Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32332d3233203d3e20323637353037.roa
File:                     3230312e3138322e39362e302f32332d3233203d3e20323637353037.roa (raw, json)
Hash identifier:          kzWQ3WSOgR7dFGF2dxmEEJ6CgKJytVCEl+clMG/L3ao=
Subject key identifier:   50:20:6C:B0:F8:00:AB:06:DB:AB:07:F4:51:9A:E0:99:7D:90:2E:D3
Certificate issuer:       /CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
Certificate serial:       6797832FEF047E579A96198FB0D3AE4F2EE6DD8F
Authority key identifier: 0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32332d3233203d3e20323637353037.roa
Signing time:             Mon 17 Apr 2023 14:38:22 +0000
ROA not before:           Mon 17 Apr 2023 14:33:22 +0000
ROA not after:            Mon 15 Apr 2024 14:38:22 +0000
asID:                     267507
IP address blocks:        201.182.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:97:83:2f:ef:04:7e:57:9a:96:19:8f:b0:d3:ae:4f:2e:e6:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Validity
            Not Before: Apr 17 14:33:22 2023 GMT
            Not After : Apr 15 14:38:22 2024 GMT
        Subject: CN=50206CB0F800AB06DBAB07F4519AE0997D902ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:4d:dd:67:fe:56:ef:ea:33:fc:0b:93:f9:
                    f6:58:8d:0e:1e:3f:82:97:1b:ea:c1:0f:f2:9d:16:
                    bb:94:55:d0:f6:0a:40:a7:2c:a0:be:04:db:36:b3:
                    61:ad:af:78:12:3e:f6:57:5b:a0:91:d3:64:62:16:
                    17:3a:0f:9d:5f:47:a6:c2:9a:5f:ba:e2:aa:73:b3:
                    d0:db:cd:d0:2a:a8:7f:b7:c0:d7:aa:c8:80:45:d6:
                    b7:7c:64:53:fc:f9:e5:44:44:f6:2b:d2:f4:40:31:
                    05:60:78:90:00:b4:58:4d:49:ed:42:1d:61:39:67:
                    d0:66:69:50:ff:d8:4d:4f:bf:63:f1:e4:73:59:ba:
                    2e:b7:df:bc:8e:45:f3:38:5e:85:84:fd:5b:14:74:
                    41:6c:55:0e:c6:4b:9f:2f:0f:8c:ee:d2:44:b3:56:
                    d0:5c:b3:46:8b:d0:7d:15:c6:66:27:00:b9:55:7e:
                    c3:60:d1:b2:a9:7e:7f:62:11:ca:54:98:95:4d:b6:
                    85:3c:63:e2:e5:0e:63:ca:43:4f:39:62:67:05:2e:
                    8d:54:c4:8b:d9:b7:ca:c2:33:b4:6f:76:c6:c8:8e:
                    96:16:5a:92:fe:ab:b3:5a:6d:b2:cf:a9:bf:c4:6d:
                    11:83:a1:01:7e:3c:08:94:87:44:92:7a:33:c3:e7:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:20:6C:B0:F8:00:AB:06:DB:AB:07:F4:51:9A:E0:99:7D:90:2E:D3
            X509v3 Authority Key Identifier:
                keyid:0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39362e302f32332d3233203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:e1:75:69:f0:30:36:56:a6:c6:02:fa:fe:ae:6e:e2:95:af:
         c5:7e:03:7e:be:1b:48:61:fa:0b:45:6b:ff:f1:43:ed:d0:58:
         45:7e:1a:f2:03:3a:51:4b:55:3b:1f:25:cc:bb:4e:6b:52:67:
         96:2b:05:77:d9:02:a8:61:ad:1b:50:c7:4c:be:f4:ce:b6:0f:
         fa:b6:a5:d0:8a:14:2a:e7:04:9b:80:13:ed:25:59:ef:ff:0c:
         c8:f1:23:bb:8c:f9:b4:d0:75:4a:b3:82:7f:77:ad:ea:fd:61:
         c4:bd:e3:f2:17:53:a5:99:49:7d:89:c4:5e:46:49:d6:54:83:
         72:9b:de:14:c3:1b:eb:f4:56:ad:3c:6b:d9:2c:b5:f1:59:2c:
         8f:d3:fd:32:26:b8:23:9e:0a:ff:f2:d2:80:b9:5f:69:d9:45:
         31:aa:de:49:bb:55:fa:9a:b0:00:8d:bb:5d:4f:73:86:62:47:
         ff:9e:da:e0:97:76:32:e8:26:da:c7:2a:a0:08:54:52:13:dc:
         55:48:8c:d4:0c:93:15:34:75:c6:2f:8c:a8:b7:bb:8d:b6:5c:
         0a:82:72:6c:38:e0:d9:fd:b4:93:be:9d:fe:c4:28:e2:32:e2:
         77:ce:d4:a6:48:5b:f6:ed:71:7c:29:68:9a:93:20:31:23:5d:
         97:44:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org