Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e33322e302f32302d3234203d3e203238353830.roa
File:                     3230312e34362e33322e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          gPbJX2NuGhkj3JOg3VD+PzjEcW4gB7I4WssgnNBj0rI=
Subject key identifier:   23:10:8E:C9:28:29:51:AE:58:AC:0A:85:6D:31:F4:9F:D4:78:73:1F
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       230FF67D40F1B8694A3D6D259D0C9A2390BF0E0E
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e33322e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:04 +0000
ROA not before:           Thu 19 Oct 2023 19:10:04 +0000
ROA not after:            Thu 17 Oct 2024 19:15:04 +0000
asID:                     28580
IP address blocks:        201.46.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:f6:7d:40:f1:b8:69:4a:3d:6d:25:9d:0c:9a:23:90:bf:0e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:04 2023 GMT
            Not After : Oct 17 19:15:04 2024 GMT
        Subject: CN=23108EC9282951AE58AC0A856D31F49FD478731F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:2b:72:6d:d3:8e:82:48:f0:a5:11:1b:1f:
                    db:4d:8d:4f:c5:90:e6:c6:16:19:df:e1:6f:82:ad:
                    32:d5:cf:1d:83:d4:80:cf:e8:e9:12:a2:c1:b7:10:
                    19:72:b2:4b:56:df:3f:5d:99:ce:51:3a:53:13:d8:
                    9a:e2:a9:14:79:58:0e:b6:44:13:ed:dc:76:62:c5:
                    5d:b8:4d:26:7e:8b:0c:8d:0b:1f:b5:2c:de:48:3b:
                    a1:e0:09:b0:ac:e2:66:69:8e:0b:54:24:04:0d:aa:
                    ad:0b:41:8a:a8:45:48:58:71:a7:05:4a:6d:93:79:
                    59:4d:f2:d3:b5:44:27:3c:d5:58:9f:ca:75:33:d1:
                    97:36:e4:ea:68:5b:0f:44:6c:c5:10:5f:c5:85:4f:
                    a6:b1:56:2b:49:8d:16:55:be:17:94:88:44:a7:1f:
                    90:51:67:3e:0d:4e:40:85:e1:d8:eb:e1:5d:90:25:
                    c1:3d:4a:ff:9c:82:19:d3:27:c6:a1:5f:e0:23:5d:
                    7f:44:e6:ad:05:51:24:48:4c:30:5d:fc:de:e9:ab:
                    99:80:da:e7:53:b6:ae:c3:57:75:2e:39:f9:73:bb:
                    ed:c8:90:d8:0e:f4:5e:6e:10:5b:68:55:49:91:6f:
                    63:69:6c:5c:94:66:59:08:72:90:3b:c1:13:18:ce:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:8E:C9:28:29:51:AE:58:AC:0A:85:6D:31:F4:9F:D4:78:73:1F
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e33322e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:6d:b6:ca:44:49:42:b3:4d:de:bc:cf:f4:db:58:ae:9c:
         43:1c:c2:0d:97:69:b3:53:73:f4:36:70:6a:c7:ed:c6:52:cd:
         41:93:a5:77:dc:47:c5:b1:ad:ed:ef:ed:6c:99:ba:6b:92:85:
         32:40:7c:6f:df:53:a3:fd:9b:75:8c:57:5f:7d:f6:3e:f8:24:
         ff:31:a5:3d:72:cc:55:a2:ba:2b:0e:cf:5f:05:fc:59:25:c0:
         bb:8d:c3:1c:2a:de:47:e8:87:ec:7b:a3:26:88:2d:61:77:bf:
         a5:36:0d:30:3c:ad:9a:d6:0a:42:05:1e:23:16:5f:f1:cb:13:
         bd:c8:a1:6f:cc:71:fb:20:a0:0d:f2:aa:fc:67:5e:38:b9:84:
         9d:88:cc:bc:0e:fe:9f:43:30:71:a3:0a:ce:af:47:02:a9:92:
         75:0f:b7:5e:33:36:b9:11:c6:b8:d4:68:7a:f4:a7:38:2f:10:
         c5:31:ba:77:52:fb:4b:fd:30:83:76:89:c7:0a:8c:73:ed:ea:
         b7:28:74:2a:5d:91:ee:2e:4f:04:3b:b7:8d:28:a7:bc:a8:1d:
         be:a5:ac:f0:75:cb:3f:ef:2c:71:70:7a:9c:d6:9a:ed:5a:05:
         f6:0a:dd:6d:47:c8:de:5c:7d:50:b6:44:09:1d:30:a0:78:e1:
         d0:7c:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org