Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32332d3233203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32332d3233203d3e20323730393135.roa (raw, json)
Hash identifier:          mgfKx4rGb5Qw4MB0cwOTA1Zz1+OhDJO3eO9sqHO94YY=
Subject key identifier:   4D:60:11:82:EF:0F:C3:56:31:E9:26:D8:D6:65:44:ED:44:42:40:A4
Certificate issuer:       /CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
Certificate serial:       7356DE10023962384C670E1159F8B2E50311A579
Authority key identifier: 6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32332d3233203d3e20323730393135.roa
Signing time:             Wed 20 Mar 2024 23:41:16 +0000
ROA not before:           Wed 20 Mar 2024 23:36:16 +0000
ROA not after:            Wed 19 Mar 2025 23:41:16 +0000
asID:                     270915
IP address blocks:        201.140.216.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:56:de:10:02:39:62:38:4c:67:0e:11:59:f8:b2:e5:03:11:a5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
        Validity
            Not Before: Mar 20 23:36:16 2024 GMT
            Not After : Mar 19 23:41:16 2025 GMT
        Subject: CN=4D601182EF0FC35631E926D8D66544ED444240A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7b:04:b2:21:5f:89:ec:92:3a:a8:d9:6d:99:
                    3e:d8:5c:ad:2b:58:2c:67:0e:65:eb:b6:c0:56:f0:
                    fe:dc:08:05:a2:14:56:18:94:e0:a4:57:dc:02:9f:
                    10:0a:4e:04:06:42:ea:a4:0a:ae:64:1a:e3:08:c3:
                    4c:cf:fc:52:47:91:72:77:90:a9:0c:a6:02:61:cb:
                    6b:f2:e3:8a:eb:9c:df:f1:da:08:44:01:59:5a:6d:
                    a2:8e:2f:11:50:fb:69:d8:ac:04:9a:92:84:df:1e:
                    95:90:ae:43:45:20:7b:31:0e:a8:d5:5f:66:38:35:
                    f5:19:ce:2e:73:07:c7:48:e7:43:c9:31:fb:e9:c2:
                    e1:96:c8:9b:03:8e:34:6d:1e:51:d9:3a:a8:7c:3a:
                    47:c9:fe:06:99:a6:85:32:45:3b:11:8d:8b:8c:5a:
                    8a:dc:f5:78:6a:29:b0:61:40:84:bc:9e:c9:b9:c6:
                    c4:b2:cd:6f:e8:6b:b7:11:22:56:4a:07:e5:a2:b4:
                    64:9a:a1:ed:81:fa:2a:4c:c7:3f:34:5f:83:b6:98:
                    95:0f:4d:18:1e:67:53:52:d4:5a:1d:d2:5b:1e:e9:
                    08:23:95:e5:bc:87:9c:72:4f:64:7d:7a:fa:9b:7b:
                    73:51:b6:33:02:72:b9:5d:a6:2a:6d:76:21:f5:a5:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:11:82:EF:0F:C3:56:31:E9:26:D8:D6:65:44:ED:44:42:40:A4
            X509v3 Authority Key Identifier:
                keyid:6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32332d3233203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:32:9d:ea:31:74:5c:79:53:d0:93:5c:23:5c:2f:98:ed:7e:
         a3:40:d6:79:1d:7b:4a:05:00:7f:a6:41:88:fa:10:be:30:49:
         c0:05:85:f9:d5:ab:10:79:96:c9:e1:3a:48:8c:95:8a:92:da:
         93:7b:b5:f0:6b:94:4d:f6:d1:84:91:84:c4:4f:15:45:78:a9:
         c6:d5:eb:82:c5:9d:9a:e6:52:4d:e1:a4:a2:a4:9a:7c:42:a0:
         81:48:6f:6f:a3:d6:12:11:4f:18:49:82:77:00:ea:c8:23:f5:
         9a:34:8a:46:19:5b:9a:04:19:70:47:8b:fc:0d:00:38:16:86:
         34:d5:c2:62:62:c5:7d:30:77:1e:b6:96:a9:86:d4:72:d1:54:
         f1:37:e0:a4:7a:4e:89:0a:bf:57:3c:3d:96:28:a5:a8:d9:9b:
         29:51:75:77:7f:a0:e2:48:ec:af:ad:fb:c3:7e:ad:13:c5:a5:
         26:a7:a1:be:d8:63:10:44:00:03:0d:10:33:5b:b2:19:f8:d6:
         0f:7d:68:a0:85:7a:4f:ca:b8:86:c5:2b:69:41:76:38:93:70:
         a0:a1:49:b2:c0:05:ff:fe:2a:02:a2:56:54:31:65:cb:f7:09:
         8b:5d:ed:cc:09:91:4b:8e:13:31:36:39:8d:95:29:83:8e:a8:
         7b:af:40:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:40 2024 by rpki-client on console-fra.rpki-client.org