Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32312d3231203d3e20323632373932.roa (raw, json)
Hash identifier:          idDamLjUVpJ9iFgEcz7BKYsGcp2IgkjyWZkX0MjeZSM=
Subject key identifier:   4D:BF:90:06:6C:DC:39:FA:7D:53:20:48:83:61:58:81:5F:9F:4A:05
Certificate issuer:       /CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
Certificate serial:       728D1B3E3188068962951C349A2D9A94D4EF4254
Authority key identifier: 4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
Signing time:             Wed 13 Mar 2024 18:44:46 +0000
ROA not before:           Wed 13 Mar 2024 18:39:46 +0000
ROA not after:            Wed 12 Mar 2025 18:44:46 +0000
asID:                     262792
IP address blocks:        201.76.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8d:1b:3e:31:88:06:89:62:95:1c:34:9a:2d:9a:94:d4:ef:42:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFA8C2A990E221C38D68568DF93251E9944A97D
        Validity
            Not Before: Mar 13 18:39:46 2024 GMT
            Not After : Mar 12 18:44:46 2025 GMT
        Subject: CN=4DBF90066CDC39FA7D532048836158815F9F4A05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:e9:aa:12:c0:bc:79:12:4e:8b:1f:1b:b2:
                    b9:83:5c:20:d0:68:75:d1:fd:bb:ee:37:da:87:9e:
                    37:6e:49:2b:b8:8c:94:e6:9d:f4:4e:77:4c:df:4c:
                    46:b2:00:ae:21:28:f8:ab:c1:ea:38:24:ec:24:99:
                    95:84:f9:ba:01:e4:22:da:d0:bb:da:6f:99:16:95:
                    95:da:d8:0a:5d:f9:7b:15:da:f0:79:9f:45:47:a7:
                    38:dc:c3:c8:6c:05:e1:a7:9f:e4:22:fb:a1:fd:85:
                    d0:83:9a:61:fe:24:36:16:00:15:24:91:fa:f2:38:
                    27:20:d9:91:9b:78:74:33:a2:c7:ca:10:5a:2a:35:
                    7e:67:25:43:6f:66:29:ac:36:33:b6:68:15:c9:3d:
                    07:76:4d:d4:7d:90:a6:cc:bf:06:69:aa:20:bb:1f:
                    d7:8c:d9:9c:1c:c8:60:82:74:24:3b:63:6d:af:11:
                    33:2c:ac:b3:7b:bd:17:6f:ee:04:52:69:10:35:b5:
                    5d:8d:85:60:4b:bb:5e:8b:4c:b4:34:91:48:6b:8c:
                    b0:26:b6:57:7c:e1:6c:8c:50:48:17:62:1d:57:b5:
                    5a:b1:57:66:04:52:1e:30:bf:77:a1:6d:ec:2b:a2:
                    bc:f0:72:7a:05:67:4b:9d:6c:84:d8:36:96:57:7f:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:90:06:6C:DC:39:FA:7D:53:20:48:83:61:58:81:5F:9F:4A:05
            X509v3 Authority Key Identifier:
                keyid:4B:FA:8C:2A:99:0E:22:1C:38:D6:85:68:DF:93:25:1E:99:44:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BFA8C2A990E221C38D68568DF93251E9944A97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/0/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:47:f9:9b:f7:0b:5f:0d:e6:e9:df:cb:4b:f1:ae:19:80:
         ec:cb:1b:03:98:3e:7c:24:0f:c9:fc:76:f2:17:81:10:0f:db:
         57:b7:44:bf:bf:25:2f:0a:9d:3f:05:8e:e9:96:69:ae:27:c2:
         66:55:ff:04:45:a3:1c:8f:ff:4e:89:6c:c0:31:5b:c2:3d:70:
         9c:6f:ec:32:26:b5:69:ec:36:f9:bf:9d:9c:2a:3b:e6:fd:b6:
         e9:d2:56:20:09:2a:9e:c6:10:46:f0:0a:41:c9:38:6e:56:c4:
         73:34:58:60:fe:e0:15:26:04:64:f3:9e:03:ba:24:e4:15:57:
         ed:d5:57:c1:19:ea:d8:6e:72:c0:74:90:91:74:8f:55:fe:c1:
         13:4e:bd:ba:a0:ee:6a:7e:b0:8f:f5:41:14:43:d2:7d:15:cb:
         3c:7e:08:dc:41:c3:b5:57:b1:fa:46:65:e3:c5:00:48:d2:02:
         65:a7:07:5d:db:96:57:66:95:1e:85:05:6a:e7:9a:fd:9d:d7:
         25:d6:da:3a:6c:00:ac:a6:89:19:87:ef:bd:fe:0a:60:dd:64:
         2f:bb:ce:ea:eb:c9:b1:c1:d9:65:b2:ab:3f:1f:14:84:bd:07:
         31:26:7c:20:7a:26:ff:79:e8:a6:f3:c3:69:73:b4:e0:c7:79:
         43:28:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org