Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3230312e37362e302e302f32302d3234203d3e203238363432.roa
File:                     3230312e37362e302e302f32302d3234203d3e203238363432.roa (raw, json)
Hash identifier:          UntpoW/a5VDusb2YfTyxKboNBd77NTsoXEkwuDzgkZg=
Subject key identifier:   5D:BD:91:11:6A:BE:BA:D0:6E:A2:51:D9:F2:72:F5:06:B5:EA:84:79
Certificate issuer:       /CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
Certificate serial:       094AB6861926D7277C1E3B3D939772E5D548AF6C
Authority key identifier: 13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3230312e37362e302e302f32302d3234203d3e203238363432.roa
Signing time:             Tue 26 Mar 2024 14:24:17 +0000
ROA not before:           Tue 26 Mar 2024 14:19:17 +0000
ROA not after:            Tue 25 Mar 2025 14:24:17 +0000
asID:                     28642
IP address blocks:        201.76.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4a:b6:86:19:26:d7:27:7c:1e:3b:3d:93:97:72:e5:d5:48:af:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133EC73F873552B7C1C2E7AA61D3014E33FB793E
        Validity
            Not Before: Mar 26 14:19:17 2024 GMT
            Not After : Mar 25 14:24:17 2025 GMT
        Subject: CN=5DBD91116ABEBAD06EA251D9F272F506B5EA8479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:6e:1f:71:d9:c0:21:2b:30:d6:01:a6:0b:
                    4a:49:2f:98:3d:22:a5:3b:cf:a0:67:35:3d:21:5e:
                    6f:f6:20:62:4a:96:ac:36:c3:69:ca:81:a5:3f:62:
                    be:1b:4d:9a:8a:34:cb:f5:6d:1f:44:84:9e:f5:8b:
                    47:ca:b6:52:58:2c:f9:82:53:de:4b:fb:de:9a:93:
                    14:d0:14:ba:ba:06:3e:a3:c1:9e:13:d2:5d:60:af:
                    98:e7:42:b0:5a:87:96:ba:8f:b2:67:a2:f1:76:da:
                    a1:c3:8f:91:46:51:a2:aa:76:b8:01:90:63:34:06:
                    6c:9a:55:85:30:38:54:0f:38:0d:86:86:67:60:7d:
                    04:89:5b:3e:2f:2d:06:87:7c:60:32:ce:c8:0a:2e:
                    1c:23:2d:43:11:4f:38:53:fc:40:4d:93:7b:20:d4:
                    06:f8:8f:af:e2:56:6b:fe:26:c4:d8:34:b2:e6:69:
                    f8:86:36:fd:ef:d9:ca:33:c4:94:f3:ac:b7:a8:e1:
                    e1:37:43:c0:2d:d2:39:68:29:d5:8a:42:50:e0:ef:
                    fe:d2:c2:7d:eb:1b:db:a0:38:a3:a1:69:e4:ff:49:
                    58:7e:54:ce:b6:ca:22:96:1c:12:2b:6a:49:eb:11:
                    80:db:f2:87:c6:fa:33:4f:43:f8:f2:48:0d:5f:f2:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:91:11:6A:BE:BA:D0:6E:A2:51:D9:F2:72:F5:06:B5:EA:84:79
            X509v3 Authority Key Identifier:
                keyid:13:3E:C7:3F:87:35:52:B7:C1:C2:E7:AA:61:D3:01:4E:33:FB:79:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/133EC73F873552B7C1C2E7AA61D3014E33FB793E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/0/3230312e37362e302e302f32302d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:74:2e:9e:a2:59:bc:3a:e6:51:11:76:8a:91:7f:f6:0e:38:
         a9:66:02:dc:e1:e2:b7:43:11:82:92:0d:e7:e5:a0:d5:25:55:
         35:64:c5:92:7b:f4:82:48:a3:09:f5:bf:09:67:44:30:28:6e:
         15:8d:6f:8c:ff:70:f6:48:f9:3c:85:44:d2:89:3b:48:16:cc:
         97:77:3e:c5:9b:6b:d9:df:a2:78:26:b5:8f:ea:db:51:11:b1:
         fe:e9:9c:66:ed:13:89:ad:a6:a1:c8:e7:ad:11:e0:da:01:8c:
         93:1b:21:3c:6e:27:9b:e6:f1:76:fa:16:ea:64:bd:19:cd:26:
         43:27:e9:9c:7e:1f:3e:59:35:4a:81:89:4f:e0:f7:8a:a0:ca:
         cb:9d:d8:c7:8e:96:e9:cc:47:0f:4a:33:a8:e0:ea:ff:76:9f:
         04:3c:18:7c:5d:2f:de:3b:ad:7d:88:6d:bc:b4:7d:b9:10:8b:
         0d:d6:8a:0c:48:ee:13:04:dc:5c:25:fd:18:c6:27:7b:6d:87:
         c0:8f:fd:79:8c:00:1c:56:2c:79:ee:6e:ae:93:dc:12:61:ba:
         1d:4b:e5:fb:fd:ea:df:4b:8a:b7:c8:95:33:26:54:1c:9e:99:
         fd:64:c4:a3:8b:c5:be:d4:bd:8f:b1:a2:88:45:99:26:7d:16:
         61:c1:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org