Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130382e302f32342d3234203d3e203631393433.roa
File:                     3230312e3135382e3130382e302f32342d3234203d3e203631393433.roa (raw, json)
Hash identifier:          vZxt8EzjP6V+9BGRL5SnD021KgUA5zE1/WFBMIv74AA=
Subject key identifier:   65:2D:76:DA:67:4F:D9:7B:F5:35:00:90:E1:25:81:C1:CD:5F:94:28
Certificate issuer:       /CN=66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB
Certificate serial:       668AC2D040DD2073BFE0FD10DBB27FBBD3994661
Authority key identifier: 66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130382e302f32342d3234203d3e203631393433.roa
Signing time:             Tue 19 Jul 2022 22:08:22 +0000
ROA not before:           Tue 19 Jul 2022 22:03:22 +0000
ROA not after:            Tue 18 Jul 2023 22:08:22 +0000
asID:                     61943
IP address blocks:        201.158.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:c2:d0:40:dd:20:73:bf:e0:fd:10:db:b2:7f:bb:d3:99:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB
        Validity
            Not Before: Jul 19 22:03:22 2022 GMT
            Not After : Jul 18 22:08:22 2023 GMT
        Subject: CN=652D76DA674FD97BF5350090E12581C1CD5F9428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:52:94:11:30:95:69:ce:b7:92:6c:7e:2c:
                    27:ba:e2:3f:55:5c:af:79:79:05:0a:ed:64:c6:bd:
                    68:3b:e7:11:74:46:88:0f:4e:d7:a7:8d:b7:26:54:
                    b0:28:80:c0:46:a6:1d:92:9f:48:5b:4a:d3:82:9f:
                    cf:e8:ae:17:55:a4:25:03:39:db:e3:91:72:51:bb:
                    26:26:d1:83:74:09:60:4e:8d:df:1a:bc:cc:b6:ee:
                    60:2a:d7:a2:71:46:9c:0d:fb:9e:30:24:91:5f:03:
                    c6:ad:55:67:50:a5:2b:8e:b9:b2:2a:a6:68:de:57:
                    c1:a7:d9:1f:8f:de:83:cb:71:84:e7:99:6f:32:95:
                    58:03:04:c8:1c:c6:44:54:7f:ca:8b:c3:06:8d:43:
                    ff:e3:30:43:cf:d4:f7:a0:30:c6:ed:bb:45:e0:97:
                    23:44:94:da:4f:38:24:d1:f2:ec:bd:10:48:15:aa:
                    60:05:10:10:2d:45:d3:84:d3:d5:18:7b:77:a6:9a:
                    10:9a:70:7d:6e:8f:22:94:12:71:d8:9e:f4:e7:08:
                    7d:ed:8a:83:d6:78:c1:03:f0:e4:e2:21:0e:dc:f6:
                    d9:df:e1:94:8b:b9:19:19:a9:9a:00:29:14:7a:c5:
                    45:75:83:97:a9:ae:1f:9d:de:be:7b:08:0e:57:73:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2D:76:DA:67:4F:D9:7B:F5:35:00:90:E1:25:81:C1:CD:5F:94:28
            X509v3 Authority Key Identifier:
                keyid:66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130382e302f32342d3234203d3e203631393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:9f:e5:cb:21:8e:00:91:5c:0b:bb:e6:b8:52:08:62:d4:
         df:cc:15:e6:b2:25:19:fd:28:40:77:2e:6b:b0:30:a3:f0:15:
         f9:bf:2e:8f:8c:b0:a6:51:22:59:76:53:ec:24:93:1a:12:e9:
         11:3f:95:be:88:a4:25:d9:fa:be:82:02:19:ef:76:5b:6d:54:
         11:20:2d:8e:5b:dd:37:c3:04:1c:57:1d:5d:48:6a:98:ab:6c:
         20:67:b8:01:c3:07:2f:6a:cc:8c:3f:3b:ea:c6:64:a9:0b:24:
         79:82:35:e1:8e:8c:00:28:19:8c:1d:02:00:f9:7b:7d:51:31:
         05:b9:af:6c:79:b1:4b:65:6f:ac:b2:a3:f4:11:36:02:dd:85:
         54:08:94:bf:ab:44:68:af:55:de:c5:7c:d0:d6:e9:1b:9e:26:
         14:ee:e8:f7:0d:4f:12:58:77:b8:14:48:a5:39:a2:9d:41:56:
         e9:ef:b9:ba:33:51:8d:fb:6b:59:5a:d6:a3:60:8f:c3:aa:fe:
         fa:55:25:e0:37:36:a2:c8:d5:c3:41:84:af:16:bd:c4:d2:0c:
         8f:53:be:26:2f:e3:39:49:8c:49:fb:f5:48:eb:ba:d0:47:53:
         b1:c8:a3:dc:54:e0:fe:da:cb:24:da:aa:5f:30:2d:88:54:0f:
         71:2e:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org