Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          Z8GYA78kk5Klvsjqx4+twjmenbQ3pWlmVpgK5M/W60o=
Subject key identifier:   AB:F9:9C:20:71:4C:D0:18:CF:50:FF:E3:EB:8D:CD:90:83:C9:7F:04
Certificate issuer:       /CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
Certificate serial:       239AA5D2F2D9E89E7A5801E052B4C89F9C58C579
Authority key identifier: 83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 22 Jul 2024 17:09:31 +0000
ROA not before:           Mon 22 Jul 2024 17:04:31 +0000
ROA not after:            Mon 21 Jul 2025 17:09:31 +0000
asID:                     262659
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9a:a5:d2:f2:d9:e8:9e:7a:58:01:e0:52:b4:c8:9f:9c:58:c5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Validity
            Not Before: Jul 22 17:04:31 2024 GMT
            Not After : Jul 21 17:09:31 2025 GMT
        Subject: CN=ABF99C20714CD018CF50FFE3EB8DCD9083C97F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:fb:f7:2d:a7:5a:d2:78:d0:ad:bd:c9:36:
                    f1:43:2d:6b:53:c5:e3:c8:41:11:b6:1f:5b:8c:09:
                    3b:5e:a7:ff:24:21:42:70:77:e2:7b:26:3e:92:0a:
                    33:8e:56:f2:3c:6f:29:58:ec:5c:08:8b:6d:70:08:
                    6d:e6:ce:d9:70:59:f4:0b:87:0a:72:02:bb:ff:98:
                    69:e7:4c:7f:a7:46:0c:9d:71:79:0b:4e:f4:7c:a2:
                    59:88:c5:45:d5:6f:dd:7c:be:92:5d:c7:5d:9a:75:
                    a1:2e:0b:3d:9b:0e:72:e0:32:23:05:ee:e9:3d:f0:
                    5f:fc:be:4e:96:e2:b8:9e:53:0f:86:46:ab:31:4e:
                    b2:db:80:20:3d:fc:89:a8:81:44:39:7c:87:a3:07:
                    f7:b5:ee:b2:ee:9f:29:94:89:f6:24:c1:32:05:b5:
                    d3:e7:1a:a8:78:c5:6f:64:3a:02:f5:03:ec:7c:4b:
                    56:96:e9:af:5e:ac:b2:d6:bc:53:bf:a4:49:f6:b9:
                    2d:7d:de:ad:01:f5:44:bd:e0:53:51:15:96:f4:a3:
                    46:dd:d7:14:91:83:27:49:ef:42:01:5b:7e:08:42:
                    cf:b6:ce:ab:e8:59:20:63:cc:21:f1:8b:4e:d3:b8:
                    c4:06:83:0a:b4:ee:f0:f1:51:0f:00:9b:78:c5:62:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:9C:20:71:4C:D0:18:CF:50:FF:E3:EB:8D:CD:90:83:C9:7F:04
            X509v3 Authority Key Identifier:
                keyid:83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230312e33332e3234302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:50:9a:12:69:0a:4e:b5:93:ef:8d:b2:dd:16:6e:90:73:
         f1:2e:c9:34:f1:f1:0e:28:aa:f0:04:07:93:7d:04:30:36:06:
         a2:ec:63:bf:2e:f9:42:ee:a2:6e:98:95:8d:51:a0:4a:37:1a:
         e1:6f:79:8d:01:85:b5:b8:32:34:10:09:f7:3a:06:8e:eb:31:
         fa:bb:74:28:28:f7:bd:43:5b:f8:85:a4:5a:4d:f3:95:14:fc:
         e1:52:94:95:d1:04:2a:e0:15:ab:f7:c6:4f:a7:8e:de:7f:82:
         24:c6:61:d0:3b:0a:4a:38:78:b5:53:67:99:a3:b6:b4:56:c6:
         58:96:5e:6f:ba:a3:92:70:47:41:74:fb:f0:aa:74:75:fb:10:
         8a:e7:23:5b:04:a6:a0:bc:58:8b:3e:2b:17:15:77:6a:cc:aa:
         33:6d:7c:64:4e:ba:1b:c4:fc:d0:1d:82:87:29:09:30:05:eb:
         9a:e9:71:26:33:3d:5a:2c:0b:01:8e:c9:13:da:02:72:18:c6:
         2b:18:a9:57:7e:e0:79:35:be:ae:36:b4:b1:c3:5f:b4:7b:be:
         7d:7d:0f:91:71:3e:19:c6:19:ec:14:f9:28:a6:eb:73:d8:08:
         b1:33:35:6a:34:69:7c:7e:d6:43:0a:54:88:17:27:41:e3:1c:
         c7:84:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:37:42 2024 by rpki-client on console-ams.rpki-client.org