2:4f:d5:cb:e0:02:8c:88:9b:37:12:57:
                    b5:d0:e2:39:30:92:5c:bc:9d:b8:83:f8:9f:23:e0:
                    24:86:7d:86:ae:d6:7b:a3:63:6d:3b:ec:ee:23:75:
                    6c:eb:03:e7:5d:4d:55:6d:73:62:bc:42:48:fd:9b:
                    91:67:44:f6:e7:32:f1:d6:8b:0c:c8:4c:60:6d:15:
                    15:89:d0:80:49:4d:84:ca:0d:dd:1f:e2:89:a1:45:
                    f1:3a:aa:f4:c3:07:a4:97:91:2e:47:4d:33:3f:2f:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:4D:AB:67:18:FE:77:FB:B9:DB:AF:4E:49:DB:E7:5C:93:6C:5E
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3230392e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a1:8c:6c:17:3f:f5:53:5d:31:56:f2:10:4f:76:3d:40:9c:
         87:bb:91:2d:af:96:a9:5c:b7:15:fe:86:f7:0c:92:1a:d7:c7:
         ae:82:51:5d:ff:15:1a:9f:7f:33:05:c0:34:18:c2:39:b3:32:
         4e:03:3a:aa:dc:ff:d8:92:9d:5a:97:ab:89:d6:a4:c6:a6:5f:
         2e:b9:28:ce:b0:a1:8a:69:37:d7:90:2d:6f:71:6a:87:20:3c:
         cd:15:09:17:a6:54:7a:4c:06:4f:18:17:25:d7:ed:fd:91:84:
         e7:5e:7d:48:64:14:af:2a:6f:d0:ef:b8:a9:00:2c:eb:8f:93:
         f9:53:80:ad:d5:f3:34:89:93:71:9a:43:14:f4:f8:9d:19:eb:
         3c:a3:1b:58:41:06:5e:84:86:57:04:d4:46:a4:c5:9d:cf:af:
         be:2c:04:c1:05:c3:59:f4:9e:a5:27:28:00:e4:09:a0:8f:22:
         33:47:b9:0c:a4:5e:b5:b5:d9:d7:41:d2:82:4f:13:25:20:06:
         75:51:90:e7:d4:cd:a3:15:eb:cb:ef:cc:fe:fb:11:ff:c2:3a:
         5c:81:49:92:b1:60:3c:6a:e2:2a:fa:92:06:a9:d0:d3:3e:7e:
         79:86:16:88:98:53:9f:1b:22:3e:f7:48:15:60:12:8a:f0:82:
         e6:65:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org