Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          qFRMAQf+eybxGB4J4goOdBxFnLS/RlP0geqjaYbpwbs=
Subject key identifier:   D0:AE:1A:8F:CE:2E:82:C6:DD:65:BB:98:D5:47:91:79:DA:21:AD:D1
Certificate issuer:       /CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
Certificate serial:       3779191284AF2DFF02291DA1E37A4B3188E9FE53
Authority key identifier: 4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa
Signing time:             Wed 13 Mar 2024 18:44:46 +0000
ROA not before:           Wed 13 Mar 2024 18:39:46 +0000
ROA not after:            Wed 12 Mar 2025 18:44:46 +0000
asID:                     262792
IP address blocks:        201.76.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:79:19:12:84:af:2d:ff:02:29:1d:a1:e3:7a:4b:31:88:e9:fe:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Validity
            Not Before: Mar 13 18:39:46 2024 GMT
            Not After : Mar 12 18:44:46 2025 GMT
        Subject: CN=D0AE1A8FCE2E82C6DD65BB98D5479179DA21ADD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:9e:6d:66:e6:63:9d:84:7d:58:d1:fa:d0:
                    a0:39:f7:a5:67:90:af:4e:0a:db:e0:ff:95:87:ac:
                    d0:ee:74:6c:b3:a8:87:0d:dd:d2:1b:dd:e1:53:f9:
                    85:20:3d:52:12:cd:87:19:88:84:0a:f0:31:b5:01:
                    76:98:0f:72:15:18:36:27:67:87:37:b1:15:8e:73:
                    a8:a5:2d:1c:56:24:40:4e:f0:f2:c3:c6:a0:2b:9c:
                    99:c9:07:3c:c0:51:55:bf:44:ab:9b:11:a0:6d:17:
                    47:22:ba:c8:64:ae:9f:19:97:c7:53:13:86:c3:d3:
                    9f:35:59:12:7e:92:46:38:db:30:93:e1:7d:22:03:
                    f7:69:c9:a5:5f:0e:0b:b9:32:64:c5:68:0b:b6:2b:
                    7a:43:b0:c9:4e:f6:2f:df:91:8f:61:86:83:52:a3:
                    2a:f9:41:d6:1c:07:8f:09:cd:bd:05:35:27:c8:a7:
                    b9:b1:4f:cf:53:1a:8c:c5:b5:28:ca:eb:69:38:ae:
                    b6:48:72:b3:3f:cb:4f:76:c7:d8:db:8a:c0:1a:99:
                    d9:76:d6:f2:bb:94:de:26:be:d4:20:70:ea:3f:d9:
                    10:bc:0e:29:18:25:ec:58:8a:30:e0:59:f4:1a:36:
                    39:09:44:56:74:16:b9:3c:a3:9a:65:7b:5c:8e:13:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:1A:8F:CE:2E:82:C6:DD:65:BB:98:D5:47:91:79:DA:21:AD:D1
            X509v3 Authority Key Identifier:
                keyid:4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e3130382e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:4c:f6:c3:39:76:05:1e:6d:4e:88:90:9a:13:29:16:e3:
         27:8f:b6:ec:86:60:65:0c:73:ee:c0:37:c7:01:17:5e:e5:ed:
         4a:70:63:8a:08:01:4b:5f:6d:7b:e3:38:05:52:f8:52:6a:df:
         a9:68:50:2f:31:a2:b0:bf:11:1b:4d:28:95:b5:15:97:02:a8:
         bc:95:ec:23:92:f2:00:07:49:a7:9d:b1:ec:5c:b5:04:31:89:
         1a:f7:3e:a4:80:47:b0:87:69:35:7e:e0:a4:c9:a7:8e:4d:ff:
         a2:8f:2c:05:c4:71:a7:fe:eb:a0:2d:94:3e:ec:55:6c:d0:9c:
         02:a8:cd:3c:29:38:21:e5:37:77:43:cc:28:a3:3c:19:d4:d0:
         f6:eb:b0:2b:62:ff:cd:f9:54:b0:7a:20:36:58:e5:06:d8:db:
         fb:87:04:02:e7:e8:d1:65:1a:a4:af:b4:3e:fc:12:e3:d7:7b:
         d0:b2:e4:56:29:05:a3:e7:d2:48:6e:bd:56:6c:cb:70:9e:73:
         79:9a:43:c8:a2:73:65:c5:c8:b8:bf:f1:b3:6c:8a:bd:66:27:
         4a:3c:25:fe:f0:a6:b9:d9:43:f4:80:ba:d9:02:3b:b7:bc:23:
         61:f4:2a:a6:4a:dc:e7:42:79:bf:8f:a9:98:8a:94:21:bd:ce:
         d0:0b:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org