Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130392e302f32342d3234203d3e203631393433.roa
File:                     3230312e3135382e3130392e302f32342d3234203d3e203631393433.roa (raw, json)
Hash identifier:          X2DSs68pb/NHWuva9ryDnwpQvSgk8iTirZsBxgvy5dY=
Subject key identifier:   AF:BF:90:BB:3B:40:A1:87:D9:3E:A8:71:95:96:50:8B:39:11:4D:1B
Certificate issuer:       /CN=66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB
Certificate serial:       16D33C50461D524097431AF86BA9E0987721F275
Authority key identifier: 66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130392e302f32342d3234203d3e203631393433.roa
Signing time:             Tue 19 Jul 2022 22:08:28 +0000
ROA not before:           Tue 19 Jul 2022 22:03:28 +0000
ROA not after:            Tue 18 Jul 2023 22:08:28 +0000
asID:                     61943
IP address blocks:        201.158.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d3:3c:50:46:1d:52:40:97:43:1a:f8:6b:a9:e0:98:77:21:f2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB
        Validity
            Not Before: Jul 19 22:03:28 2022 GMT
            Not After : Jul 18 22:08:28 2023 GMT
        Subject: CN=AFBF90BB3B40A187D93EA8719596508B39114D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:91:25:c3:69:93:37:26:e8:40:03:1b:d4:
                    ac:bc:40:d8:37:6e:c5:9b:f3:2d:06:b5:b9:6d:9f:
                    2d:e6:34:9d:39:e0:b6:db:32:d7:ee:b8:2d:16:f5:
                    7f:a8:0c:78:67:ac:32:4f:f0:36:fb:58:e5:42:ae:
                    12:55:a1:9c:de:04:7d:59:6f:74:5d:e7:fa:92:0f:
                    43:04:e6:6b:35:e6:9b:5a:07:7a:ac:0d:28:60:b4:
                    83:a0:5d:9c:d1:6d:f3:6c:94:31:67:6f:50:79:3e:
                    ee:07:a7:bf:e9:e1:8f:9a:93:cf:62:26:f9:58:23:
                    32:d5:75:34:f2:3a:b3:ad:5d:34:a5:57:a0:fb:7f:
                    19:ed:d1:4d:ee:eb:1f:4f:d3:12:fe:58:b6:de:4b:
                    b9:b3:04:dc:e6:60:1b:af:09:f6:00:c1:56:75:44:
                    7a:ee:9f:c4:e8:dc:ae:43:5a:53:33:d6:5d:5d:90:
                    ad:c0:d2:51:e2:9a:4c:92:36:0b:5a:04:7f:b3:e5:
                    b4:d4:84:d6:37:37:9b:f4:a1:56:57:0d:a1:da:b4:
                    7b:f7:38:d6:7b:d5:d8:91:af:b2:a7:be:e6:e2:ab:
                    35:da:02:35:97:2a:db:53:0f:bc:bd:c7:8e:ca:8e:
                    42:d2:72:1b:89:23:67:ff:f3:ab:59:90:ce:1b:18:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BF:90:BB:3B:40:A1:87:D9:3E:A8:71:95:96:50:8B:39:11:4D:1B
            X509v3 Authority Key Identifier:
                keyid:66:CB:92:11:98:5F:6A:3A:B6:F1:C9:DE:9F:58:F0:BF:C5:F0:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66CB9211985F6A3AB6F1C9DE9F58F0BFC5F001DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TRa8zceC4o3ieEfa4zGY5J6XUmGEVL3D25naWpmyojs/0/3230312e3135382e3130392e302f32342d3234203d3e203631393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:70:f9:1e:19:3e:f3:2d:10:47:a4:9f:52:0d:f5:ff:1b:
         76:7d:db:69:26:fb:59:0d:57:d8:be:ed:12:5a:4a:ff:7e:b8:
         29:d2:b8:74:74:4f:5c:ab:a7:b7:63:02:ce:45:ed:9d:85:e7:
         39:6d:ed:d8:05:d9:a0:c0:69:78:25:e3:ed:14:f5:35:0e:3b:
         c9:8f:5a:ae:6c:61:2c:14:3c:41:e1:cb:d9:04:ca:d6:80:92:
         c9:83:6a:24:f1:a6:df:26:34:99:e5:77:b6:1e:82:79:0b:e1:
         39:ca:fe:70:41:fd:2b:a6:c8:d7:a1:4b:49:5d:19:98:7e:9b:
         61:07:0e:47:5a:9e:bf:e6:e3:ec:a7:14:22:fb:4b:54:7f:0a:
         08:d6:d9:83:5d:85:4a:94:32:f3:61:ca:e6:42:44:10:81:a6:
         48:7e:e8:04:f6:3f:49:2b:90:c4:c6:cf:d8:d3:7b:0f:ab:e4:
         6f:cb:78:4d:24:da:8f:d2:69:55:94:7e:6d:74:93:99:ab:0f:
         d5:26:76:ab:b7:73:03:99:9b:dd:5f:8c:20:5b:af:c0:13:af:
         76:72:5d:94:a0:94:27:07:d7:ce:e2:57:8d:92:dc:1b:34:f6:
         18:4b:93:97:16:f2:70:9c:7c:7f:11:6c:25:c7:01:0d:15:27:
         80:33:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org