Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          l0iUQYjuFm7Uybqf9zJnFhs4EAJvPiyuVceMJIXBtdU=
Subject key identifier:   84:E3:0E:DE:38:D4:51:13:AD:2B:32:7B:9D:D9:47:31:68:CF:C4:4D
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       2AB2834CB015CE85CC2EF16EDF08BEFC6B65678B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:03:08 +0000
ROA not before:           Mon 08 Apr 2024 13:58:08 +0000
ROA not after:            Mon 07 Apr 2025 14:03:08 +0000
asID:                     265303
IP address blocks:        201.87.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b2:83:4c:b0:15:ce:85:cc:2e:f1:6e:df:08:be:fc:6b:65:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:58:08 2024 GMT
            Not After : Apr  7 14:03:08 2025 GMT
        Subject: CN=84E30EDE38D45113AD2B327B9DD9473168CFC44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:d9:0a:2f:79:58:7d:7d:61:ca:6d:9a:cb:
                    d1:55:5e:27:79:ee:aa:92:9f:4e:c4:04:68:24:92:
                    79:00:83:9d:11:c7:f1:15:25:18:dd:2f:df:d2:c2:
                    0e:94:4e:e2:8b:e7:67:43:9d:68:7d:aa:5a:52:f2:
                    65:9a:12:b6:8a:ad:a6:e7:cd:16:be:ed:ec:d0:e4:
                    26:44:f0:36:ff:04:f2:83:77:d1:40:ea:4b:11:a8:
                    62:2e:89:38:34:a0:4a:c5:3f:1c:14:29:23:d9:82:
                    73:ef:5e:67:f8:9d:45:41:b8:a6:b2:63:50:b6:8d:
                    e2:31:44:e0:66:f5:73:65:e7:64:e4:dc:7a:fe:3b:
                    49:3b:3d:1c:8c:c7:94:eb:74:a9:4e:24:07:5e:15:
                    34:ff:5d:21:31:be:38:6b:24:96:8b:d8:36:92:12:
                    ec:53:0c:8c:9b:39:e1:96:67:0a:ea:b8:35:18:74:
                    8c:76:68:ff:c4:ef:75:70:b2:cd:11:5b:dd:1c:16:
                    c4:4f:aa:09:d7:94:21:ea:4f:ae:84:0c:fd:1f:dd:
                    fd:c5:8c:a5:58:a5:2b:71:e9:4b:7d:8b:6c:c6:cb:
                    ad:c6:74:76:b1:26:4a:2c:b8:c3:8b:e7:2f:8d:ac:
                    8d:8f:a0:31:a7:46:06:05:c1:46:d3:a5:31:cc:22:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:0E:DE:38:D4:51:13:AD:2B:32:7B:9D:D9:47:31:68:CF:C4:4D
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1f:68:a0:de:8d:f2:08:2b:29:41:59:af:b2:e5:6c:4e:b6:
         86:0b:a9:9f:66:4c:aa:95:a4:a0:2b:08:1a:3d:39:91:b2:69:
         e8:f3:f1:f9:58:72:7d:39:f7:f5:f9:35:96:38:68:e0:60:d7:
         7c:3a:63:52:b4:4b:fe:ad:9b:76:c8:02:c2:db:5b:f8:cc:c3:
         0e:6c:17:f0:0e:aa:5d:1c:43:2e:86:05:2f:44:1d:f0:11:47:
         3a:b6:0d:f9:34:59:67:e0:60:b8:82:57:de:a9:3b:92:fd:81:
         f5:c4:dd:fb:50:eb:60:bd:b5:15:cc:c2:d4:48:b7:e4:19:07:
         03:82:75:cf:14:ca:08:0e:1b:25:d3:ad:5e:10:1c:96:b8:d4:
         cf:b1:8a:e4:31:72:4d:9f:0a:56:2a:77:96:c6:5b:6a:3d:fb:
         45:8c:da:7b:3f:f2:bb:5e:d6:ea:06:a1:32:17:55:23:83:43:
         c5:1f:98:10:95:d9:14:fe:e4:f9:54:6b:6e:8f:ba:76:c6:8a:
         33:52:76:d0:6a:21:67:67:6a:49:4c:e7:2d:91:4e:be:76:2f:
         c0:6c:3d:cd:a0:08:14:36:0d:e8:a0:18:b7:47:44:8f:59:7b:
         f9:92:6c:ff:62:28:1b:9b:8e:96:e9:c4:30:2d:e4:56:b6:dd:
         d9:23:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org