Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3231302e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231302e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          DB9+Xkx542AHo0aaxiwM9IvuuUglWAUdksNXK6iTL7w=
Subject key identifier:   06:F9:9F:CD:EF:50:B8:9F:80:E4:83:9E:3B:D0:5F:1C:64:B3:B9:B2
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       6049392965727C8A87067460511FADAEA71B702D
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3231302e302f32342d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:32 +0000
ROA not before:           Tue 07 Nov 2023 11:39:32 +0000
ROA not after:            Tue 05 Nov 2024 11:44:32 +0000
asID:                     52871
IP address blocks:        201.157.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:49:39:29:65:72:7c:8a:87:06:74:60:51:1f:ad:ae:a7:1b:70:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:32 2023 GMT
            Not After : Nov  5 11:44:32 2024 GMT
        Subject: CN=06F99FCDEF50B89F80E4839E3BD05F1C64B3B9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:a4:34:96:e3:fc:c6:59:56:57:47:64:c6:
                    f9:31:ef:0e:c3:42:3e:92:e3:c8:42:49:b8:a9:1d:
                    1e:af:90:61:72:c0:a4:21:c4:21:e5:03:48:5e:a7:
                    de:41:f7:27:5f:f4:15:40:72:7f:29:4b:f7:ec:36:
                    b5:b8:82:fe:09:f0:6a:f4:5e:93:ec:23:ef:52:b5:
                    28:5d:50:bb:9c:7f:ab:45:2a:5f:b3:07:2c:d1:db:
                    97:35:cf:9c:a5:b0:54:06:cd:9e:69:2b:b4:42:c0:
                    b9:6c:7e:4e:2a:a9:91:83:94:64:e5:e8:8a:e1:73:
                    8f:b7:da:f5:5e:4c:18:5d:84:e1:2e:3e:9d:7c:f0:
                    03:e5:82:25:43:c8:af:aa:1b:e0:cf:92:21:c2:64:
                    84:17:c7:6d:cb:7c:5c:53:f8:98:94:1c:96:1c:fa:
                    c4:6e:e5:b7:a5:c1:ec:12:0e:de:38:7d:ae:6f:ed:
                    82:e4:b3:d0:fd:9b:63:e7:e0:27:50:4d:5f:74:31:
                    31:f4:a2:b0:3b:41:80:27:40:92:23:74:7f:25:3f:
                    77:36:e6:6e:97:09:f7:ac:b2:ba:09:0d:ec:74:5d:
                    6e:91:97:2f:68:44:a3:9b:e2:39:31:12:79:00:20:
                    34:f4:96:0f:30:f0:b5:69:c1:3a:fe:a8:15:8d:07:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:9F:CD:EF:50:B8:9F:80:E4:83:9E:3B:D0:5F:1C:64:B3:B9:B2
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3231302e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:cc:30:07:f6:07:02:ae:9d:5d:48:e4:c3:80:e6:cd:43:8e:
         a4:0d:ad:e3:c0:46:eb:41:84:66:7f:d5:a2:6e:32:af:75:68:
         1e:9c:9a:dc:91:f1:e6:ce:2e:8a:45:b7:61:46:22:97:4b:9c:
         86:10:9a:31:69:dc:64:a8:64:8c:d7:83:92:2f:1a:04:6d:1c:
         e0:50:b7:be:c7:1e:8a:11:55:62:81:88:96:e0:53:df:bb:96:
         3d:60:2a:2f:17:d1:db:54:c6:67:18:54:5e:68:35:10:11:c1:
         bb:9b:6b:24:46:66:0c:7d:60:5d:66:6f:3d:10:04:32:44:5f:
         32:72:dd:e8:82:72:49:fe:f1:54:c4:38:ab:bd:8c:54:2e:a1:
         83:4b:72:cb:81:9e:fe:f2:bf:f4:32:f2:af:68:32:a7:93:9a:
         24:ad:e2:c7:45:92:a3:e7:70:3b:e2:6a:d3:e4:0e:b0:a3:9c:
         60:dd:46:4a:1a:bd:10:f0:75:63:e1:64:d1:10:e3:52:65:c9:
         53:8c:a8:8a:48:37:d2:3a:4f:80:00:14:9c:2c:7b:31:48:90:
         5e:14:d8:6e:ca:40:2a:94:53:37:99:34:e2:23:3e:6a:dd:de:
         85:4c:85:81:1c:ab:fc:c7:ea:a9:54:50:90:92:55:d7:0a:73:
         c8:d9:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org