Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/3230312e3138322e36302e302f32322d3232203d3e20323637353030.roa
File:                     3230312e3138322e36302e302f32322d3232203d3e20323637353030.roa (raw, json)
Hash identifier:          YT9pv9cdl8G8nUQ6uM/V6NjwZRG9OssTYmhglWEN4yw=
Subject key identifier:   A3:F6:EC:FE:31:0B:3C:06:BE:25:15:F6:D6:5E:42:4E:CC:95:8A:2D
Certificate issuer:       /CN=C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9
Certificate serial:       4757DF7719359A5442396F4E5C9AFE86AAB985D9
Authority key identifier: C8:D7:FF:44:E9:AC:6C:CF:68:C5:7A:2D:E1:74:8F:34:03:4D:33:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/3230312e3138322e36302e302f32322d3232203d3e20323637353030.roa
Signing time:             Sun 22 Jan 2023 06:59:30 +0000
ROA not before:           Sun 22 Jan 2023 06:54:30 +0000
ROA not after:            Sun 21 Jan 2024 06:59:30 +0000
asID:                     267500
IP address blocks:        201.182.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:df:77:19:35:9a:54:42:39:6f:4e:5c:9a:fe:86:aa:b9:85:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9
        Validity
            Not Before: Jan 22 06:54:30 2023 GMT
            Not After : Jan 21 06:59:30 2024 GMT
        Subject: CN=A3F6ECFE310B3C06BE2515F6D65E424ECC958A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6c:29:0d:5f:bc:9c:5c:a4:a9:fd:e7:09:7f:
                    58:c7:06:50:18:34:f3:00:c3:d1:e8:4c:43:a0:60:
                    e7:bb:0b:3d:7a:da:ad:46:ea:fb:e4:23:c9:b1:18:
                    06:50:6a:91:44:24:cd:fb:06:bd:99:12:30:08:fe:
                    7c:ff:30:68:2d:3b:bd:ed:e9:9a:95:bd:e2:51:82:
                    ef:3d:6b:d2:2b:29:64:2e:e8:9d:f5:02:70:56:e8:
                    2a:84:c3:7b:0b:55:32:6a:c2:1e:6b:4a:ce:59:7a:
                    62:1d:27:8b:64:6f:33:be:df:89:f7:f1:f8:4f:cd:
                    b5:4f:33:9a:69:99:0a:2b:e7:9a:71:0b:b8:27:b8:
                    b3:ea:a7:d8:a6:21:49:11:f0:e3:de:1c:05:45:ee:
                    97:48:fb:1d:6f:99:0c:1e:ed:ef:95:a5:0f:26:74:
                    5d:5f:3c:70:4e:1a:e9:5b:54:04:03:f2:db:67:1e:
                    db:8f:c7:79:ab:ad:e6:7a:de:08:67:46:df:a1:9a:
                    57:09:1a:52:34:1c:32:c9:0a:b3:48:ac:81:19:8a:
                    bb:9b:b3:43:b7:1c:33:6c:79:9a:58:c9:bd:eb:73:
                    8a:ef:30:4b:c9:3c:aa:da:8b:a8:86:d6:e7:3a:85:
                    1e:d5:a4:74:cd:b5:e0:c2:fd:79:0f:be:37:0b:60:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:EC:FE:31:0B:3C:06:BE:25:15:F6:D6:5E:42:4E:CC:95:8A:2D
            X509v3 Authority Key Identifier:
                keyid:C8:D7:FF:44:E9:AC:6C:CF:68:C5:7A:2D:E1:74:8F:34:03:4D:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C8D7FF44E9AC6CCF68C57A2DE1748F34034D33E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/3230312e3138322e36302e302f32322d3232203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:2d:48:4a:e7:15:13:90:c6:cb:14:72:8b:95:2a:e2:4e:1b:
         77:3a:63:8d:70:37:95:95:88:85:a7:d9:6d:3f:21:0d:87:15:
         61:ce:49:9d:5e:f8:28:13:80:55:57:32:46:ff:31:03:06:f3:
         18:e2:08:5e:bd:56:38:93:a2:19:e8:18:69:6c:54:31:2e:75:
         68:96:a2:3d:d6:20:0e:ba:d9:0d:6e:3c:0c:a5:fa:c2:11:47:
         ab:6a:68:fe:16:7c:9a:e8:e0:65:b1:cd:85:67:c7:41:a1:b8:
         6c:86:64:6e:00:a6:6c:94:08:08:4d:1d:4a:f0:cb:7a:5f:f6:
         5a:9b:37:a0:8a:39:9c:c4:b1:ea:e6:b7:c4:f5:42:5a:ce:5e:
         7c:bf:2a:2d:71:e3:36:95:79:9f:80:4a:f0:27:74:9a:bc:16:
         fa:92:f2:cf:16:67:48:7e:0a:d6:7c:ce:82:3c:38:c0:7a:7f:
         77:9c:7c:da:87:ef:91:71:c3:87:41:73:85:e0:8c:5e:92:d8:
         ff:41:bd:83:28:72:75:88:7b:04:eb:6b:27:a3:b7:9b:2a:d8:
         5c:89:80:d4:dd:0a:2a:50:c3:f9:32:27:22:56:bf:77:e5:61:
         f1:a1:93:7b:14:a5:17:de:c4:2f:f0:3e:b6:c0:91:13:c7:cb:
         2d:e6:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org