Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3230312e3134382e3138302e302f32322d3332203d3e203631383538.roa
File:                     3230312e3134382e3138302e302f32322d3332203d3e203631383538.roa (raw, json)
Hash identifier:          sSMNqclMQ3/Kub1LGTzWk5L6RvS3N0D36Z3gdW57ujA=
Subject key identifier:   97:C8:37:A0:21:A2:71:C4:0C:6D:2A:99:4E:6C:86:0F:EB:B9:83:7D
Certificate issuer:       /CN=CF931CC061BCD0E656DBAE8AD75F9A4E24825C22
Certificate serial:       199FEA65CE8CEF11DFA8D67FF6833E182837766C
Authority key identifier: CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3230312e3134382e3138302e302f32322d3332203d3e203631383538.roa
Signing time:             Mon 22 May 2023 20:41:57 +0000
ROA not before:           Mon 22 May 2023 20:36:57 +0000
ROA not after:            Mon 20 May 2024 20:41:57 +0000
asID:                     61858
IP address blocks:        201.148.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9f:ea:65:ce:8c:ef:11:df:a8:d6:7f:f6:83:3e:18:28:37:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF931CC061BCD0E656DBAE8AD75F9A4E24825C22
        Validity
            Not Before: May 22 20:36:57 2023 GMT
            Not After : May 20 20:41:57 2024 GMT
        Subject: CN=97C837A021A271C40C6D2A994E6C860FEBB9837D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:c5:e1:d8:7c:84:3f:0d:f5:c4:fe:3e:65:
                    57:ce:6f:01:a2:09:a2:be:50:88:9c:c6:c4:87:c5:
                    ec:35:cd:c3:7e:3f:ee:3e:1e:cb:db:0b:5f:e8:a3:
                    1d:10:ba:77:43:e4:ae:67:0d:8c:70:23:38:93:e0:
                    5a:23:7e:17:bf:67:8e:a5:e3:a2:ef:56:2a:f7:91:
                    48:57:a1:3e:cd:5f:52:e9:a1:a0:f3:f3:a2:ee:10:
                    da:c3:bc:b4:6a:04:0b:f2:f8:5e:da:c8:2c:c2:2f:
                    72:55:93:00:b7:73:bb:5a:13:93:a3:a1:ef:9f:47:
                    dc:e9:99:06:af:60:ef:7a:8d:82:bf:bd:c8:9e:64:
                    00:ee:d7:0a:99:fa:f7:3f:be:d4:1f:3d:7f:9c:79:
                    f0:62:d8:12:65:e8:73:96:f4:33:54:ad:6a:84:12:
                    94:37:fe:43:33:a8:f3:94:2e:0e:e9:13:b6:66:2d:
                    7b:67:f5:d8:7a:cd:24:96:57:ec:0d:f7:a2:86:a6:
                    5e:cb:1e:22:f4:a9:dc:d7:fa:56:fc:72:17:9e:89:
                    09:17:1d:70:2d:3d:4b:8e:2c:45:93:35:97:ad:e8:
                    83:16:9c:ff:8b:e2:77:86:c6:72:de:a6:3e:8e:11:
                    63:26:ed:6e:ee:59:71:97:e9:7d:ec:fd:0d:a1:cf:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:37:A0:21:A2:71:C4:0C:6D:2A:99:4E:6C:86:0F:EB:B9:83:7D
            X509v3 Authority Key Identifier:
                keyid:CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3230312e3134382e3138302e302f32322d3332203d3e203631383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:a8:c6:cf:c6:76:c8:25:5b:eb:11:a1:c6:62:c7:a0:75:
         99:f5:b1:4f:ae:6e:c5:6d:4d:c1:df:5d:d9:f4:1b:45:5e:14:
         ec:ae:de:18:ba:dc:71:a8:e5:63:1d:95:8a:da:65:5e:ce:25:
         bf:8b:e3:2c:da:54:60:2f:20:94:75:aa:4f:04:66:28:31:ed:
         1d:87:f2:e0:09:45:3c:aa:f8:a8:01:25:f1:5f:52:02:67:49:
         fb:30:ec:6f:46:a6:a9:d7:ef:6d:50:e1:9a:6d:a2:90:7f:ae:
         6b:64:34:e6:63:72:77:e6:a3:02:9a:2b:51:09:5d:4b:d0:37:
         ed:f6:5e:88:05:f0:6b:0a:69:9d:8f:f8:33:75:9b:67:d5:21:
         b0:1c:33:b6:82:a8:76:a5:a9:0d:c8:aa:09:57:0a:59:16:67:
         d9:04:03:fa:6e:d8:05:cc:9f:93:6c:04:a7:80:42:7d:3a:ea:
         d4:40:69:86:f9:53:17:31:39:8b:00:1a:9b:68:c6:9b:2c:ef:
         5d:c6:75:08:7e:80:43:12:77:41:15:56:de:eb:c3:d6:98:a4:
         85:21:4b:07:bc:ce:79:e0:53:5d:8c:77:74:14:6f:9d:33:d4:
         b8:01:5f:21:7a:55:51:79:dd:6c:00:5b:2d:9b:91:42:36:f3:
         74:7d:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org