Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa
File:                     3230312e34362e3139322e302f31392d3332203d3e203238363135.roa (raw, json)
Hash identifier:          ej9/SzML/xu+XyQOcA/4ToORnhJx0ULWiQgz6tx1suw=
Subject key identifier:   83:38:94:85:34:1E:11:E7:0B:1A:BD:6B:41:C4:32:1D:40:D8:F4:02
Certificate issuer:       /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial:       315AAB11E96065EA928DA13ABA6EB6FB7C06BB44
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa
Signing time:             Tue 02 Apr 2024 13:13:32 +0000
ROA not before:           Tue 02 Apr 2024 13:08:32 +0000
ROA not after:            Tue 01 Apr 2025 13:13:32 +0000
asID:                     28615
IP address blocks:        201.46.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:ab:11:e9:60:65:ea:92:8d:a1:3a:ba:6e:b6:fb:7c:06:bb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
        Validity
            Not Before: Apr  2 13:08:32 2024 GMT
            Not After : Apr  1 13:13:32 2025 GMT
        Subject: CN=83389485341E11E70B1ABD6B41C4321D40D8F402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:ed:fc:19:8f:b1:dc:6f:d2:a4:dc:f3:c1:
                    de:b5:59:ea:9d:22:c0:85:df:32:76:86:4d:5a:2a:
                    48:7c:49:56:2d:6f:3d:d9:19:86:b6:52:73:89:16:
                    15:dc:31:6f:c9:2d:88:41:b3:60:85:2d:8b:df:6e:
                    eb:61:35:b9:7e:37:4d:a6:c7:29:1c:9c:e7:bd:7b:
                    48:a4:43:ec:20:86:fd:fc:16:5d:cf:53:9d:72:80:
                    84:aa:40:23:3f:6b:e2:38:fb:8c:b6:f6:e7:49:12:
                    d4:d1:ba:4c:75:ca:2e:a6:db:82:e0:8d:46:7e:24:
                    44:29:3a:d5:1b:1f:7e:43:04:71:c3:8b:30:75:8a:
                    80:ba:4a:cd:7f:75:4b:37:d3:c0:d9:44:68:23:a7:
                    c6:6a:d8:a3:7e:9c:d8:fc:aa:35:d0:ab:4b:a2:a5:
                    cb:05:27:c5:0d:c3:e8:97:43:cc:91:0a:d5:6d:52:
                    01:51:83:de:71:e5:e7:80:78:26:33:65:7d:79:0c:
                    f1:69:94:a4:21:f6:19:f4:d4:b8:02:1d:11:15:50:
                    08:c6:b9:d2:87:56:2c:6a:ca:f9:f0:7c:89:2a:b7:
                    0d:50:f4:a0:94:d6:a0:0f:7c:22:14:7e:67:5e:36:
                    b5:3b:3b:ad:87:87:39:80:96:80:9f:8d:99:91:fc:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:94:85:34:1E:11:E7:0B:1A:BD:6B:41:C4:32:1D:40:D8:F4:02
            X509v3 Authority Key Identifier:
                keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3230312e34362e3139322e302f31392d3332203d3e203238363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:1c:51:35:d0:6b:b5:8f:ad:e8:86:3a:19:49:ee:08:48:
         f7:e2:b9:2b:75:82:17:f9:fa:e0:af:dc:cc:17:34:b9:ee:11:
         96:dc:fd:83:e1:fe:0c:da:8f:5b:f4:d7:a9:60:9e:7c:dd:d9:
         ff:19:fe:c1:0a:29:a5:2f:31:33:ea:ab:27:20:94:1a:30:70:
         d1:d8:d9:9e:6f:67:a5:1a:ec:e2:04:70:6e:11:b8:1c:7f:88:
         4b:49:9e:34:ff:43:a1:66:65:fd:0f:56:25:fb:a3:7b:0d:e8:
         29:8a:5c:c7:78:29:0a:a3:4d:12:a7:c0:a0:fe:13:b4:2b:2c:
         fd:17:e2:f6:4c:11:69:11:9e:2a:2c:3d:cf:e9:e6:86:57:a8:
         d1:5b:87:fb:34:12:4e:b8:81:20:63:a6:23:37:e3:3f:d8:38:
         10:3c:30:28:15:7d:b5:4b:2b:c8:c3:82:e9:47:9a:79:f0:c8:
         7e:21:fd:b8:9b:7b:02:8f:5a:59:d3:6f:c9:16:30:a5:1a:92:
         10:4b:ec:d6:9b:53:4e:5c:34:aa:41:e9:f1:4a:3f:3d:d0:84:
         7f:38:4b:cf:15:51:f1:4a:06:8c:d2:a4:58:ef:b6:5c:02:d8:
         b4:fb:5a:47:21:1e:85:2b:09:da:f4:f1:e6:e5:67:1b:c1:c9:
         91:b6:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org