Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
File:                     3230312e33332e3232342e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          0Ge26n1SYbNdj2RDMdPPs6gLXaSf7sozKdtLqAAYSYI=
Subject key identifier:   F2:35:55:E1:30:E7:CB:79:77:1A:7D:0C:03:F1:97:CB:4F:C3:52:C8
Certificate issuer:       /CN=8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F
Certificate serial:       227E4BAAFB540A81D202F819E11D0A3A027A4288
Authority key identifier: 8B:18:CF:D4:4D:4D:2A:1C:D7:C3:EF:F6:40:62:C5:F1:A3:6E:EF:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 04 Apr 2024 17:46:46 +0000
ROA not before:           Thu 04 Apr 2024 17:41:46 +0000
ROA not after:            Thu 03 Apr 2025 17:46:46 +0000
asID:                     28285
IP address blocks:        201.33.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7e:4b:aa:fb:54:0a:81:d2:02:f8:19:e1:1d:0a:3a:02:7a:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F
        Validity
            Not Before: Apr  4 17:41:46 2024 GMT
            Not After : Apr  3 17:46:46 2025 GMT
        Subject: CN=F23555E130E7CB79771A7D0C03F197CB4FC352C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:88:71:e0:06:56:ba:63:bb:ff:93:bf:d4:
                    ea:68:8a:12:0d:a1:35:3e:34:d7:ec:60:0f:50:57:
                    c0:41:9f:cb:5d:80:2c:a7:79:e2:75:60:ac:13:d9:
                    b9:47:a6:47:70:e9:69:68:74:19:ec:57:a2:ed:6a:
                    ba:da:a7:6c:6f:1b:35:59:0c:93:dc:6e:09:fa:61:
                    70:da:a1:19:f8:4d:4e:7c:33:16:51:a0:ef:b3:15:
                    06:a6:3c:38:52:65:11:9f:e5:2d:bb:24:b5:7a:d0:
                    f8:c1:ef:1c:50:0b:9d:b1:32:11:8e:70:7f:a2:ce:
                    fb:41:7b:88:94:25:90:c1:05:7c:e7:f9:23:7d:3b:
                    aa:b9:ed:86:1c:15:b1:ee:8d:78:46:74:e5:57:61:
                    34:fd:ed:cf:b2:39:d5:67:36:9e:70:a1:28:e6:5f:
                    2e:ba:d0:81:72:5c:1f:cc:47:42:3b:1a:d9:d1:98:
                    d8:8d:47:ea:2e:f6:19:a6:85:0f:74:a2:1d:db:5e:
                    d1:e4:26:64:73:e0:84:2d:11:24:d6:c7:1c:6a:89:
                    85:5c:3f:12:5b:e6:55:8e:f0:9f:97:71:67:b1:0a:
                    00:a8:65:56:50:ce:36:6c:06:61:d1:e8:6e:db:3c:
                    37:4d:b5:c3:25:cf:60:41:ed:49:0c:b7:7b:37:68:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:55:E1:30:E7:CB:79:77:1A:7D:0C:03:F1:97:CB:4F:C3:52:C8
            X509v3 Authority Key Identifier:
                keyid:8B:18:CF:D4:4D:4D:2A:1C:D7:C3:EF:F6:40:62:C5:F1:A3:6E:EF:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:63:3c:d8:f1:5f:16:09:ef:aa:dc:eb:de:1e:b5:5a:31:29:
         6f:cb:9b:9a:d1:72:91:0c:97:55:ab:86:57:26:64:51:3f:a3:
         0d:60:ec:8d:a1:81:24:22:96:45:f7:f3:48:f5:e6:cd:a6:46:
         4f:3b:1d:95:a6:43:1d:0d:bd:46:7e:75:ca:0c:44:6a:40:eb:
         54:74:30:c4:6f:9b:0a:06:45:92:58:e1:c2:84:c4:47:a8:04:
         4e:45:8f:a9:f4:36:09:18:ff:32:91:dd:e3:b9:c0:c0:43:a7:
         10:93:78:19:e9:ef:53:d0:03:49:88:68:5c:fe:dd:a0:d7:26:
         69:7d:6c:7f:e8:2a:51:c0:6f:7c:19:52:c8:14:3f:fd:88:91:
         20:dc:66:f1:fd:63:e9:55:3f:80:45:5e:26:52:6c:15:f5:69:
         8c:a9:18:36:b6:da:6f:b9:c6:cf:30:f3:37:de:5a:aa:32:f7:
         30:0a:6c:f9:a3:77:98:e1:f1:32:e9:16:f6:1a:bc:1a:3e:67:
         83:6c:61:11:a6:b9:12:c8:5b:45:8b:c7:85:64:59:9b:83:b8:
         cf:0a:77:a9:81:d7:12:c3:b4:66:d7:70:51:60:6e:e8:f6:25:
         c6:25:41:79:72:71:22:cf:92:a7:95:c5:51:bc:e5:9e:91:a4:
         7f:93:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org