Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          hEGASSaThWu7ImuMMLDAXZSgzmE1DGVs7nfNSsgxKco=
Subject key identifier:   DF:EC:49:9E:2F:62:47:74:01:41:AC:48:C8:F4:7A:06:13:23:4B:D8
Certificate issuer:       /CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
Certificate serial:       6FBCCFF22C4B343D579A7EE47455E77794455B19
Authority key identifier: 82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
Signing time:             Tue 07 Nov 2023 11:44:35 +0000
ROA not before:           Tue 07 Nov 2023 11:39:35 +0000
ROA not after:            Tue 05 Nov 2024 11:44:35 +0000
asID:                     52871
IP address blocks:        201.157.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bc:cf:f2:2c:4b:34:3d:57:9a:7e:e4:74:55:e7:77:94:45:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B766AF4D71B6A4C7306C3179E407F42047E4B8
        Validity
            Not Before: Nov  7 11:39:35 2023 GMT
            Not After : Nov  5 11:44:35 2024 GMT
        Subject: CN=DFEC499E2F6247740141AC48C8F47A0613234BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:aa:7b:1f:c9:6d:8c:a1:7b:90:77:ea:d5:
                    96:64:16:5b:68:72:b1:fc:82:55:86:49:87:dc:f4:
                    10:b1:98:27:2c:c0:0d:9b:2f:43:19:66:73:9e:7e:
                    4c:76:c3:cb:51:6f:7a:a9:93:d5:13:be:7f:29:ac:
                    c9:16:34:44:67:bc:1d:38:97:bf:90:13:50:a0:a4:
                    83:7a:51:97:78:93:f1:85:69:06:a8:7a:80:62:49:
                    6b:32:f5:f4:76:69:81:6e:91:96:9f:91:fa:b8:52:
                    1d:a0:fd:b2:45:fb:4e:00:a9:b1:27:36:73:8f:f8:
                    6e:d7:80:9f:15:40:3d:0f:24:45:76:f5:98:6f:9a:
                    28:68:33:d7:d5:b1:f9:eb:b2:fd:7d:42:a2:41:40:
                    5d:3d:16:ca:b2:e0:26:d0:a6:72:c1:67:bd:a3:3f:
                    cc:5d:4e:42:09:03:10:69:c4:41:68:8c:08:e1:f4:
                    68:9c:c5:79:b8:30:ad:f0:48:5c:68:d2:df:e8:7c:
                    ac:47:5e:2f:c1:77:20:7c:94:2c:db:b4:45:8e:87:
                    a1:59:7c:31:3f:a3:cf:95:4d:e2:c0:06:df:d5:d2:
                    0c:31:9e:59:ff:a0:54:6c:ac:a2:72:37:49:24:74:
                    bd:7b:30:97:79:4b:70:30:d6:6b:68:ba:69:a0:39:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:49:9E:2F:62:47:74:01:41:AC:48:C8:F4:7A:06:13:23:4B:D8
            X509v3 Authority Key Identifier:
                keyid:82:B7:66:AF:4D:71:B6:A4:C7:30:6C:31:79:E4:07:F4:20:47:E4:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/82B766AF4D71B6A4C7306C3179E407F42047E4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/0/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:8e:50:4f:28:7f:58:2b:64:7d:fe:de:4b:8c:58:06:cb:
         4e:32:28:fe:e7:3b:d4:ca:34:f9:b2:1e:2b:bd:2c:ef:63:50:
         61:e9:56:b8:34:eb:94:b4:a9:dd:11:46:22:72:87:1f:a3:91:
         42:33:8e:99:e3:d6:28:0d:80:b2:ed:25:62:b7:5b:cb:e8:82:
         61:db:56:ec:8e:3d:19:a9:7d:1f:7b:d5:67:07:62:72:a6:ce:
         ba:45:83:95:24:be:72:52:89:81:73:89:e0:4f:1a:fd:cc:44:
         97:1d:ec:38:f0:c8:47:66:5d:bd:e9:21:cb:3e:36:77:ed:24:
         19:e6:57:d9:b2:85:40:88:07:41:70:97:35:4f:ec:6f:a1:d3:
         46:0d:3b:d4:cd:f5:ef:38:b6:58:97:58:6b:5e:e4:2e:aa:b2:
         10:89:d1:37:8f:cf:30:6b:e5:ba:87:a7:97:7e:53:1b:8e:28:
         53:8a:10:be:1d:33:07:a6:fc:74:18:18:5d:b3:ae:27:02:b7:
         27:aa:78:dc:31:18:84:2d:cc:4e:7f:53:7a:78:b1:e8:ae:90:
         ef:aa:7d:7d:08:7c:cd:a2:b9:60:ed:ce:13:ed:a4:f5:bf:00:
         fa:7e:ab:27:b7:71:07:22:dc:06:91:9b:a1:7c:0e:83:35:1a:
         f5:e8:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org