Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa
File:                     3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          bTlfHHmHENGB4eYhr82oCmQAfhBeU90tySI54IWJa9w=
Subject key identifier:   46:93:98:0C:78:F3:B5:3B:CB:5B:6B:27:5B:42:7E:25:3A:08:9B:41
Certificate issuer:       /CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
Certificate serial:       09AB4A86EA9B40DDF4C15D4C4F183382234F5885
Authority key identifier: 31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa
Signing time:             Thu 05 Jan 2023 14:17:39 +0000
ROA not before:           Thu 05 Jan 2023 14:12:39 +0000
ROA not after:            Thu 04 Jan 2024 14:17:39 +0000
asID:                     52544
IP address blocks:        201.150.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:4a:86:ea:9b:40:dd:f4:c1:5d:4c:4f:18:33:82:23:4f:58:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31630A7A42C569095682EE8F32F19DBFE4BD81FC
        Validity
            Not Before: Jan  5 14:12:39 2023 GMT
            Not After : Jan  4 14:17:39 2024 GMT
        Subject: CN=4693980C78F3B53BCB5B6B275B427E253A089B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:c5:78:83:01:4f:69:f1:70:65:27:c9:c1:
                    23:e3:75:d2:05:94:31:ba:6f:fb:25:8d:58:4f:dd:
                    bd:89:49:62:e2:e9:7f:9b:1e:62:e3:57:c1:9f:43:
                    5d:f8:d1:cc:11:67:38:8e:2d:9d:e8:0f:d1:52:c4:
                    14:28:bc:0b:ec:a7:95:a2:2e:48:b8:7d:5d:aa:8f:
                    0c:df:ed:e5:6e:52:ad:44:17:ca:10:93:4f:5b:c4:
                    10:57:37:8d:1d:3b:6f:fa:27:42:d5:65:75:aa:42:
                    60:a2:75:e3:8f:46:dd:a9:fd:f7:a9:23:f0:47:56:
                    06:b9:ec:4c:45:ca:fe:72:b5:89:0f:cc:0a:9d:f5:
                    e9:08:06:27:49:0e:8c:33:30:2e:8a:b5:c6:0d:6f:
                    ab:93:4c:eb:07:d4:0e:0d:92:83:4b:11:5c:7e:ba:
                    54:2b:17:a0:db:1c:f8:d9:b9:6c:57:e8:89:a6:9e:
                    fa:a1:38:7c:58:c6:51:8a:87:1a:f5:db:14:bc:9d:
                    13:ff:5e:44:ff:67:05:da:df:eb:ae:91:61:eb:cc:
                    9f:5c:0c:ff:71:17:e4:b6:b9:6c:83:23:62:98:33:
                    fe:66:e9:4e:c0:d9:c3:74:60:27:9c:cf:66:be:6f:
                    b5:ac:04:e0:c1:69:26:95:e3:85:0d:03:47:26:7d:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:93:98:0C:78:F3:B5:3B:CB:5B:6B:27:5B:42:7E:25:3A:08:9B:41
            X509v3 Authority Key Identifier:
                keyid:31:63:0A:7A:42:C5:69:09:56:82:EE:8F:32:F1:9D:BF:E4:BD:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31630A7A42C569095682EE8F32F19DBFE4BD81FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:db:40:45:a9:84:31:b0:a0:4f:c5:3e:48:9e:c8:cc:99:
         33:ef:15:80:0a:37:22:e0:fb:22:1e:92:14:97:f3:6c:d2:58:
         dc:1b:99:5c:9e:18:24:37:08:24:20:e7:fa:0c:10:2b:34:56:
         1e:71:d7:bd:3e:5e:a4:ba:b7:81:30:1d:e1:e2:c2:fa:9e:ef:
         8a:43:5c:61:de:36:ba:f2:39:4b:7f:0c:6b:f1:67:49:40:7a:
         a8:77:6e:43:fe:17:b3:8d:e7:bd:ac:3d:51:eb:fe:49:eb:c7:
         b6:3b:51:0c:f0:2d:dd:6b:f1:81:75:2a:7a:53:1e:1a:39:85:
         2a:5a:40:6f:f9:fd:8a:24:6a:e1:9a:02:c8:19:fa:15:df:de:
         13:12:1f:2b:af:86:20:8c:e0:59:d9:f9:71:93:71:87:01:15:
         6a:48:74:d9:56:73:3d:49:00:df:02:e8:a3:10:29:78:d7:3b:
         1c:5a:e6:57:a1:77:ab:3e:4d:58:a3:1d:61:70:bb:17:6d:4f:
         20:f1:b1:b1:bc:1d:ba:e6:b1:55:0a:db:40:95:e8:3f:18:d3:
         3e:61:58:5e:06:b3:a3:84:54:37:a9:c6:c2:30:65:87:73:3e:
         eb:1c:a7:dc:16:1c:cd:15:08:80:10:84:88:c0:3e:f4:d1:29:
         c7:92:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org