Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          QVf4/GVFiU/qW/NApvyKmGCb6jFtYleSRVPjVXNIjes=
Subject key identifier:   50:F4:94:40:EE:F1:D7:C3:6F:94:01:0A:35:9F:3E:6A:A9:65:D5:0C
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       5AC99BCDE25FE62CB9DB30B17EC234C4EC680DE6
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:32:00 +0000
ROA not before:           Wed 10 Jan 2024 17:27:00 +0000
ROA not after:            Wed 08 Jan 2025 17:32:00 +0000
asID:                     265303
IP address blocks:        201.87.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c9:9b:cd:e2:5f:e6:2c:b9:db:30:b1:7e:c2:34:c4:ec:68:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:27:00 2024 GMT
            Not After : Jan  8 17:32:00 2025 GMT
        Subject: CN=50F49440EEF1D7C36F94010A359F3E6AA965D50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:f4:16:97:83:8c:e0:a2:0a:70:98:06:af:
                    52:2b:cc:53:8c:7e:05:e0:93:f1:57:3c:9b:cf:1f:
                    a7:f1:ee:56:60:91:b9:75:28:4d:cb:f7:5a:6c:2d:
                    e4:40:df:bf:4f:eb:26:dd:3a:1d:62:bd:b9:75:cd:
                    c9:5e:6a:ea:7c:bd:d4:b3:58:64:3a:f0:92:85:6a:
                    67:42:08:24:74:46:e8:c4:b6:ab:a1:43:e0:5e:ac:
                    9c:9e:ba:2b:df:f6:ca:8a:97:55:89:8d:c5:f9:61:
                    37:77:00:3a:06:50:2b:27:e3:d0:7c:13:1b:94:fc:
                    35:30:11:1c:4d:40:9f:0d:f8:31:04:26:fc:d9:45:
                    7c:f1:37:db:0c:c4:4f:70:86:97:b2:e8:9d:82:92:
                    c1:71:be:0d:3f:8d:49:41:77:05:87:f5:23:43:f9:
                    86:83:66:e3:98:5f:b9:52:20:ad:23:23:4f:a3:77:
                    4d:cd:4c:53:2f:cd:25:ba:bd:4e:be:6f:7c:e6:c9:
                    db:59:4c:c8:9e:1c:9e:5c:8a:98:88:e1:9f:b2:64:
                    11:a0:c2:4b:fc:07:29:1d:16:8c:f6:be:6d:b1:42:
                    b0:47:29:4f:18:25:c9:de:bf:5a:cc:2f:21:d4:da:
                    2c:05:48:74:52:8a:99:1d:78:62:64:d2:9a:c7:55:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:94:40:EE:F1:D7:C3:6F:94:01:0A:35:9F:3E:6A:A9:65:D5:0C
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:63:88:77:28:2c:d9:c0:e5:32:0c:c7:da:7e:93:7e:cc:a8:
         cc:fa:b5:2f:7a:cd:b2:8c:83:1d:1a:cb:40:9c:a6:37:53:0a:
         f6:de:8e:af:5f:5e:0b:c7:11:15:7f:a7:ac:1d:9b:73:c1:cb:
         bc:99:66:be:08:e5:65:38:2c:15:ab:f2:75:59:fe:f0:1b:28:
         73:8b:e6:4a:ea:0d:33:1f:dc:7a:5b:d4:18:b0:d5:83:a8:77:
         29:62:df:16:67:9a:01:0a:66:49:ab:da:f4:21:c5:29:34:d0:
         a5:53:10:23:e8:ca:d7:94:cf:c8:a4:a9:44:8a:93:12:36:b0:
         9e:1a:32:b5:d8:fa:f9:c7:da:95:db:93:d7:aa:9c:04:bf:af:
         67:7b:01:8d:ab:ef:6f:dd:84:37:db:e0:70:c8:66:01:7d:18:
         c2:d4:a8:98:47:37:e8:60:d2:e8:fa:28:04:17:c0:19:ee:cc:
         27:0f:07:b8:f6:4d:aa:c0:ad:d2:98:8e:11:47:06:2e:bb:e5:
         82:e0:9e:8b:2f:53:90:9a:bc:39:09:eb:c3:a7:e9:0c:52:77:
         10:17:a2:a9:f0:bf:50:ee:39:f1:17:e5:ba:b1:d2:f3:7c:df:
         b6:da:28:e7:5f:7a:96:85:07:00:a8:93:2e:09:67:0d:b3:7c:
         b3:89:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org