Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e34382e302f32302d3234203d3e203238353830.roa
File:                     3230312e34362e34382e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          A38qNIj5A4AgWUfaaNtPVdXo7B7RnSwmobu/FHJzl4I=
Subject key identifier:   33:90:5C:CA:64:5D:FC:94:29:CF:4B:F6:C1:D4:E3:A9:31:A5:A2:38
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       269FDE5190952C859D22A6C810312A2F83D08E7A
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e34382e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:01 +0000
ROA not before:           Thu 19 Oct 2023 19:10:01 +0000
ROA not after:            Thu 17 Oct 2024 19:15:01 +0000
asID:                     28580
IP address blocks:        201.46.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9f:de:51:90:95:2c:85:9d:22:a6:c8:10:31:2a:2f:83:d0:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:01 2023 GMT
            Not After : Oct 17 19:15:01 2024 GMT
        Subject: CN=33905CCA645DFC9429CF4BF6C1D4E3A931A5A238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:02:d4:06:f9:dd:e7:8b:2c:74:3a:4f:fc:eb:
                    9d:53:b4:22:22:ea:74:4e:20:77:e4:45:0d:cf:02:
                    b5:f1:f2:f0:c2:4d:5d:09:35:84:a1:8d:be:42:f8:
                    64:ec:48:62:4e:93:cc:cb:3e:5d:41:73:a3:0d:da:
                    5a:b1:1c:07:bb:9f:e2:cf:30:d9:b0:a0:a9:2d:42:
                    fc:ef:b8:93:0e:9c:b6:62:e3:60:80:d7:b9:15:62:
                    7f:21:cb:34:b7:53:60:65:8c:52:2c:18:58:58:59:
                    29:4a:76:3f:19:2b:8f:9a:a6:1c:2d:1b:70:ff:28:
                    3a:46:50:f4:57:9c:2d:8e:5f:19:01:d6:42:ce:eb:
                    a3:5f:bc:47:cd:0f:87:81:43:c9:e0:fa:35:c9:81:
                    92:d2:bf:f3:ed:b8:bb:f0:70:12:e3:9f:16:23:76:
                    9d:62:52:b0:2e:7a:c6:e7:c8:c5:5c:ad:e8:7a:3f:
                    2e:98:50:ab:5b:a8:0d:e8:da:af:96:a8:1a:b8:a3:
                    48:95:8e:2b:bf:3f:40:52:c9:36:26:e0:38:a4:34:
                    7f:8d:ff:4f:8e:4d:00:eb:aa:21:e1:a2:8d:4b:c0:
                    9c:d8:70:c2:28:c8:e1:31:f8:52:b4:73:7a:9a:40:
                    f8:54:f8:26:5f:7a:03:e2:c6:bb:79:91:78:ba:0f:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:5C:CA:64:5D:FC:94:29:CF:4B:F6:C1:D4:E3:A9:31:A5:A2:38
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3230312e34362e34382e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:04:fa:3b:09:04:97:a9:5b:52:c6:f4:f6:0a:65:93:e3:
         d6:4d:77:42:ec:6b:32:f2:83:55:c7:94:dc:30:d5:46:ca:5b:
         b6:37:09:03:d8:a4:a7:5d:9b:c3:96:d2:6b:8a:c4:da:b2:d8:
         d8:67:73:3b:15:25:8d:09:a5:cd:e1:1c:5e:f9:f5:04:57:80:
         c0:83:50:e5:7f:e1:a3:b5:50:5b:81:c4:89:45:34:bd:ed:ca:
         e4:a6:05:20:f7:96:4d:79:7c:b4:e2:1f:37:4a:e1:73:2a:dc:
         2d:07:fb:08:bd:1a:ff:84:c8:9d:ef:60:b6:6a:a3:0f:d4:ec:
         68:c3:dc:89:da:18:60:d9:f7:a1:74:9a:ad:d5:fc:98:a6:64:
         cc:e4:c2:ed:46:32:b2:8f:c9:9e:5b:8c:78:51:bb:e9:ba:73:
         3e:22:48:6c:d5:45:bc:41:dc:d0:20:d6:4c:a4:63:13:8a:2a:
         87:eb:7f:3e:36:f7:c7:d1:ba:fe:ef:dd:a0:23:a0:3d:28:4c:
         6c:37:aa:67:87:93:f0:75:0f:d8:f6:35:62:4f:97:89:1f:66:
         24:5d:2b:e5:a3:a2:c9:c3:e0:b6:71:d6:c0:0f:10:7f:5d:12:
         11:48:fc:e4:b9:47:b8:8b:5a:d6:1c:8a:f0:0a:45:7f:6d:39:
         7c:88:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org