Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          hvD4hCug8RNeWNvlcgWBbDhoIcW4cCahr30GTYWwxeI=
Subject key identifier:   32:58:FA:E6:BD:58:5D:8A:A9:18:A1:84:68:D9:F5:05:9B:42:29:6A
Certificate issuer:       /CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
Certificate serial:       72761434D6A0B687F9EBF94F676FB2888BE5BA21
Authority key identifier: 4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 04 Apr 2024 11:21:47 +0000
ROA not before:           Thu 04 Apr 2024 11:16:47 +0000
ROA not after:            Thu 03 Apr 2025 11:21:47 +0000
asID:                     262659
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:76:14:34:d6:a0:b6:87:f9:eb:f9:4f:67:6f:b2:88:8b:e5:ba:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C
        Validity
            Not Before: Apr  4 11:16:47 2024 GMT
            Not After : Apr  3 11:21:47 2025 GMT
        Subject: CN=3258FAE6BD585D8AA918A18468D9F5059B42296A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:33:24:51:91:91:83:5b:09:52:71:a8:6a:
                    4e:c7:07:10:cb:98:75:dd:1f:01:e7:3a:7e:9d:d2:
                    a0:87:fb:47:07:e1:7c:7a:50:36:f1:a6:be:87:45:
                    d1:53:36:f8:85:70:4f:cb:b6:96:d7:9c:74:9b:df:
                    40:4f:8f:00:6b:d3:d5:43:e4:c9:c0:8c:a7:7a:61:
                    a6:a1:9e:19:b4:5a:94:27:0d:3b:3d:ce:29:9e:2e:
                    55:e3:c9:a4:bb:98:4a:e4:05:df:16:19:62:02:48:
                    22:10:56:df:52:aa:ef:17:67:4e:db:ad:73:39:9f:
                    78:1e:4b:23:6d:51:0d:b4:8a:33:ab:16:c7:70:9f:
                    41:66:3b:b7:a7:0b:13:14:bd:d8:f7:63:0c:78:f6:
                    0a:a5:e6:c0:0c:42:8e:82:98:4d:c4:15:71:b6:15:
                    03:2b:24:50:3c:b6:28:1e:96:73:a8:f0:c6:08:b4:
                    6f:10:97:1e:3e:24:68:e3:ae:47:e3:0c:5b:7f:a2:
                    e0:84:01:1a:e6:e5:16:f0:42:27:d3:a5:8c:94:5d:
                    01:07:f8:a5:cf:fd:c0:b8:c1:19:71:c4:dd:3f:f7:
                    ac:7b:bf:23:75:dc:b4:91:db:e1:9d:9a:c0:73:4a:
                    c9:53:ff:ad:d3:50:30:26:5a:3d:80:c4:cc:46:28:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:FA:E6:BD:58:5D:8A:A9:18:A1:84:68:D9:F5:05:9B:42:29:6A
            X509v3 Authority Key Identifier:
                keyid:4F:E1:9D:B1:C7:F1:54:4B:5E:CA:1B:50:EC:C4:4D:C6:99:23:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE19DB1C7F1544B5ECA1B50ECC44DC69923E42C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/1/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:e7:20:99:06:5f:fc:08:f3:db:2e:a7:c3:08:69:da:7d:
         ce:43:03:81:12:6c:7d:d5:0d:81:06:bf:eb:b9:03:45:5d:44:
         78:20:49:e2:9d:73:1e:42:ee:52:0c:d2:38:b8:c2:81:67:20:
         12:3c:3e:8a:fb:73:cc:f7:28:d7:0f:01:b5:56:39:62:f5:5f:
         8a:95:09:cc:e0:46:4a:5f:32:22:d2:a3:4f:ed:4a:44:59:a9:
         30:33:35:55:ce:8a:ed:a2:76:ab:81:04:ea:cc:31:0b:71:d6:
         22:97:c7:21:7e:54:09:8d:85:ed:5f:e3:a1:61:f7:2c:6d:af:
         0e:e7:de:49:8f:94:cd:25:a9:e5:08:e1:7c:8e:2c:10:93:cd:
         ea:12:fa:10:42:bc:ba:2f:c5:39:12:61:3f:8b:4d:06:5f:44:
         a9:86:a7:4e:b0:af:24:71:3f:de:ba:72:0d:89:36:4b:96:cd:
         de:23:5c:5f:6e:45:d9:e9:d9:28:e4:62:3e:71:9c:cf:5a:23:
         b7:19:d8:e7:89:ca:eb:61:8f:9e:6d:00:29:82:34:20:a7:07:
         e9:12:61:41:8c:ad:a9:17:e4:0b:04:ba:7e:a0:f7:c9:b6:23:
         68:2f:f7:dc:65:87:41:dd:df:5b:53:b3:d0:7a:23:d3:e3:97:
         f9:ab:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org