Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
File:                     3230312e32332e3132382e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          cRNL1TBTtZgz4ULiOENHBOOR+cQY+6VhS2OsWjQH/g8=
Subject key identifier:   AB:4D:85:C6:5A:67:DC:A0:51:9A:C8:01:30:FC:41:0D:37:BD:F5:FC
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       5EAAB32A9CF8A0B55471886AE0746260FB23D923
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:20:00 +0000
ROA not before:           Fri 27 Aug 2021 14:15:00 +0000
ROA not after:            Fri 26 Aug 2022 14:20:00 +0000
asID:                     22689
IP address blocks:        201.23.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:aa:b3:2a:9c:f8:a0:b5:54:71:88:6a:e0:74:62:60:fb:23:d9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:15:00 2021 GMT
            Not After : Aug 26 14:20:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:57:dc:12:b6:c9:de:53:5a:da:eb:00:39:
                    f3:d5:a7:74:3e:85:8f:e7:90:a7:7e:1f:e1:55:71:
                    21:23:6b:f6:0d:9f:3a:46:82:55:6b:11:3b:78:a4:
                    82:2c:56:9c:de:18:1b:be:23:da:61:cb:ad:3f:ce:
                    f9:e7:3c:87:93:e0:74:05:7a:c8:52:5c:f4:e6:eb:
                    0a:2d:f6:9b:50:d1:d1:d2:c6:06:93:1c:6b:2c:91:
                    7b:f1:b6:07:ef:32:d6:d3:7a:c7:55:43:31:f1:76:
                    bf:61:37:0a:a6:40:4f:65:49:f6:f0:96:c5:f8:b7:
                    5b:93:43:38:5d:52:5b:5d:e5:f9:97:3b:fc:f2:db:
                    72:fa:f0:6f:31:b4:22:23:92:22:6a:61:69:73:42:
                    7d:d2:a7:ac:ee:d9:5f:05:59:b5:68:9a:04:a9:38:
                    07:96:79:49:05:82:cf:8a:a5:0e:81:56:aa:c4:bb:
                    5e:e4:1b:bc:01:97:cc:0b:b4:78:91:bf:03:ad:5a:
                    0e:8c:53:08:0a:00:ba:f8:5c:2e:de:56:de:b2:24:
                    6c:b6:c2:d0:82:88:66:f0:9f:b6:6e:fb:d8:41:b8:
                    ae:17:c4:68:26:f1:82:1e:0c:1f:e7:b0:2b:ed:d5:
                    e5:4e:00:08:4b:0b:c2:ed:5e:b7:fc:6b:6c:59:06:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4D:85:C6:5A:67:DC:A0:51:9A:C8:01:30:FC:41:0D:37:BD:F5:FC
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:22:f4:de:2f:7f:fa:d1:8a:80:41:85:39:6d:ef:a0:cc:6a:
         c3:61:3a:1f:24:ab:fd:a1:be:43:42:8a:9a:32:81:9c:56:27:
         c6:6c:f2:4a:99:5a:79:16:9f:e4:17:ac:fa:b3:ba:f2:6d:15:
         0a:49:13:cb:85:d5:e0:8d:a7:21:51:06:b5:58:f6:08:93:69:
         5e:6d:78:ad:a1:39:77:45:82:dc:6f:ed:57:1a:a8:5c:07:c8:
         4e:33:c6:6d:05:3b:54:74:d4:52:52:69:56:94:d1:51:ac:32:
         fc:cc:ba:6a:2f:e1:8d:54:79:9f:40:14:18:b2:ba:4e:63:27:
         a7:16:ff:c3:78:c5:a0:51:17:5f:3f:fc:db:bf:ea:0c:df:9a:
         8a:20:9c:32:d6:c7:df:fe:f4:98:45:93:63:e2:85:a1:d4:5c:
         fe:9c:fc:58:39:c5:d7:25:e0:09:29:db:8b:ae:b8:77:d9:5f:
         c1:69:bf:36:ca:11:e1:eb:9a:99:13:d0:f5:85:51:f1:41:5d:
         49:97:68:7b:67:18:5b:ce:ca:3f:14:a2:8f:ab:47:72:25:17:
         ff:1c:f2:44:53:e6:06:e7:1f:9f:77:2b:3e:8d:65:20:fe:47:
         c5:b8:86:ff:3d:ba:dc:e0:77:3b:e2:2f:38:1f:22:77:ad:ec:
         26:fb:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org