Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/3230312e3134382e3234382e302f32322d3332203d3e203631383437.roa
File:                     3230312e3134382e3234382e302f32322d3332203d3e203631383437.roa (raw, json)
Hash identifier:          /HDPqHHX7sPM4d0D9SeyhrKKuogS8IzT2QPBSaIOBdI=
Subject key identifier:   48:88:6A:AA:DA:90:9B:CD:B4:A1:D4:1C:F1:4E:8F:DF:8E:81:FD:48
Certificate issuer:       /CN=8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC
Certificate serial:       7F1DEF23B288674C833484D9A8E8DC7F6F10DB47
Authority key identifier: 8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/3230312e3134382e3234382e302f32322d3332203d3e203631383437.roa
Signing time:             Sat 15 Apr 2023 16:15:54 +0000
ROA not before:           Sat 15 Apr 2023 16:10:54 +0000
ROA not after:            Sat 13 Apr 2024 16:15:54 +0000
asID:                     61847
IP address blocks:        201.148.248.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1d:ef:23:b2:88:67:4c:83:34:84:d9:a8:e8:dc:7f:6f:10:db:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC
        Validity
            Not Before: Apr 15 16:10:54 2023 GMT
            Not After : Apr 13 16:15:54 2024 GMT
        Subject: CN=48886AAADA909BCDB4A1D41CF14E8FDF8E81FD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:ba:f0:39:fc:e1:43:7d:7e:bc:a8:29:37:
                    11:46:35:a4:6e:dd:52:b9:86:74:1c:63:47:dc:ec:
                    13:55:ec:b8:96:e3:df:e4:6e:48:5d:cd:0e:fb:25:
                    21:e4:71:d5:a5:e9:1a:70:b0:80:b9:70:a7:8b:e8:
                    6e:07:14:4b:e4:69:7f:1a:f1:e1:b9:d2:b5:b2:5f:
                    9b:f6:6b:e3:97:c6:ea:ff:11:94:63:04:87:31:51:
                    42:56:8f:ca:6d:df:c8:2e:ba:8e:90:98:47:a9:fd:
                    3b:94:69:2f:5d:0b:23:ce:a9:8b:93:4f:28:59:71:
                    5f:bd:b2:1b:24:93:67:24:b8:a7:40:17:98:d7:e5:
                    05:7a:52:2e:01:82:95:62:11:03:0c:3e:0c:f5:7f:
                    d4:b0:09:0f:bf:55:33:2d:10:df:68:8e:21:3d:36:
                    cd:e4:b1:46:aa:ce:5c:b5:f0:53:45:3c:f2:9d:1d:
                    c6:73:fe:1f:ae:cf:90:97:ad:a9:3d:66:cc:ce:ec:
                    84:7b:22:3e:8b:5a:06:12:71:9b:a3:f1:a4:15:59:
                    96:ba:74:0c:a5:eb:31:b1:cf:d8:d2:48:17:c2:89:
                    48:60:1a:c5:40:61:f3:01:2c:00:54:49:b1:3e:77:
                    6b:1a:a6:a6:b9:a8:17:e2:21:d6:33:19:79:fd:5e:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:88:6A:AA:DA:90:9B:CD:B4:A1:D4:1C:F1:4E:8F:DF:8E:81:FD:48
            X509v3 Authority Key Identifier:
                keyid:8F:36:EF:AA:DD:08:F4:C8:8D:5F:DE:29:3B:F7:15:FD:5B:D0:E7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F36EFAADD08F4C88D5FDE293BF715FD5BD0E7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wC1ASBfZAWAgDnMZGRv6W1LeRUzUKE5bQv2Gt6UDd3U/0/3230312e3134382e3234382e302f32322d3332203d3e203631383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:ab:9c:2b:f6:ab:bb:a1:5c:b9:3f:75:01:bd:e8:d3:e2:
         82:b7:73:e9:8d:7d:a7:28:95:bb:e2:c5:04:c9:f7:97:47:05:
         4c:1c:cf:55:8d:59:80:7f:44:ae:29:f8:dd:7c:5f:a1:91:28:
         76:eb:fb:2b:0f:72:ac:d7:1d:6c:7a:69:37:95:ad:73:34:c6:
         07:8e:24:98:06:37:88:17:c7:bb:03:fe:1d:b4:33:70:bf:c4:
         b3:10:92:8b:c8:d5:30:b6:96:42:79:f7:7b:af:37:76:6e:cf:
         7f:b7:68:38:d7:b4:c9:d1:65:ad:ee:7b:3c:92:92:5b:c8:01:
         50:be:cf:51:d0:5b:9f:04:e2:e6:0a:d8:74:90:f5:0a:db:a4:
         d0:ed:50:8a:01:bf:8a:d2:3e:67:51:17:46:91:59:0e:90:80:
         6f:71:1f:bb:44:62:53:5f:8f:ad:8a:09:6f:cd:c2:f9:03:a9:
         30:6d:f9:10:9b:b6:41:60:34:ce:33:1f:9f:ea:b7:5f:bd:fa:
         01:e8:ab:3c:e9:a6:13:b6:1c:87:57:e0:cd:c0:d7:3b:24:7f:
         01:c3:3a:91:c0:5a:79:23:42:14:a3:51:49:28:cd:df:ed:c7:
         a2:d8:ea:71:40:70:85:30:a1:15:2c:a6:51:91:15:c6:29:e1:
         f1:c4:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org