Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          QgurtTUeqGEPrLXqogVxwOES79oCE/vCtn8eCHzA3Jo=
Subject key identifier:   2F:39:88:CC:97:9B:F1:E1:AF:E4:17:35:26:0A:E8:92:C3:35:E1:B0
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       42161E72035135E60410B1AF318229CF08592932
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:00:47 +0000
ROA not before:           Mon 08 Apr 2024 13:55:47 +0000
ROA not after:            Mon 07 Apr 2025 14:00:47 +0000
asID:                     265303
IP address blocks:        201.87.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:1e:72:03:51:35:e6:04:10:b1:af:31:82:29:cf:08:59:29:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:55:47 2024 GMT
            Not After : Apr  7 14:00:47 2025 GMT
        Subject: CN=2F3988CC979BF1E1AFE41735260AE892C335E1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:95:61:6e:3d:0f:e8:77:1a:7f:ba:38:0c:
                    41:ba:f5:9f:0a:2d:2c:88:9d:16:0e:d4:af:79:ce:
                    e7:15:64:e0:9f:ec:f9:fe:0c:70:27:42:6c:15:77:
                    82:45:8d:ee:d6:03:17:aa:e2:cf:7e:7a:54:fe:d4:
                    4c:f9:7c:57:00:97:07:14:57:5c:06:19:8c:80:41:
                    c2:44:50:15:fc:cd:1e:4c:07:ae:43:c7:a7:74:29:
                    ad:89:9f:5e:08:cd:7f:f4:a8:a0:51:49:72:73:ed:
                    19:e6:d5:c1:b5:5e:00:47:a0:0b:88:af:0d:d3:2e:
                    3e:b5:37:6d:ee:e4:15:91:7e:71:7e:f9:d0:a6:07:
                    40:dd:b3:7b:de:ea:c6:81:d3:19:fc:3e:84:87:f2:
                    49:a9:02:1c:1d:2e:4b:3e:ce:49:01:d0:9f:45:4d:
                    65:aa:3a:ed:42:2e:43:b4:fb:ea:83:6c:e9:5d:b2:
                    67:53:bb:e4:7e:c8:64:70:b9:70:f1:57:f5:a9:19:
                    48:bb:ce:73:fa:fa:6f:bb:54:c2:70:c3:0e:49:ec:
                    7e:c3:6d:d1:d8:92:fc:9d:97:17:6d:4d:a4:91:35:
                    26:01:60:d8:a1:83:59:d3:b1:94:ef:df:2a:ca:1d:
                    04:d0:e8:b9:d4:5f:74:cb:90:83:c1:77:9c:cb:2c:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:88:CC:97:9B:F1:E1:AF:E4:17:35:26:0A:E8:92:C3:35:E1:B0
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134322e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:ff:05:b2:00:69:33:66:fd:bc:5e:19:10:ea:10:5b:be:
         f9:0b:a4:69:66:ee:fc:2b:59:24:9b:40:0e:28:57:a5:8e:df:
         51:bf:13:6f:70:d7:90:60:7e:36:0a:e5:16:af:7e:bd:91:8e:
         d5:68:07:68:52:a2:d8:fc:a9:82:8e:be:77:b2:02:ed:a4:07:
         5d:fc:8c:2c:17:72:57:6c:e8:ff:13:a9:2c:72:69:e5:59:22:
         8f:d9:1e:08:fc:3d:67:14:00:11:d8:4e:c7:c8:f1:d8:55:77:
         06:32:be:17:7c:a5:a7:21:a5:7c:d7:81:3b:8d:03:5a:cf:f0:
         b8:80:a5:68:8c:88:bc:d6:69:c2:d1:61:11:6c:50:3f:f3:36:
         53:b6:f1:fe:cb:a6:4b:6c:ff:d6:00:a2:28:a3:e2:ed:e3:ba:
         1c:de:ab:d7:45:e0:5a:55:5a:6b:79:c6:b5:0a:24:15:8f:55:
         e4:f0:0f:a6:a5:97:39:40:5d:3d:68:b3:a3:10:6e:ca:7b:b8:
         8d:2d:10:1e:f5:74:2e:1c:05:d5:37:4e:c3:f2:4d:66:9d:84:
         3f:1d:f1:89:4b:72:45:d5:3f:1f:dd:d3:5d:76:2d:3b:25:10:
         8c:25:92:3a:9a:6a:14:e4:0a:fd:4e:3b:3e:5c:bd:33:9c:9c:
         dc:d4:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org