Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          m+FdEZWSqM6PJukHVi3nZwg8b1QBowiE5AkXYx0bm94=
Subject key identifier:   A7:42:23:09:19:B1:FF:1D:72:A1:68:54:03:2D:1D:4E:89:6C:1B:B4
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       7E607C8250A4BA9F041ECAAA2009BB4307634E0A
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 26 Oct 2023 16:06:46 +0000
ROA not before:           Thu 26 Oct 2023 16:01:46 +0000
ROA not after:            Thu 24 Oct 2024 16:06:46 +0000
asID:                     52871
IP address blocks:        201.157.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:60:7c:82:50:a4:ba:9f:04:1e:ca:aa:20:09:bb:43:07:63:4e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Oct 26 16:01:46 2023 GMT
            Not After : Oct 24 16:06:46 2024 GMT
        Subject: CN=A742230919B1FF1D72A16854032D1D4E896C1BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:5f:d0:34:fb:c7:73:e4:d5:1b:6c:4a:bc:
                    56:7d:d7:22:f4:be:a6:83:9e:ee:93:53:14:89:c8:
                    20:40:a4:84:0b:c5:8a:94:0c:e2:9c:19:38:e4:65:
                    af:dc:79:5a:06:33:e3:fb:b0:2e:f2:ea:15:74:90:
                    ba:82:b3:65:8a:37:dc:aa:91:11:ac:93:c8:50:d4:
                    9c:30:9f:64:bc:f1:c3:e3:9c:dc:97:3c:12:c1:ef:
                    bd:10:3a:7c:b2:5a:ec:8e:f3:ce:ba:97:b1:62:b0:
                    60:b1:dc:e4:22:7b:fc:91:07:0a:74:14:10:23:be:
                    dc:b2:d7:ef:b6:e1:e1:61:ca:c8:10:e1:1f:b3:4f:
                    de:52:68:6a:da:c5:ec:c5:cc:6f:f8:39:ad:f3:bd:
                    6a:7a:06:54:f2:ed:0d:5e:3c:01:25:fa:cd:c2:83:
                    22:79:dd:3c:8c:1e:f6:eb:42:1c:d1:5e:2d:cc:04:
                    85:cc:02:a0:8f:de:63:b9:ae:0d:cb:54:2a:f9:89:
                    11:20:f4:de:6a:89:3e:12:ab:5b:d3:fe:7f:41:9b:
                    84:84:1f:95:02:66:3c:9a:7f:dc:34:7a:77:13:14:
                    56:54:9f:68:d8:a8:d1:8d:dc:da:93:de:c4:6d:5c:
                    13:69:43:1b:ad:17:9c:60:32:b9:8d:d5:84:e1:f8:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:23:09:19:B1:FF:1D:72:A1:68:54:03:2D:1D:4E:89:6C:1B:B4
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3233362e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:90:60:d3:c5:71:4b:20:f1:92:6e:94:32:79:ab:7a:4a:
         15:ce:f0:62:c9:3a:e1:ac:06:3e:0f:3a:72:54:81:7f:fc:3d:
         d1:04:89:7b:bc:8e:82:06:d3:05:68:85:a2:02:ed:00:c2:82:
         31:6f:d0:be:7b:df:86:54:28:d0:82:08:7e:89:06:c7:a2:35:
         46:c1:1b:ba:d1:0b:bc:b1:10:49:aa:7a:c0:a0:84:e1:cf:81:
         ae:c4:d9:e5:79:37:81:44:e7:85:6b:79:a0:74:06:e9:7e:dc:
         3e:df:2d:54:c5:51:82:0e:33:24:1b:e5:18:1b:4f:a7:60:9c:
         19:5e:7a:1f:88:8b:33:c6:31:60:8d:d4:5a:80:72:b4:9b:7e:
         66:1f:74:df:4d:9f:90:8a:08:50:d8:2e:83:e5:93:8b:1a:a8:
         11:87:a0:ad:84:80:7e:1a:f3:9e:0e:6a:7d:52:e3:dc:f0:7f:
         3a:db:cc:77:e2:dc:fe:eb:86:4c:7f:c3:1d:3d:b8:4f:a1:5c:
         f1:a4:c3:05:4d:1a:18:56:23:a6:e9:a8:29:18:af:f8:72:0e:
         b8:d7:94:8a:f7:76:ac:41:5a:7e:83:74:7e:68:c3:a5:ea:e4:
         dd:3f:39:86:69:d7:a6:58:10:8c:45:08:90:f7:79:15:29:0e:
         e1:cf:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org