Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e203238323830.roa (raw, json)
Hash identifier:          fvUxNsNNLdTkkeO1g4JtpVBtCJmNPYlcErluyZ6Wq2w=
Subject key identifier:   F4:2A:D3:19:17:E5:D8:69:C7:96:E8:C0:12:80:D3:92:41:20:6D:93
Certificate issuer:       /CN=3C4101973F3741AA7FD920C82809162B188C085A
Certificate serial:       1B1425A138FE14C97AC2067ADC5A7B0944AE54ED
Authority key identifier: 3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa
Signing time:             Mon 13 Feb 2023 11:41:14 +0000
ROA not before:           Mon 13 Feb 2023 11:36:14 +0000
ROA not after:            Mon 12 Feb 2024 11:41:14 +0000
asID:                     28280
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:25:a1:38:fe:14:c9:7a:c2:06:7a:dc:5a:7b:09:44:ae:54:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4101973F3741AA7FD920C82809162B188C085A
        Validity
            Not Before: Feb 13 11:36:14 2023 GMT
            Not After : Feb 12 11:41:14 2024 GMT
        Subject: CN=F42AD31917E5D869C796E8C01280D39241206D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:2c:d7:82:fa:75:d3:c2:e9:15:b3:d1:a6:
                    16:6f:fc:ea:a3:83:9a:b5:c1:2a:97:ea:23:2b:a3:
                    34:4f:da:64:73:3e:8d:58:45:e4:6b:bf:c7:cb:ba:
                    26:f6:eb:6b:87:e4:78:05:15:e3:6b:40:7e:95:a0:
                    90:51:50:76:fb:08:b5:d1:2c:3d:88:02:60:c6:82:
                    3c:bc:5b:9a:ad:e7:15:ff:ba:7c:b4:1d:b7:ad:50:
                    c7:c0:8c:46:a9:8c:4a:f0:35:7b:b0:ba:d9:d5:81:
                    8e:3a:59:9e:5c:b3:44:74:ca:c7:c8:38:05:cf:fa:
                    a0:d2:a2:e3:63:d8:8d:41:62:2f:4d:9c:90:71:7e:
                    62:a0:1a:47:ff:ba:d7:d2:0a:b5:d8:86:a6:17:b2:
                    36:6b:ed:18:da:c9:e5:5e:78:ab:e7:9f:6e:39:53:
                    34:db:ce:c2:73:22:c4:15:47:dd:c0:93:35:84:3e:
                    db:51:69:25:f4:d8:91:8b:1d:e6:f3:ab:3c:5e:89:
                    d1:8b:4f:da:52:9b:e4:7a:1f:c2:3c:ca:e2:46:96:
                    03:fa:8a:4d:5f:90:2d:df:45:aa:a9:d3:0f:d7:3a:
                    9e:df:59:29:13:99:4f:62:8c:5f:a8:f4:6f:5f:1f:
                    76:0c:23:09:ee:9d:81:fc:61:8c:21:6d:57:1c:b9:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2A:D3:19:17:E5:D8:69:C7:96:E8:C0:12:80:D3:92:41:20:6D:93
            X509v3 Authority Key Identifier:
                keyid:3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3C4101973F3741AA7FD920C82809162B188C085A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:68:e5:75:58:57:76:53:f1:27:80:df:31:f2:c4:4c:58:
         e1:f6:3c:77:16:46:e9:64:81:58:5f:01:de:99:12:90:59:f2:
         2e:e6:1c:9e:11:15:98:c8:fb:90:46:1f:da:f4:5c:c2:67:ea:
         bf:27:1a:d4:f9:e2:c7:bb:97:3f:39:b5:39:e1:80:7e:39:d2:
         b2:65:30:90:92:9d:99:10:a0:d6:a0:ca:15:96:26:8e:d6:9e:
         f5:5a:a9:b4:6a:83:9f:1c:f1:40:87:2a:64:3f:0f:d5:f0:7f:
         96:a2:29:35:86:10:c8:31:38:e0:8d:f9:d7:fa:f8:f5:da:97:
         ce:d8:fe:3d:e3:1b:28:04:ac:8e:7c:ed:79:06:f8:33:6b:80:
         8d:39:2d:97:49:91:83:39:db:ce:2e:50:9a:1e:f8:c9:69:46:
         19:e8:2a:99:6c:57:f6:ce:b7:c3:f9:be:3c:6d:77:16:eb:ff:
         be:81:35:4b:af:99:ee:85:ba:7b:ab:56:7c:7f:85:b1:d9:87:
         3b:20:7c:9e:46:09:94:2e:a6:5f:02:5c:26:87:8e:05:7d:7b:
         0d:a2:72:51:2b:a9:82:1d:02:cc:5a:08:8d:6d:a7:57:87:5f:
         17:d9:cd:dc:74:be:e0:4b:fc:33:f0:c4:ff:58:d0:36:5e:6b:
         bd:e6:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org