Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa
File:                     3230312e3133312e39322e302f32322d3235203d3e203631393434.roa (raw, json)
Hash identifier:          12f6nEZGProVdmtYXusRVjKEHUTmtOuaHaWoUC+pZVM=
Subject key identifier:   D1:E0:9A:01:AD:1A:FC:A3:94:ED:22:D4:0A:42:EE:42:29:43:19:3E
Certificate issuer:       /CN=3448D9FF68BAB6B32FD7182F798ABC05793ECCB3
Certificate serial:       55CC6DE6079D8B04C611C461B16C208D93A55A13
Authority key identifier: 34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa
Signing time:             Tue 04 Jul 2023 02:20:02 +0000
ROA not before:           Tue 04 Jul 2023 02:15:02 +0000
ROA not after:            Tue 02 Jul 2024 02:20:02 +0000
asID:                     61944
IP address blocks:        201.131.92.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cc:6d:e6:07:9d:8b:04:c6:11:c4:61:b1:6c:20:8d:93:a5:5a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3448D9FF68BAB6B32FD7182F798ABC05793ECCB3
        Validity
            Not Before: Jul  4 02:15:02 2023 GMT
            Not After : Jul  2 02:20:02 2024 GMT
        Subject: CN=D1E09A01AD1AFCA394ED22D40A42EE422943193E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:f3:54:f2:04:3b:fb:78:e5:cc:b7:a4:56:
                    f8:f3:f0:32:50:63:32:2b:98:c6:57:a7:60:f9:87:
                    7a:57:8b:89:9d:dc:4b:ba:1a:de:d2:a2:ce:62:86:
                    45:b1:7a:4e:9e:df:16:be:13:36:94:ef:e6:c5:19:
                    c8:52:a6:7c:ee:06:b3:47:ba:0b:bf:68:89:35:73:
                    c4:18:71:7e:93:ba:e6:80:3e:87:d3:62:49:eb:60:
                    15:77:2c:ce:f6:61:1c:de:6f:42:e8:21:87:66:49:
                    8f:99:cc:41:44:f1:b6:ee:c1:ff:3c:90:98:6b:1f:
                    05:10:2f:95:a9:7d:c6:d8:7b:5f:c9:de:ed:e5:9d:
                    73:a4:8c:a7:24:39:69:59:88:b6:48:4d:58:3b:0a:
                    59:ce:47:86:b3:be:fb:22:fc:19:62:50:ea:bb:9b:
                    48:b0:31:d9:f6:6a:5b:13:17:60:c7:b3:5f:fb:8d:
                    32:9f:50:ed:02:99:49:bc:36:2f:41:77:12:38:da:
                    3a:74:55:df:6d:e3:eb:7f:68:aa:98:87:9b:74:12:
                    ec:77:d0:3d:a0:ca:99:d9:a8:a7:be:9e:5c:a0:1b:
                    27:17:66:7f:4f:a9:80:8a:bf:50:0a:2b:ac:98:06:
                    46:5a:4e:e0:fe:5f:2c:16:b8:45:bf:2e:5d:9f:69:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:9A:01:AD:1A:FC:A3:94:ED:22:D4:0A:42:EE:42:29:43:19:3E
            X509v3 Authority Key Identifier:
                keyid:34:48:D9:FF:68:BA:B6:B3:2F:D7:18:2F:79:8A:BC:05:79:3E:CC:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3448D9FF68BAB6B32FD7182F798ABC05793ECCB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/0/3230312e3133312e39322e302f32322d3235203d3e203631393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:54:3d:f2:fe:ef:1c:19:30:a5:96:26:42:02:51:1f:4d:
         ee:c7:0c:69:c3:56:62:53:98:93:fd:e3:b8:7d:86:f3:0c:f9:
         76:7a:86:5a:01:48:71:f6:10:20:f7:12:16:83:dd:91:40:b4:
         2f:21:b5:1b:be:03:4a:74:2c:37:8c:e0:d4:67:3d:bb:38:97:
         03:52:4c:ef:af:1b:38:95:f1:32:86:04:a5:29:e9:d5:03:78:
         1f:cc:4d:ff:15:3e:08:40:5a:9c:5b:3f:8f:96:d9:41:23:bd:
         40:d1:76:fb:bd:79:8b:aa:d4:39:4d:f7:88:55:dc:d5:7a:57:
         5b:19:2e:84:b6:8f:6e:52:f4:cf:2d:82:20:f2:43:50:0c:2d:
         da:cd:5a:1f:e8:e0:d1:49:f6:8e:66:e2:70:bf:2d:42:4c:d6:
         cf:8a:11:b3:37:c3:64:54:da:96:f3:43:29:0d:4b:5f:5d:39:
         93:f8:1f:ac:26:72:e4:b1:df:93:de:73:ed:4b:93:97:c0:00:
         e1:bb:84:5e:21:ce:fa:c2:e2:c8:70:76:8b:49:e6:15:73:aa:
         31:e6:46:f3:16:62:74:f7:a6:3c:ae:1d:91:19:64:78:3d:6b:
         4d:c1:a8:4c:ae:11:71:73:6a:d8:ed:a8:ba:4c:8d:74:f6:06:
         17:bf:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org