Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          KU8vGmqZcTvjmO8jyhbzEjOz+GNVY/mXBzzby7kDW9E=
Subject key identifier:   78:C1:D4:66:8F:64:0F:DD:C9:AB:9B:20:A4:FB:DB:A3:86:AF:28:7C
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       15A8CEAE243B57504670F2903345BED0B16C9981
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:04:09 +0000
ROA not before:           Mon 08 Apr 2024 13:59:09 +0000
ROA not after:            Mon 07 Apr 2025 14:04:09 +0000
asID:                     265303
IP address blocks:        201.87.152.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a8:ce:ae:24:3b:57:50:46:70:f2:90:33:45:be:d0:b1:6c:99:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:59:09 2024 GMT
            Not After : Apr  7 14:04:09 2025 GMT
        Subject: CN=78C1D4668F640FDDC9AB9B20A4FBDBA386AF287C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:45:00:85:2f:e4:a9:19:ca:8c:27:47:8a:
                    76:a7:ef:6c:bc:3e:32:1d:f6:8d:9e:7a:bf:0b:ca:
                    64:35:3a:eb:b7:34:78:77:6d:78:61:2c:e7:93:ff:
                    21:c3:73:82:fb:8a:21:65:73:61:89:5a:ed:a0:1f:
                    ef:f2:6b:72:45:1a:17:0c:c7:79:4e:2e:2d:2a:be:
                    b6:8d:e9:a7:9c:e5:06:e0:97:57:ec:2b:1b:d6:b8:
                    a0:4b:c7:ef:b7:44:a5:cb:a6:d0:06:f3:b4:7e:49:
                    d0:38:4c:d4:d6:38:31:e6:3a:ca:c5:18:6c:ed:32:
                    cc:a8:9e:bd:20:d3:0f:45:33:06:db:7f:41:30:b8:
                    58:dc:e7:a5:e5:33:6b:06:be:2a:ec:8d:7d:48:5f:
                    cd:d6:be:82:14:17:fc:41:0b:99:c0:93:ad:7d:45:
                    a8:84:52:a6:44:55:87:04:a2:d8:aa:d2:f4:eb:30:
                    1d:68:d7:32:6c:e9:c1:4b:2d:d5:a0:32:0d:e1:10:
                    f4:8d:a1:26:5f:37:d4:da:43:53:5c:a6:32:a7:aa:
                    70:95:90:b5:73:65:1c:e0:cf:92:e2:f3:6d:50:4e:
                    df:71:2c:d3:0c:28:30:1f:a0:73:e1:8a:19:ae:24:
                    6b:b9:a7:b9:95:4d:74:d5:bd:66:52:fe:91:35:33:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:D4:66:8F:64:0F:DD:C9:AB:9B:20:A4:FB:DB:A3:86:AF:28:7C
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3135322e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:c4:07:ee:78:fe:75:82:15:0f:d3:91:28:65:a5:75:ad:bc:
         ea:6c:f5:cd:56:ee:91:64:c0:ef:c1:9e:2c:d2:a7:5b:75:60:
         4d:db:ae:20:59:45:62:07:df:70:17:fb:d1:20:0a:e3:13:eb:
         ac:c4:3d:17:6d:49:11:8f:be:37:03:4f:e2:5f:9b:cc:cc:81:
         c3:cc:1c:fc:cc:e3:26:f1:0d:28:4c:6f:04:c5:c3:78:70:38:
         24:89:06:8d:c3:7b:7b:66:6f:af:0f:99:db:db:94:60:49:40:
         ec:a8:d0:21:4c:76:2a:45:e8:10:57:1d:76:c5:9a:ba:91:59:
         e1:c3:e9:a1:12:d0:44:5f:2d:00:a7:05:c2:b7:53:bd:68:36:
         4c:93:96:af:f3:fa:96:e4:bd:98:86:cf:71:39:f9:e2:aa:ea:
         62:10:71:84:2e:2d:92:ab:a5:34:15:98:40:4e:fe:30:68:63:
         0e:6a:d0:85:49:bf:f6:f9:74:35:5f:08:de:c0:10:52:d8:61:
         e8:0b:07:34:76:45:f5:e1:a9:45:3c:30:a5:bd:11:1b:b5:f1:
         94:dd:63:b0:8e:b4:ef:74:ad:51:58:57:70:a9:4e:6a:b6:a2:
         44:ce:ce:29:24:21:c9:06:67:09:ea:a6:45:47:ec:09:16:14:
         e5:cb:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org