Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
File:                     3230312e3134382e39362e302f32322d3234203d3e203631383534.roa (raw, json)
Hash identifier:          jok5C/2GpxopDuvnZuGnbRxLDbFGaJ6QVrag13+fgWs=
Subject key identifier:   81:F7:5B:71:32:AC:82:DE:3E:0A:6D:9D:21:32:F6:9D:EE:D7:A9:CC
Certificate issuer:       /CN=451805E8E03286DA29D9A0EE5CF7CCEED91FA6C4
Certificate serial:       6B2D03B1015F5C5421748C995A5B578A03B3F3B0
Authority key identifier: 45:18:05:E8:E0:32:86:DA:29:D9:A0:EE:5C:F7:CC:EE:D9:1F:A6:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451805E8E03286DA29D9A0EE5CF7CCEED91FA6C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa
Signing time:             Thu 11 May 2023 20:00:50 +0000
ROA not before:           Thu 11 May 2023 19:55:50 +0000
ROA not after:            Thu 09 May 2024 20:00:50 +0000
asID:                     61854
IP address blocks:        201.148.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2d:03:b1:01:5f:5c:54:21:74:8c:99:5a:5b:57:8a:03:b3:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451805E8E03286DA29D9A0EE5CF7CCEED91FA6C4
        Validity
            Not Before: May 11 19:55:50 2023 GMT
            Not After : May  9 20:00:50 2024 GMT
        Subject: CN=81F75B7132AC82DE3E0A6D9D2132F69DEED7A9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:01:c5:c6:a8:fb:74:a5:d5:74:51:78:a2:
                    fc:79:eb:73:78:fc:b5:f3:c3:23:e9:bd:e0:76:ae:
                    fe:3a:19:84:49:00:98:c1:72:cd:42:fa:b9:45:0e:
                    0f:25:0c:b5:86:ce:1c:d0:b3:e3:5c:eb:78:9d:09:
                    f7:a9:bc:13:73:fe:a1:9e:b0:f6:cb:13:57:63:5e:
                    c2:ca:24:79:0b:c8:68:7b:9d:f4:40:51:da:4b:61:
                    4c:6d:75:57:85:a4:35:40:47:df:34:c0:7a:bf:d8:
                    4e:ac:9b:14:7b:7a:a2:9b:e5:cb:89:78:7a:c4:f6:
                    10:41:a3:05:a9:27:13:22:fe:55:7f:c0:73:17:ce:
                    cb:ad:d3:1f:2b:72:74:a2:6a:ba:9f:ea:a6:bb:2c:
                    5d:87:a8:99:31:57:80:8e:9c:01:26:c2:17:bc:59:
                    3c:52:c1:f7:39:cc:72:f0:59:2d:0c:f6:47:56:2c:
                    2c:d4:2a:9a:58:1d:69:1d:47:13:92:2d:ca:97:0a:
                    04:f4:2b:8c:b9:19:ad:c4:de:2c:cf:cd:8d:44:66:
                    c6:a4:16:6e:41:71:62:44:8e:3f:50:8e:f3:48:12:
                    6b:3e:58:d7:49:b0:2a:8b:b0:7e:83:b5:56:68:49:
                    c0:d8:1c:4e:ae:f1:3b:88:90:d7:db:fd:32:f8:42:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:5B:71:32:AC:82:DE:3E:0A:6D:9D:21:32:F6:9D:EE:D7:A9:CC
            X509v3 Authority Key Identifier:
                keyid:45:18:05:E8:E0:32:86:DA:29:D9:A0:EE:5C:F7:CC:EE:D9:1F:A6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/451805E8E03286DA29D9A0EE5CF7CCEED91FA6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/451805E8E03286DA29D9A0EE5CF7CCEED91FA6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/3230312e3134382e39362e302f32322d3234203d3e203631383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:22:19:3a:be:7f:68:8b:b7:f9:5e:8c:56:07:35:35:17:ab:
         f0:7d:2d:ec:c0:fc:31:cb:0c:a4:38:5e:27:38:0d:19:cb:2f:
         ff:52:10:72:11:ff:83:e4:88:57:10:00:6d:76:d7:8a:ad:ed:
         2c:18:a2:42:83:1a:60:41:ce:b8:cb:62:ef:f5:63:66:de:16:
         cf:58:ca:0e:00:4b:fa:1c:8d:e7:e7:42:47:5c:8a:7f:45:48:
         45:8b:1d:30:a2:11:7f:a6:0b:53:5d:09:12:02:24:cf:ac:c2:
         f0:60:5e:b4:8a:0c:a7:7c:4e:47:a7:d8:21:8e:a8:3b:58:0e:
         f9:12:72:06:82:70:15:59:88:e6:df:5e:d0:ea:42:e3:2f:9a:
         5f:1e:f5:29:67:a2:f0:6b:5c:a6:e4:b5:33:ee:72:3c:3b:23:
         eb:08:a1:8d:ba:65:ed:df:e1:a5:d8:fa:8f:0e:78:b5:5c:cf:
         37:1e:3a:dc:2b:15:0c:14:19:4b:f6:4a:52:5b:49:6d:cd:2f:
         69:1a:3b:6e:9e:0a:1d:fe:5c:e8:21:54:00:b3:cb:59:cf:3f:
         e8:f2:73:4d:9b:0d:4d:e0:33:ca:2c:66:7b:f4:b2:c9:1b:d9:
         21:ed:60:11:f8:79:e2:ca:8a:9d:2d:e5:75:df:ad:db:35:df:
         85:a6:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org