Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          +jqIYeZ+OLf56K3x+v11YXYN5PL9P7fShIqSngmYtGE=
Subject key identifier:   74:3E:D6:59:C5:6E:CF:96:10:E3:15:7D:F2:36:24:D8:18:93:28:8C
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       562F642D732F94C891A9CEF8D2569B01DF5F5CF9
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:35 +0000
ROA not before:           Tue 07 Nov 2023 11:39:35 +0000
ROA not after:            Tue 05 Nov 2024 11:44:35 +0000
asID:                     52871
IP address blocks:        201.157.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2f:64:2d:73:2f:94:c8:91:a9:ce:f8:d2:56:9b:01:df:5f:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:35 2023 GMT
            Not After : Nov  5 11:44:35 2024 GMT
        Subject: CN=743ED659C56ECF9610E3157DF23624D81893288C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:96:8f:79:de:0a:fd:b3:05:f1:8b:6b:bb:
                    a3:58:41:f4:da:9e:13:15:01:e8:c1:79:61:52:6f:
                    e7:3a:5c:a9:3f:a4:06:c7:46:a7:02:d6:d9:37:fb:
                    19:e6:f7:5e:a4:b5:65:e2:70:0f:47:d1:0a:d4:43:
                    90:af:f5:be:54:8a:55:6a:72:32:63:b3:60:e1:b0:
                    04:53:67:96:4a:b6:f0:e1:df:f6:a9:10:71:d2:a1:
                    14:4b:8c:95:f9:cf:05:28:7a:8f:97:da:d1:bd:ad:
                    da:af:07:5c:b1:3b:91:e6:a8:93:4e:93:87:ae:6b:
                    b2:46:fc:b3:ce:4b:7f:ed:ed:03:75:fe:74:83:0b:
                    68:56:6c:f2:ca:fe:55:fb:d8:c7:d2:64:98:b5:16:
                    25:4a:79:45:38:50:0c:d5:2a:7f:f4:c1:c1:2c:2c:
                    c5:d4:bf:7e:da:78:3e:21:82:97:61:18:a4:50:5f:
                    28:ba:64:f1:00:a3:67:fe:8e:a3:ce:86:6d:dd:a4:
                    b4:94:aa:5b:63:f7:1d:70:4f:a1:5d:b4:55:38:f0:
                    15:1b:bd:87:7a:d9:6d:91:96:62:3a:34:6c:be:f5:
                    41:a4:5d:3d:32:f4:16:73:d1:21:01:99:2f:d5:11:
                    fd:55:4d:73:19:52:84:f2:cf:fb:d4:06:14:83:1c:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3E:D6:59:C5:6E:CF:96:10:E3:15:7D:F2:36:24:D8:18:93:28:8C
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233312e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:04:bf:49:dd:bb:7c:dc:5a:bc:bc:d1:33:a6:64:b2:b8:
         b8:d6:87:95:d5:4e:37:8a:3f:0a:fb:ff:d6:d7:8b:e3:f2:2c:
         08:f8:06:53:22:7a:7a:36:14:5b:25:93:60:1d:88:a1:fc:fd:
         42:29:c1:59:7d:8a:6a:12:e0:9e:5e:db:8c:09:78:69:04:48:
         4a:71:4c:c2:a8:56:f7:51:06:15:06:77:8d:b8:d4:20:18:68:
         2e:db:13:0b:56:83:81:44:7f:7e:41:ae:b2:3c:bf:52:6c:c4:
         9a:2c:07:17:29:a7:3b:aa:27:fe:43:17:41:d3:05:48:cf:b8:
         e7:62:69:dc:7f:be:07:80:96:e7:01:7b:62:e4:ee:1d:7e:3f:
         29:a8:15:a9:ee:6a:67:4c:c9:3d:e3:68:e7:07:97:e1:d0:7b:
         6d:e0:47:ce:e7:b4:d1:71:f1:9e:f9:af:e8:15:20:87:67:fc:
         ee:cd:79:0d:af:0f:46:19:4d:2f:b4:cf:fa:bd:98:65:ec:e8:
         ae:b5:06:6c:d7:63:d4:03:f3:45:e8:8f:a8:78:3e:99:c3:12:
         94:08:53:a4:64:32:57:54:07:a6:33:16:62:26:1e:7d:f2:b5:
         55:af:46:a1:4b:88:2a:95:17:40:16:f5:10:42:7b:07:9d:1c:
         1d:80:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org