Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          p8RSjHZV+cboIfDb/oJTY9+Fj03A5bp1rimH/LGjNh0=
Subject key identifier:   6D:CC:F9:D6:9F:F7:87:9F:68:F1:F9:CC:25:8D:A8:32:D3:B5:D8:63
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       3231982C0C7B35C585F221531A87E9745BF72706
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:02:04 +0000
ROA not before:           Mon 08 Apr 2024 13:57:04 +0000
ROA not after:            Mon 07 Apr 2025 14:02:04 +0000
asID:                     265303
IP address blocks:        201.87.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:31:98:2c:0c:7b:35:c5:85:f2:21:53:1a:87:e9:74:5b:f7:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:57:04 2024 GMT
            Not After : Apr  7 14:02:04 2025 GMT
        Subject: CN=6DCCF9D69FF7879F68F1F9CC258DA832D3B5D863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:c9:d3:1f:5e:f9:79:4e:7b:1a:a0:6c:33:
                    56:3a:94:06:93:16:89:52:96:be:93:68:35:18:15:
                    d1:fb:f7:14:eb:8f:6a:d1:d2:00:c0:23:69:77:d1:
                    b1:34:bf:12:08:f6:0c:cf:8a:73:64:d2:dd:f5:bc:
                    d9:02:f2:b4:12:d9:8d:17:3e:fb:20:31:66:4e:91:
                    65:53:11:36:68:46:bd:6e:d9:34:fa:52:40:8f:6e:
                    a9:1c:61:76:07:90:6a:4f:69:d1:a4:f5:9a:2b:a6:
                    5d:f3:b3:e1:76:76:1a:bb:a3:4e:7d:c1:e6:7b:c2:
                    2a:c7:d8:ed:4e:1f:2f:6b:e2:17:00:6f:53:0d:13:
                    ea:2c:e0:06:f5:95:68:42:27:f6:21:07:33:0b:ec:
                    ec:28:fc:a7:79:eb:40:91:fd:8c:cc:d3:47:c9:1e:
                    9b:14:db:5f:f4:4e:5b:63:5d:71:c5:e1:4b:11:13:
                    10:50:66:48:e3:66:af:6d:d0:54:d3:23:d8:17:1d:
                    16:be:ad:89:53:8d:79:d5:d2:6b:3d:31:c3:7e:c4:
                    2e:ce:7b:07:7b:55:3b:3d:00:87:62:de:cb:c2:04:
                    3e:b9:03:63:d9:35:e9:1e:7c:8f:54:b5:ff:35:53:
                    1b:de:31:a2:d1:64:cc:b9:df:65:a8:0c:9c:c3:da:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CC:F9:D6:9F:F7:87:9F:68:F1:F9:CC:25:8D:A8:32:D3:B5:D8:63
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:46:33:e8:8f:76:11:8f:e3:ad:a6:df:70:a9:29:a4:57:
         40:59:85:eb:e4:15:b9:a0:c1:a7:55:2f:37:80:a8:43:63:18:
         c2:c1:18:df:ff:87:7d:47:30:e9:13:39:f4:e3:f9:57:ca:7a:
         7e:69:de:23:24:4e:46:8f:80:42:43:c8:5e:57:8d:44:f3:a7:
         8a:30:e8:23:06:85:e2:a6:21:f0:56:f7:05:48:b8:bc:0b:4e:
         be:c0:6f:58:87:f3:84:61:5f:27:ee:10:0d:9a:e7:d8:27:85:
         df:9e:d6:e8:cc:2f:67:13:4a:5a:d6:b5:89:31:05:89:f7:c2:
         7b:a4:a6:cd:27:b5:52:c4:79:a7:eb:8a:b7:fc:7f:bb:9b:b7:
         6e:db:b6:4c:8a:24:3d:17:af:46:ea:9c:7a:28:a2:fb:85:56:
         25:6a:b2:95:3b:ec:80:19:d6:26:70:36:fb:83:e0:cd:16:91:
         a4:a1:2b:61:d4:77:ae:83:b3:71:5a:ec:0e:51:3c:45:87:51:
         fb:0d:55:c8:b1:40:c6:5d:9c:0e:77:f3:47:25:e7:4a:45:fe:
         9b:52:9e:4b:b5:57:d5:3b:54:0d:5f:f6:b8:40:be:7e:19:9c:
         bc:b6:55:dd:6a:cb:06:58:64:aa:70:73:c3:85:18:30:ef:08:
         3c:43:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org