Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3232302e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3232302e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          FVLZu3XtL4+5vcpvbq2dUDnnQv/bcFuVfcvXcQYhStw=
Subject key identifier:   3C:DD:20:48:02:77:9B:A7:2A:66:4E:6D:FD:25:67:48:63:6B:3E:70
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       235BA3B18F6A260E7889CD07FF5D82DE51FA2F0F
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3232302e302f32342d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:34 +0000
ROA not before:           Tue 07 Nov 2023 11:39:34 +0000
ROA not after:            Tue 05 Nov 2024 11:44:34 +0000
asID:                     52871
IP address blocks:        201.157.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5b:a3:b1:8f:6a:26:0e:78:89:cd:07:ff:5d:82:de:51:fa:2f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:34 2023 GMT
            Not After : Nov  5 11:44:34 2024 GMT
        Subject: CN=3CDD204802779BA72A664E6DFD256748636B3E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:9e:11:97:7b:36:7a:67:2a:90:be:4c:e1:
                    da:e7:3c:e4:61:94:be:12:6b:21:a4:fe:3a:f2:3e:
                    7c:f5:4c:e3:9c:e1:d2:8d:7c:50:f4:51:3f:24:52:
                    bb:83:c1:f1:c7:0f:9e:4d:91:bb:4d:f3:35:61:f9:
                    99:47:c0:ab:11:c7:4f:60:33:68:50:49:33:27:11:
                    20:aa:56:e3:35:6f:c4:88:1f:3b:b9:8b:d9:93:08:
                    5c:07:32:e6:8d:17:fb:c6:8a:bf:c4:28:ae:c4:23:
                    c8:04:26:35:a8:6b:50:5d:08:d0:fd:48:23:93:90:
                    06:52:cf:e0:4a:20:25:61:75:ee:7e:3a:d9:ba:88:
                    9d:e2:c8:dc:47:0c:55:ab:6c:0d:8e:21:4a:b8:68:
                    87:f7:2b:3b:9d:eb:82:ba:27:8c:6b:06:d8:8c:bb:
                    1a:a2:4a:47:0c:d1:fa:10:b7:db:04:75:93:8f:e1:
                    c7:80:b2:cd:49:2f:a5:d0:4f:99:ab:f8:88:23:2f:
                    9f:d7:14:b7:d5:06:f4:5e:91:e9:a8:2e:73:7d:43:
                    05:b5:de:72:8e:1c:4b:54:60:1f:3b:91:4c:e8:c4:
                    66:1a:cc:ff:1d:04:85:30:4e:97:02:2a:8a:1f:99:
                    0a:d4:d0:f2:ae:4e:3e:00:55:09:da:f1:d6:72:ba:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:20:48:02:77:9B:A7:2A:66:4E:6D:FD:25:67:48:63:6B:3E:70
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3232302e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:22:fe:b6:cb:a9:f0:d6:8e:e0:c4:96:ad:c7:d4:0e:ab:17:
         6a:86:46:bc:4a:c7:aa:84:49:60:17:92:84:40:01:69:38:91:
         d9:d3:07:41:43:d6:ba:aa:e5:1e:5e:94:9f:b1:fd:ca:87:dd:
         dd:37:2c:dd:52:f6:07:89:80:ab:00:86:f7:4e:0e:34:d4:55:
         5e:b7:a1:98:92:75:84:21:ad:23:4b:be:66:e1:89:33:4b:34:
         9f:10:7c:53:82:c6:53:ee:42:76:42:71:dd:19:aa:e3:a8:63:
         47:66:d6:b2:34:f6:29:d9:bf:46:2b:13:cd:54:2b:22:52:09:
         03:df:04:9d:f2:76:76:cd:6e:f6:81:b5:b9:2c:f3:7b:da:c4:
         1d:07:ab:53:86:c1:3f:64:9a:36:1a:a1:68:e8:ce:94:27:e9:
         bf:be:b9:59:73:0c:74:72:d6:75:4a:d9:9c:fa:9c:38:e1:b8:
         31:e1:ac:0f:21:8c:43:77:df:fb:2c:df:97:a7:4c:df:c1:b7:
         c0:05:f3:47:e1:59:0b:e8:f0:35:5e:1a:cb:4b:c1:ae:97:f6:
         10:57:2b:d8:fb:ec:46:17:42:b8:ed:20:c4:b8:8e:17:92:6f:
         5f:7a:e6:e8:b3:4e:25:a0:93:29:45:03:a0:25:7f:4f:7b:f9:
         b1:8d:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org