Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39372e302f32342d3234203d3e20323637353037.roa
File:                     3230312e3138322e39372e302f32342d3234203d3e20323637353037.roa (raw, json)
Hash identifier:          4RJhUs8LdgfLwSPuFlrX4FrM8LNPmIqvsJPBjf6Bwss=
Subject key identifier:   72:6F:83:9F:8A:61:4F:6D:A4:D0:BC:1F:42:CA:82:96:33:D2:30:B5
Certificate issuer:       /CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
Certificate serial:       6F4A966900AB11100885B3651C8F8E55F609B4E2
Authority key identifier: 0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39372e302f32342d3234203d3e20323637353037.roa
Signing time:             Mon 17 Apr 2023 14:38:22 +0000
ROA not before:           Mon 17 Apr 2023 14:33:22 +0000
ROA not after:            Mon 15 Apr 2024 14:38:22 +0000
asID:                     267507
IP address blocks:        201.182.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4a:96:69:00:ab:11:10:08:85:b3:65:1c:8f:8e:55:f6:09:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Validity
            Not Before: Apr 17 14:33:22 2023 GMT
            Not After : Apr 15 14:38:22 2024 GMT
        Subject: CN=726F839F8A614F6DA4D0BC1F42CA829633D230B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:62:42:f6:b9:24:e1:0d:f7:6b:37:38:02:
                    24:87:f8:8f:42:c0:b6:b8:de:9c:ca:a0:ce:ed:41:
                    4b:4b:7c:cf:e2:30:92:00:d2:1d:e5:4b:64:4d:5c:
                    a3:00:1e:07:a1:d4:d4:44:df:a5:97:2b:6c:47:1c:
                    b9:ae:d5:47:3c:fc:89:ee:45:6a:22:e6:01:30:bb:
                    bc:5f:f2:80:03:54:43:71:4a:fe:d6:3d:d9:1c:b3:
                    95:25:47:a4:15:39:ff:3b:85:00:d4:05:75:1a:b0:
                    c6:d1:93:15:96:7d:bd:e1:e7:1d:0e:1a:10:48:d3:
                    d0:96:59:87:16:e6:82:c6:ae:36:f6:f0:fa:ab:93:
                    b1:0d:87:8f:e8:9f:cd:dc:c1:18:94:51:15:5f:90:
                    23:52:7d:13:ff:99:d5:5d:00:49:54:d8:82:0a:53:
                    8c:3d:e6:da:7a:49:c7:00:8d:30:c7:0f:ec:69:4e:
                    36:cd:bc:2b:09:17:60:c1:75:9b:0f:fa:c2:30:ef:
                    16:97:ac:5b:d8:89:1d:9a:f4:2c:10:68:a7:50:52:
                    f6:39:8f:ce:c3:72:ba:e1:7d:c2:65:50:99:12:ac:
                    f3:b3:24:b0:e6:b8:b4:94:de:98:5b:04:83:43:37:
                    76:d2:de:ec:18:32:91:a6:43:ce:7f:64:a7:01:54:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:83:9F:8A:61:4F:6D:A4:D0:BC:1F:42:CA:82:96:33:D2:30:B5
            X509v3 Authority Key Identifier:
                keyid:0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39372e302f32342d3234203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:b7:a5:41:2b:b5:a7:32:a8:29:2d:f5:85:2f:61:ed:99:
         b1:3b:0c:3c:f7:73:86:d5:ca:7e:99:7a:59:4e:f0:b9:ce:0e:
         10:2d:46:ec:2d:81:71:9e:42:17:7e:cb:32:da:7c:45:cd:77:
         a7:14:07:11:48:ca:1a:d7:69:d0:ba:8b:97:b1:5a:70:d0:c2:
         2b:18:c3:dc:bd:aa:c2:a4:a0:fa:1a:08:19:ce:8e:b9:9b:4d:
         91:6f:46:9c:e1:c1:80:e1:91:f2:ba:c2:07:7c:01:50:2a:55:
         a7:ca:34:50:e0:0f:0c:25:12:99:86:64:a3:b9:63:b8:79:3a:
         08:b1:c4:fc:c4:b6:a4:a8:35:7f:7e:1f:25:e3:7e:56:4c:24:
         93:a0:b8:35:7e:f4:5e:12:a8:14:a6:ec:7a:1e:55:7d:c9:4c:
         c6:5d:0d:30:2b:53:a2:35:63:a5:af:67:38:d8:66:5a:57:d2:
         54:1e:f8:51:7c:9e:64:52:51:9c:8f:48:be:a0:d8:1d:98:00:
         eb:f3:2b:89:b1:92:03:2a:91:17:f8:a3:82:43:6c:17:4d:d9:
         de:51:95:77:eb:b5:8c:3a:38:ac:bb:0a:22:4d:10:83:0c:05:
         3f:39:cd:35:0c:f0:45:8f:ae:11:84:0f:76:37:92:a0:9b:8c:
         38:ba:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org