Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          YkC1zQ0gPDnF9yhKR0uLnp7h7R1wxm4cNyuAq11pnKA=
Subject key identifier:   C1:67:DF:27:9F:08:7E:04:9C:5D:23:F8:BA:15:FC:80:27:6C:9A:68
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       51278B74AB5E497C70F3B92AFF57329F45817566
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:05:15 +0000
ROA not before:           Mon 08 Apr 2024 14:00:15 +0000
ROA not after:            Mon 07 Apr 2025 14:05:15 +0000
asID:                     265303
IP address blocks:        201.87.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:27:8b:74:ab:5e:49:7c:70:f3:b9:2a:ff:57:32:9f:45:81:75:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:00:15 2024 GMT
            Not After : Apr  7 14:05:15 2025 GMT
        Subject: CN=C167DF279F087E049C5D23F8BA15FC80276C9A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:02:11:fc:1d:8b:a6:06:66:5f:42:a8:fb:
                    1a:84:a2:05:a2:e8:81:a9:5f:b9:03:74:dd:e3:d7:
                    7b:80:58:d1:90:30:ff:1b:8c:33:f5:fd:e6:e4:e1:
                    da:6f:3e:eb:6c:0d:44:db:02:e2:8a:5c:55:8d:e0:
                    05:f9:77:65:4d:0f:6d:b7:03:e2:df:e5:8a:8d:f7:
                    6e:0c:63:9a:13:eb:79:cb:91:ef:6c:6c:b5:d9:e8:
                    6c:93:06:6d:de:d8:86:24:a2:3d:1e:db:15:3b:9d:
                    01:61:50:65:39:ff:d6:22:53:e2:5e:80:9a:b0:aa:
                    b8:1c:9b:6b:a4:ee:09:81:40:17:c4:f2:33:7a:f0:
                    14:60:c4:f5:ae:03:3c:7b:2c:0f:46:a1:c4:43:23:
                    ff:e5:f5:56:aa:2b:1a:24:bd:ae:ac:6b:bb:5a:b2:
                    d0:07:02:b1:c9:fd:23:c8:6d:fb:3a:89:ea:d5:6b:
                    93:35:f5:94:b3:a1:4c:90:6f:e3:9e:54:eb:c2:c5:
                    0c:2c:d4:0f:70:72:75:9b:ac:b3:26:5a:d5:e4:27:
                    51:cf:86:6e:80:35:0b:df:88:a5:29:1f:0e:51:35:
                    fd:72:10:42:ff:5c:c4:e7:7f:33:6d:29:e0:73:89:
                    ad:31:de:df:3a:f6:da:24:d0:b0:f0:6b:68:ed:71:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:DF:27:9F:08:7E:04:9C:5D:23:F8:BA:15:FC:80:27:6C:9A:68
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:3b:ea:1d:4c:9a:74:d1:01:0f:23:6a:01:09:a5:a1:d6:27:
         e9:95:47:63:90:48:e3:83:1f:08:3f:66:eb:8b:a5:c8:eb:9f:
         dd:47:f9:21:53:6b:df:d8:f2:f3:f6:27:e2:3e:c8:68:2b:7f:
         cc:e6:64:6f:de:2c:7d:c2:3a:37:6e:a1:f3:2c:9f:20:75:ab:
         c6:6f:b6:b4:99:de:a2:9a:62:ce:16:62:cb:9f:99:63:de:80:
         e3:98:6c:04:9d:e2:ba:1a:a8:88:e6:20:19:51:3d:63:da:d6:
         8f:48:fd:40:27:28:c6:be:45:74:5b:ce:f0:34:a7:cd:a2:b7:
         51:c1:85:7b:52:b2:73:6b:e9:57:00:4e:80:c5:58:be:26:c7:
         2d:1a:45:42:8b:b2:e9:3e:b8:0e:28:3d:f1:82:70:6e:9c:44:
         21:c1:9c:d7:6b:76:3c:f0:ce:33:6e:77:e4:c6:90:6c:43:d3:
         2e:0e:94:35:11:e5:8e:2b:12:dc:44:2d:67:94:0b:36:b4:62:
         7f:67:31:06:9f:a6:e6:cc:fc:15:b9:30:a9:4c:f5:bc:20:ae:
         41:9f:2e:e2:08:2c:c5:46:33:99:a9:8d:3f:20:c8:39:74:cf:
         9d:8a:59:e4:2a:81:27:54:6d:38:6e:89:68:45:6b:a2:45:91:
         cc:2f:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org