Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3230312e3135392e37322e302f32312d3332203d3e203631373633.roa
File:                     3230312e3135392e37322e302f32312d3332203d3e203631373633.roa (raw, json)
Hash identifier:          pZuDVpI6oGigiaeoonRM+gG9erSXAUHE7wz3rniS8+0=
Subject key identifier:   D4:47:D6:36:D4:CF:55:9B:5E:8C:60:88:D4:4E:A2:16:2E:95:1C:EB
Certificate issuer:       /CN=FE2ED7096D82C455B93F804D0ACF61CDF723EC0B
Certificate serial:       39A9DE38CAAFE5FD42A72BF9131C59FA0A96F21A
Authority key identifier: FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3230312e3135392e37322e302f32312d3332203d3e203631373633.roa
Signing time:             Thu 28 Nov 2024 13:42:50 +0000
ROA not before:           Thu 28 Nov 2024 13:37:50 +0000
ROA not after:            Thu 27 Nov 2025 13:42:50 +0000
asID:                     61763
IP address blocks:        201.159.72.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a9:de:38:ca:af:e5:fd:42:a7:2b:f9:13:1c:59:fa:0a:96:f2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2ED7096D82C455B93F804D0ACF61CDF723EC0B
        Validity
            Not Before: Nov 28 13:37:50 2024 GMT
            Not After : Nov 27 13:42:50 2025 GMT
        Subject: CN=D447D636D4CF559B5E8C6088D44EA2162E951CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:8e:7d:5a:78:22:be:75:53:cd:f2:70:cf:
                    99:70:e4:77:f9:fb:9b:d7:3a:ca:c1:16:78:85:fe:
                    7f:3f:ed:4a:17:76:4d:51:ff:04:6d:5c:d0:f2:9a:
                    2e:a3:52:27:92:0e:0d:a7:57:10:ac:d5:54:4e:25:
                    dc:8e:4e:3d:12:30:8d:c1:43:8d:2c:8e:14:a6:e9:
                    90:68:95:43:bf:9f:67:f7:b9:05:38:cc:6e:62:32:
                    48:a2:e4:dc:91:c5:0e:44:e5:52:5d:0b:b9:73:a5:
                    69:1f:ab:e7:a2:13:eb:15:db:71:29:2a:28:d9:de:
                    74:1a:dc:f5:73:7b:cd:7b:4f:02:78:f1:68:f6:b5:
                    cf:63:52:22:53:be:e4:2b:c6:7e:6c:9f:88:b8:e1:
                    8d:5f:11:06:4b:f0:cd:5e:49:c5:d6:70:e4:57:ad:
                    f6:12:c7:55:88:fb:41:a9:10:d0:4b:1b:5b:6f:87:
                    87:43:45:3e:7c:ed:87:30:15:58:47:ba:5e:9f:54:
                    cb:6c:9f:e0:cb:00:bd:d2:36:dc:6f:3b:2a:96:be:
                    7d:47:2e:56:2e:30:33:f2:17:87:17:ac:10:df:e6:
                    f3:97:18:80:27:92:2c:9c:45:06:52:e4:66:a6:2a:
                    92:e2:66:51:b8:18:57:6b:97:75:a2:1c:08:6f:a0:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:47:D6:36:D4:CF:55:9B:5E:8C:60:88:D4:4E:A2:16:2E:95:1C:EB
            X509v3 Authority Key Identifier:
                keyid:FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/3230312e3135392e37322e302f32312d3332203d3e203631373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:bd:ac:bb:8d:1a:a1:72:d0:f7:b8:48:6b:15:20:a4:3d:
         bf:e4:ce:f2:92:80:dc:d8:6e:54:d0:83:fe:94:ef:c6:4c:37:
         15:01:a5:fb:00:f7:df:39:ea:e4:49:2a:be:51:8c:53:98:ea:
         a8:b4:33:95:d3:04:b4:80:43:80:2a:a3:9e:69:88:52:80:51:
         4f:14:b7:ca:9d:e0:24:72:4a:bf:94:a7:65:c2:fa:15:5f:34:
         59:ed:95:68:c6:77:4e:be:8d:48:50:97:03:6e:30:d1:ce:b8:
         df:5d:e3:3f:3e:0b:d0:56:1a:66:7f:9d:1b:a6:31:25:5e:4c:
         48:4d:65:fc:3d:b1:83:8f:91:b6:53:1d:e4:66:a3:b4:85:1c:
         99:86:56:51:32:4b:2f:37:f2:c3:de:c2:78:fc:73:63:a8:62:
         7b:e7:75:82:49:13:52:0f:32:40:6b:87:9b:9c:3c:8c:95:6b:
         81:29:f2:3d:32:5d:3f:07:43:ab:fc:0e:e7:96:6a:9e:42:5b:
         02:e0:1a:31:8f:7a:d0:b6:62:8e:d7:8d:be:5e:b0:b1:03:78:
         3f:f0:1b:8f:bf:69:e7:84:62:f2:8a:95:ec:a2:28:ca:6e:57:
         ad:af:5a:01:95:cf:b5:ec:fd:42:ec:dd:10:0f:f1:e4:48:a6:
         cd:81:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:20 2025 by rpki-client