Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa
File:                     3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          PdUaSSjvf30NenDxjWWWViLCTEVFj0b8l/PJHuBLKG0=
Subject key identifier:   AD:FB:CD:96:61:8C:3F:50:F8:A0:01:CC:55:63:7A:8C:21:8D:0F:CF
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       4A682964E40EF5586BB5B9462CEB3BB5D5CD6123
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:32:28 +0000
ROA not before:           Wed 10 Jan 2024 17:27:28 +0000
ROA not after:            Wed 08 Jan 2025 17:32:28 +0000
asID:                     265303
IP address blocks:        201.87.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:68:29:64:e4:0e:f5:58:6b:b5:b9:46:2c:eb:3b:b5:d5:cd:61:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:27:28 2024 GMT
            Not After : Jan  8 17:32:28 2025 GMT
        Subject: CN=ADFBCD96618C3F50F8A001CC55637A8C218D0FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:26:be:bc:05:5c:30:d5:8d:1e:f9:de:bd:
                    bd:51:7e:b9:dd:61:cd:5c:2d:cc:c3:6b:d7:83:cb:
                    d8:43:20:d2:4c:18:09:09:7e:5f:b4:98:13:e9:ff:
                    cb:8c:65:da:ca:79:f3:6d:39:f6:99:23:79:4a:44:
                    90:ec:af:ca:bf:d7:6b:a1:5e:28:f8:09:c9:dc:a8:
                    97:63:44:9e:27:3a:b4:9f:27:78:19:43:8c:41:57:
                    0a:f2:2d:ab:c4:7c:c0:0d:a9:f8:dd:fe:db:1c:43:
                    60:00:46:de:6b:ef:81:13:26:9c:80:e1:fa:a3:ba:
                    ac:06:d3:06:d7:c0:c2:98:6b:97:0a:b7:e5:e0:f9:
                    8c:fa:71:e2:c0:80:12:70:36:b3:9c:68:59:74:dc:
                    d4:d3:68:fe:e6:ce:ee:e8:f5:41:c6:82:af:a8:0b:
                    e5:30:27:78:1f:6a:cd:3e:d5:37:b1:b5:01:70:53:
                    f1:9b:4e:53:01:d5:b7:32:a3:65:4e:a2:03:44:af:
                    b9:90:88:38:8c:94:24:a8:93:d1:20:b9:3a:da:c3:
                    d5:bc:07:6e:01:bb:5a:7c:ee:77:b7:2c:22:1d:f3:
                    f7:a7:f3:6f:48:81:ac:e6:65:a9:20:9c:39:14:a5:
                    56:5b:ab:ee:7e:f2:77:d4:48:73:57:8b:57:5e:97:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:CD:96:61:8C:3F:50:F8:A0:01:CC:55:63:7A:8C:21:8D:0F:CF
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133312e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:1c:96:e5:6f:db:c3:8e:22:fd:25:3e:33:32:7c:c4:81:
         bf:a4:5f:f6:55:bc:69:c6:8a:a1:94:b1:76:45:6e:77:5a:33:
         00:c9:6a:15:7e:ae:a3:4d:80:7e:b1:45:b0:05:9c:6e:69:c5:
         46:a8:dd:34:db:37:97:4d:a4:96:ab:7c:b2:fb:a8:6b:7d:7e:
         17:2c:7f:a9:a6:88:56:a8:de:2d:7b:6b:a6:1e:f6:9d:35:bb:
         c7:27:9b:16:b3:06:74:f0:cb:bf:04:82:9d:ca:6a:09:9b:d4:
         23:c0:a1:0d:42:e9:be:35:80:43:f3:87:6a:be:fd:96:d1:ac:
         b3:7c:99:81:6c:5f:c9:58:90:06:c1:8c:40:e2:b0:25:1c:ee:
         5c:14:30:b1:ef:80:05:3b:a0:6d:79:7c:ff:51:ee:6a:0b:f7:
         a6:87:85:40:b4:07:43:9d:b7:69:93:04:73:61:0d:cd:0e:c3:
         32:6a:e6:9b:05:46:b0:d4:98:06:d0:4d:00:62:bb:85:b9:19:
         35:b0:6e:b8:30:8b:e0:8c:e2:c3:df:92:f4:03:4e:5f:bf:47:
         9f:a1:3f:08:d7:54:d6:9a:ee:b1:ab:1e:65:bc:f6:f9:dd:c1:
         87:e8:d6:c5:9c:de:f4:fa:5b:9b:45:37:77:50:53:a0:05:f5:
         d7:34:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org