Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
File:                     3230312e39342e3139322e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          aiFYiK8lRYYFrUOyEULGVCf9JF384O3QISgyBec02u4=
Subject key identifier:   2F:D8:2A:C7:FD:8E:8D:2D:8C:13:AA:A0:4E:F1:C7:F1:DD:D3:9E:EC
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       09999FDE4A62DBD3D1D0EDD4D383A91E56C40C23
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:04 +0000
ROA not before:           Tue 20 Feb 2024 16:52:04 +0000
ROA not after:            Tue 18 Feb 2025 16:57:04 +0000
asID:                     22689
IP address blocks:        201.94.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:99:9f:de:4a:62:db:d3:d1:d0:ed:d4:d3:83:a9:1e:56:c4:0c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:04 2024 GMT
            Not After : Feb 18 16:57:04 2025 GMT
        Subject: CN=2FD82AC7FD8E8D2D8C13AAA04EF1C7F1DDD39EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:e8:74:fc:0a:3c:00:a7:a2:da:6c:02:21:
                    08:26:f1:54:14:1e:ba:f8:1e:b2:30:94:16:30:13:
                    d7:9c:85:54:58:64:ae:1c:39:4e:4a:3a:25:f6:d7:
                    de:4a:a9:84:e8:fb:6e:f9:bb:14:97:e0:cd:2a:7f:
                    db:39:92:41:1e:eb:ec:96:4b:10:b7:b4:0b:a5:24:
                    c8:a9:73:f2:5b:79:56:94:2c:b3:89:37:2b:4e:2f:
                    45:42:61:77:51:7c:14:2d:95:71:0b:6f:31:6c:59:
                    35:03:a8:7f:06:36:e9:f3:79:d7:86:39:1c:3a:b7:
                    27:37:a3:5d:41:0d:01:e3:bf:05:1f:e6:b4:76:40:
                    5d:d0:48:ed:66:b7:cb:41:02:04:14:8a:0b:7a:f7:
                    b2:1b:7b:89:c2:9d:1b:4a:9f:b8:75:4f:3e:0b:80:
                    3e:ef:2d:1a:28:fc:93:fb:3a:e5:f9:00:1a:07:77:
                    e9:b8:6a:f6:c4:46:be:ac:c2:21:8f:6d:3e:b3:bb:
                    9e:32:ef:b7:3e:3c:26:3f:09:07:d6:88:a9:96:39:
                    40:5d:28:a5:5f:da:e7:2f:be:ad:2f:8f:9c:ae:bc:
                    bb:e7:fc:e5:6a:a3:d0:b6:e2:97:f6:aa:a7:61:75:
                    4d:0f:9f:b5:11:78:21:d7:0f:73:10:99:87:a5:98:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:2A:C7:FD:8E:8D:2D:8C:13:AA:A0:4E:F1:C7:F1:DD:D3:9E:EC
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3230312e39342e3139322e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:f2:08:21:df:71:a7:19:aa:6c:ff:bc:1c:89:c4:9e:0e:
         9b:39:7b:97:07:f2:99:b1:d7:c6:a7:08:58:6e:68:83:84:cf:
         b6:13:75:a6:1d:85:96:69:f0:27:80:a1:46:dc:68:93:d4:59:
         a9:56:f0:a2:08:7d:48:92:35:77:d3:43:5e:92:a2:53:0d:62:
         4f:6f:ac:63:aa:f5:c2:2f:38:ea:4b:01:79:07:aa:a9:5e:2c:
         a7:76:47:3b:a1:ff:54:1c:bf:6f:40:01:ca:38:93:33:0e:17:
         cb:d1:7a:80:e9:37:c5:ba:08:53:a0:51:ca:8d:59:fc:90:30:
         b9:20:05:5f:d7:36:99:f6:9f:b5:57:fd:88:a6:46:49:12:ba:
         f4:41:af:1a:e3:14:94:7b:0c:46:eb:6e:e6:26:e8:83:b7:51:
         57:71:d3:84:ce:ec:44:a8:ee:47:71:8d:a1:bf:b2:23:1b:52:
         be:58:59:27:9a:6f:0a:a6:98:ee:33:b8:0c:3a:9d:e2:3e:75:
         82:f7:c8:d9:db:2a:eb:73:54:f7:1b:a9:a0:e9:13:f1:06:d8:
         cd:61:03:c1:c2:1b:22:97:ee:52:50:6e:42:64:0b:c0:f7:00:
         68:00:16:13:fe:73:5b:67:ac:38:aa:8b:39:95:f1:41:65:31:
         21:e9:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org