Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          q7W4uoqFZXLNpiuizxJrsGZXpNmOYHwRjGIU/Pj9smg=
Subject key identifier:   9D:8C:9A:69:C0:62:EE:53:AA:C5:9C:F6:7E:EF:FE:17:5E:50:40:07
Certificate issuer:       /CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
Certificate serial:       36D85DC48B9D616E8170623429F1C6FC78EE6977
Authority key identifier: 4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa
Signing time:             Wed 13 Mar 2024 18:44:46 +0000
ROA not before:           Wed 13 Mar 2024 18:39:46 +0000
ROA not after:            Wed 12 Mar 2025 18:44:46 +0000
asID:                     262792
IP address blocks:        201.76.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d8:5d:c4:8b:9d:61:6e:81:70:62:34:29:f1:c6:fc:78:ee:69:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Validity
            Not Before: Mar 13 18:39:46 2024 GMT
            Not After : Mar 12 18:44:46 2025 GMT
        Subject: CN=9D8C9A69C062EE53AAC59CF67EEFFE175E504007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:87:fe:91:93:bb:71:5e:53:c2:6a:33:b9:
                    fe:65:38:6c:69:d1:7a:08:f4:b8:9e:e8:70:00:6a:
                    e7:e2:90:3f:46:a2:81:01:5f:c9:c3:d6:ff:bd:09:
                    b8:b6:88:5d:25:37:cd:77:9e:60:f8:c3:56:b7:79:
                    07:75:a8:55:85:7f:8d:ed:b0:4b:2b:34:97:03:cd:
                    d8:54:f1:f7:9e:ae:f1:c7:5a:d3:3c:0b:c2:14:f8:
                    50:67:c3:7e:83:c4:ac:8e:ae:a5:71:fe:45:4b:58:
                    f3:12:d0:03:54:5f:22:30:bd:53:7f:c8:5f:c2:d4:
                    94:e6:2a:cf:e3:08:a5:53:c8:bb:e5:c5:1b:b5:ff:
                    f6:4e:66:da:a4:ab:20:40:9d:3e:4f:4c:21:c2:fa:
                    ae:c0:da:c3:95:d2:59:f1:e5:1c:9e:17:a0:7c:03:
                    2c:c9:bc:70:14:14:7a:a4:6b:63:00:61:17:ca:ce:
                    7a:b2:64:53:5c:0f:d4:a1:4e:55:e3:d8:75:39:bd:
                    34:c7:bf:c8:51:d9:b3:74:bc:e0:b5:5d:22:a9:71:
                    7e:c3:18:49:1c:57:b1:19:94:e6:bf:06:91:73:24:
                    e6:4a:37:e6:05:62:eb:9f:f9:f2:16:5e:f6:88:50:
                    5a:02:47:3f:fc:fe:ec:5e:ce:f8:17:37:45:01:74:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8C:9A:69:C0:62:EE:53:AA:C5:9C:F6:7E:EF:FE:17:5E:50:40:07
            X509v3 Authority Key Identifier:
                keyid:4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130302e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:ac:00:d2:50:61:f0:71:df:ee:63:36:0c:35:ab:98:ab:
         55:57:63:84:5e:83:09:c6:73:36:86:6f:cb:9d:65:f4:0c:d9:
         e3:df:ef:22:aa:3f:f3:12:a4:e2:7c:59:36:78:82:ef:26:fe:
         4c:11:ad:71:60:25:a9:38:b5:21:79:7e:97:8f:4c:6b:f9:fb:
         dc:3d:79:9c:0f:8d:d4:cb:15:8e:c1:48:f7:32:a7:99:09:98:
         cf:b0:73:e3:ef:84:ac:f3:73:b0:25:ae:f0:0f:f5:a0:66:42:
         39:77:14:78:ac:0c:91:de:07:3b:51:8d:41:2e:04:bb:de:e5:
         b2:a7:6a:7e:af:30:4f:d5:a0:7a:ac:73:c3:15:d4:c6:b4:88:
         75:b2:24:ed:88:b6:2b:b3:42:22:fb:3d:9b:6b:b8:36:30:4c:
         1a:9e:69:8d:45:05:17:2e:65:71:c2:61:67:1e:35:99:c7:7d:
         d9:23:c7:9f:b2:36:31:53:e8:00:31:c8:67:02:ca:16:1c:9e:
         89:47:45:c7:9c:b3:ae:4c:a6:00:f5:c6:5b:87:d2:01:fa:47:
         bf:5e:26:30:c3:25:75:9d:80:18:f5:8b:e6:09:79:19:40:81:
         5b:dd:c7:e0:32:a2:b5:18:b2:f4:a3:01:46:c8:b8:cf:ae:09:
         4a:e9:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org