Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3232203d3e20323730373831.roa
File:                     3230312e3134382e3131322e302f32322d3232203d3e20323730373831.roa (raw, json)
Hash identifier:          6L7p/Q9RrLP7mP5miKQlWHsytBFJg0UNuKWnrzUMBuU=
Subject key identifier:   83:EA:7A:F4:2E:BD:F9:13:F7:74:EC:3A:7E:3E:6E:14:EC:E2:F8:4D
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       22C1C02FD2AD36CCB32A3FDC4C3DFDA85872F59E
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3232203d3e20323730373831.roa
Signing time:             Thu 23 Mar 2023 12:28:38 +0000
ROA not before:           Thu 23 Mar 2023 12:23:38 +0000
ROA not after:            Thu 21 Mar 2024 12:28:38 +0000
asID:                     270781
IP address blocks:        201.148.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c1:c0:2f:d2:ad:36:cc:b3:2a:3f:dc:4c:3d:fd:a8:58:72:f5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 12:23:38 2023 GMT
            Not After : Mar 21 12:28:38 2024 GMT
        Subject: CN=83EA7AF42EBDF913F774EC3A7E3E6E14ECE2F84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:c4:cd:bb:52:e7:92:e5:0a:0f:90:ff:da:
                    1c:d5:71:22:e5:78:e6:4d:73:29:96:8b:e5:6d:0a:
                    a1:ab:8f:02:c3:09:85:70:be:69:a8:3f:d7:77:5e:
                    c4:aa:14:1b:59:cb:20:1e:86:d0:f0:b2:12:cb:41:
                    8e:7b:06:f6:ea:62:bc:db:7f:46:c2:6d:47:e3:f3:
                    94:92:9e:70:62:c2:59:06:d6:1e:a9:2f:be:e9:81:
                    d0:14:0f:0d:45:90:8f:22:55:67:45:61:1b:b0:50:
                    8f:d4:a2:df:44:1b:16:0b:17:44:64:e0:b6:2a:ad:
                    62:54:f2:10:d6:8b:67:d1:fc:47:1f:74:49:1e:73:
                    f2:2e:ff:b7:6c:da:d4:e8:b1:83:41:b5:a4:5e:8e:
                    02:e4:ae:f6:45:ba:70:bc:cd:64:f8:30:c4:3c:7b:
                    a0:b4:a6:c4:62:d3:37:7e:79:ab:fe:95:ec:0b:8d:
                    27:c5:35:43:20:ac:3f:72:f2:8e:a2:50:47:2a:c1:
                    d7:97:19:b5:b8:5c:92:3b:60:3b:12:bb:77:5e:da:
                    62:45:f6:df:0e:4a:80:7d:65:b3:03:7a:7e:f4:d5:
                    e7:30:38:c0:77:dc:a3:66:34:03:f9:83:6f:8b:dd:
                    3b:42:34:f5:f3:61:f2:bd:db:36:cb:a2:d1:60:cd:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EA:7A:F4:2E:BD:F9:13:F7:74:EC:3A:7E:3E:6E:14:EC:E2:F8:4D
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3230312e3134382e3131322e302f32322d3232203d3e20323730373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:af:34:23:8b:a1:03:f8:04:5f:ac:ae:45:39:3b:29:93:
         3c:4b:3c:82:16:3d:8a:54:3c:3d:c2:1d:87:e2:ce:73:bf:6a:
         de:1e:3f:a2:6d:ee:12:b2:96:84:59:27:6b:bf:2e:b7:0f:e2:
         11:65:bc:1d:7b:ff:70:9f:99:0e:0a:f2:62:aa:73:d1:54:90:
         75:e6:5d:3b:ee:2a:13:67:5e:5d:0b:b5:e1:44:37:78:ff:fc:
         7e:4a:e3:7e:34:2c:4a:f4:30:5f:ae:3c:20:c9:82:d1:d8:0a:
         ca:28:86:6f:5c:80:40:6e:b2:25:41:b5:76:83:89:68:85:0e:
         48:25:d9:ec:4d:94:d7:d7:83:9f:2d:3f:83:a2:03:26:46:20:
         85:5f:cd:f0:c0:26:7b:86:5f:f7:01:d7:28:6e:6d:ad:ed:5b:
         1f:90:ef:a5:80:ae:63:91:9b:15:01:3e:29:41:39:32:06:52:
         da:51:c4:39:d3:5d:1b:00:6e:a8:c8:b8:86:6b:d7:c2:b2:74:
         8a:99:4b:d2:63:79:56:6f:06:fa:18:34:d1:01:3d:8e:46:dd:
         35:85:8a:c9:41:82:d0:ba:a2:d7:69:c0:b8:4b:af:a1:41:1b:
         a0:d5:5b:9d:d7:25:b8:bf:7b:1f:db:ee:44:a7:9f:46:56:78:
         ff:fd:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org