Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39382e302f32342d3234203d3e20323637353037.roa
File:                     3230312e3138322e39382e302f32342d3234203d3e20323637353037.roa (raw, json)
Hash identifier:          KOQf8ZznV3ppoONjzBzCZgcQQbfsZnIpUmNKrXBSTuI=
Subject key identifier:   D1:B6:BE:F1:C8:CB:F6:BC:FE:6B:97:25:37:E1:03:79:5F:6B:39:37
Certificate issuer:       /CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
Certificate serial:       43794F697EAF5B07B7E1C6E72131B35A53C12CF5
Authority key identifier: 0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39382e302f32342d3234203d3e20323637353037.roa
Signing time:             Mon 17 Apr 2023 14:38:21 +0000
ROA not before:           Mon 17 Apr 2023 14:33:21 +0000
ROA not after:            Mon 15 Apr 2024 14:38:21 +0000
asID:                     267507
IP address blocks:        201.182.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:79:4f:69:7e:af:5b:07:b7:e1:c6:e7:21:31:b3:5a:53:c1:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF
        Validity
            Not Before: Apr 17 14:33:21 2023 GMT
            Not After : Apr 15 14:38:21 2024 GMT
        Subject: CN=D1B6BEF1C8CBF6BCFE6B972537E103795F6B3937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:4c:19:b5:51:46:37:23:df:a2:b0:e9:f2:
                    f2:40:81:99:69:ee:b7:c2:d4:97:22:9d:de:8d:45:
                    4d:10:49:54:02:ae:0e:93:92:7c:01:63:ee:94:63:
                    a9:4e:17:b8:d5:bc:08:54:f5:ce:ad:7e:08:d9:ec:
                    88:db:fe:93:82:e4:48:33:4a:45:18:bc:67:03:57:
                    ff:2b:79:ec:a8:d4:02:3c:c6:ea:fe:51:e0:71:9b:
                    01:ee:cf:ca:e9:41:fb:89:b3:e6:b8:2b:cb:6c:cc:
                    2e:95:bb:ce:67:5b:fe:3c:ee:79:8a:4e:d9:6a:f8:
                    8d:a0:8d:16:ec:f8:c3:d5:aa:ae:36:b9:d6:da:7d:
                    ae:3c:60:79:0f:97:1e:80:5d:73:80:cf:bd:25:ef:
                    e8:b7:03:40:e3:cc:18:e1:46:41:e9:2b:05:b7:90:
                    4d:cd:77:fb:6a:a3:5c:68:03:3a:1a:2b:ad:51:e3:
                    9b:c6:2e:a9:13:21:70:31:6f:49:d5:f3:65:f5:ca:
                    ff:52:67:61:3d:f1:1f:2a:6e:7f:67:8b:88:06:05:
                    ff:c5:6f:1a:ee:b0:94:03:48:51:88:fc:2f:21:bb:
                    9d:70:3e:d5:9c:f8:06:65:4a:40:23:bc:d7:6e:c1:
                    72:2a:af:c1:6f:29:52:5a:9d:44:b4:4e:f5:16:37:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:BE:F1:C8:CB:F6:BC:FE:6B:97:25:37:E1:03:79:5F:6B:39:37
            X509v3 Authority Key Identifier:
                keyid:0C:D6:D3:2D:92:9B:E9:79:6D:E5:5A:E0:E4:9D:7A:89:DF:DA:9F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CD6D32D929BE9796DE55AE0E49D7A89DFDA9FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/0/3230312e3138322e39382e302f32342d3234203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8d:06:66:d4:32:84:71:79:18:90:99:cd:e2:bf:12:02:a0:
         42:50:51:a6:ee:ba:4a:86:f1:78:a3:a9:07:f2:05:b7:75:e3:
         f5:4a:1a:04:43:b9:8a:7b:08:67:59:d1:1f:e3:00:0c:f1:d6:
         e9:06:71:af:27:7d:60:98:ad:17:63:59:ba:8f:ad:41:94:68:
         90:9b:c2:b5:17:15:20:8e:ee:65:13:63:e8:6e:5b:08:8b:26:
         2b:9b:ed:fc:e9:47:03:b2:75:f9:3e:3a:63:6e:e1:cc:97:2c:
         f8:a1:df:03:6b:dc:43:31:0d:ae:f5:a5:da:91:d6:78:87:cf:
         cc:a0:5f:94:b8:71:3a:98:f7:96:35:4c:4b:64:eb:6a:ee:3c:
         56:f6:3e:7b:2f:0e:65:11:aa:ee:9d:82:e7:f6:72:0c:36:73:
         45:36:3d:81:19:15:73:ad:ae:67:7f:5a:f9:42:df:ad:b6:a2:
         23:dd:1d:68:82:e7:51:16:d1:03:33:52:e4:52:35:d4:86:d0:
         3b:e2:8c:ee:9c:4b:d8:b9:09:7c:5d:3b:1a:87:4d:ab:b5:13:
         f1:77:a6:87:59:1b:96:e8:ac:df:ec:54:54:92:8c:73:25:dc:
         2d:a2:dc:ab:51:98:9b:f0:d5:10:f3:e4:48:93:69:37:63:42:
         c7:cf:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org