Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          oJ4WRhJU5zRFThB2Tm6AKgrXVU23IaULySECpy6eCEI=
Subject key identifier:   C4:80:1F:8F:FB:2E:CC:3F:1E:64:E5:99:08:2A:27:F6:AA:D3:AB:F7
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       0637BAA0FCFC5CDA2E31A1CAB92958F44ED1253C
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:31:45 +0000
ROA not before:           Wed 10 Jan 2024 17:26:45 +0000
ROA not after:            Wed 08 Jan 2025 17:31:45 +0000
asID:                     265303
IP address blocks:        201.87.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:37:ba:a0:fc:fc:5c:da:2e:31:a1:ca:b9:29:58:f4:4e:d1:25:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:26:45 2024 GMT
            Not After : Jan  8 17:31:45 2025 GMT
        Subject: CN=C4801F8FFB2ECC3F1E64E599082A27F6AAD3ABF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:0c:84:7b:93:7b:58:d4:0d:0a:bd:57:4c:
                    7b:35:31:64:03:a9:66:9c:45:21:e6:84:a3:c9:2f:
                    3b:ab:89:38:0b:89:cd:70:9b:b5:fa:47:ab:0d:f4:
                    09:d5:6c:34:bc:63:20:ec:bd:d2:c0:a4:ea:3f:e1:
                    c2:c9:64:15:92:19:27:4d:af:00:77:ec:a7:57:10:
                    19:7e:a7:0b:00:88:fd:45:ce:79:1e:c8:c8:c5:6b:
                    ac:24:bf:d5:3b:19:d8:fd:cb:fc:44:60:e0:03:2d:
                    94:63:be:c5:b7:d8:b7:63:09:a6:07:ff:ae:9e:0f:
                    6d:8a:ca:51:d9:b8:f4:7c:f4:ad:d7:d2:65:75:44:
                    db:05:c3:51:48:4d:26:b4:13:2a:56:4b:07:e5:c8:
                    27:e6:06:2e:25:56:f8:28:33:58:0e:34:b9:1d:18:
                    eb:48:7b:15:24:50:c1:03:33:15:9e:70:b3:5c:bc:
                    cd:da:00:77:47:ed:f5:c7:ce:ca:f7:6c:00:52:a1:
                    98:b0:a4:6a:de:80:81:95:b0:42:77:94:c3:cc:d8:
                    0c:c7:ec:dc:b8:04:e4:ef:8a:1f:03:59:66:4b:2d:
                    59:c6:b3:a5:56:a0:67:e6:35:25:b9:02:ca:f7:ad:
                    72:75:43:63:b5:6e:36:66:b5:0d:cb:73:06:4e:0c:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:80:1F:8F:FB:2E:CC:3F:1E:64:E5:99:08:2A:27:F6:AA:D3:AB:F7
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3133362e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:ed:79:70:59:ef:21:64:2d:a2:da:49:53:e9:9f:f8:29:
         e4:bc:d5:24:c3:ae:de:19:7e:a7:29:14:68:f0:34:e4:d8:a6:
         32:b9:58:e6:39:e4:1f:d7:2e:71:1f:bf:ac:0e:58:a3:16:a8:
         ce:28:b0:6f:4a:71:28:51:45:ce:7a:17:ed:3d:be:26:cf:31:
         d4:0f:9a:cc:6b:24:72:6d:17:f6:c4:08:e0:cd:0e:fa:8a:53:
         a9:42:63:d4:7e:fd:aa:26:b8:32:6a:04:0e:63:32:65:4a:23:
         02:1b:a3:12:c9:6c:10:c0:04:19:ad:7f:81:51:0f:15:65:ac:
         eb:ed:3c:6d:cf:3c:03:4e:d0:7c:67:aa:ae:96:ca:8f:ee:7b:
         a4:e1:6e:cd:43:bc:1d:47:6e:a4:a4:60:b7:4d:23:15:32:87:
         ec:a2:1d:2f:47:34:a2:6f:51:85:2d:68:89:26:f6:42:7f:44:
         cd:68:4f:1a:18:cc:65:70:38:bd:99:93:50:f9:81:d5:cd:e9:
         b0:41:e8:9f:ac:ad:fe:02:f7:c5:6a:9b:1f:7d:83:5a:31:a9:
         97:78:9f:60:16:b0:d7:4d:1d:de:36:68:06:a8:9c:61:30:a4:
         ae:b8:59:d2:b5:e4:fc:61:8d:b2:4b:45:f6:91:53:6f:30:bb:
         b4:51:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org