Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          OBmoPqw6KrjAUg5SzMqoKF4NivnUCtHYO6DfDGjx85o=
Subject key identifier:   4B:4A:17:CB:03:EE:49:22:99:32:3F:49:64:3B:29:0F:E1:F2:B4:4A
Certificate issuer:       /CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
Certificate serial:       76292D0B5933E610594D26F2A8F2707D6FA197A1
Authority key identifier: 44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa
Signing time:             Wed 10 Jan 2024 17:33:57 +0000
ROA not before:           Wed 10 Jan 2024 17:28:57 +0000
ROA not after:            Wed 08 Jan 2025 17:33:57 +0000
asID:                     265303
IP address blocks:        201.87.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:29:2d:0b:59:33:e6:10:59:4d:26:f2:a8:f2:70:7d:6f:a1:97:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443643415D4DCD4CD0DD4E411D1A261FF47A5BDE
        Validity
            Not Before: Jan 10 17:28:57 2024 GMT
            Not After : Jan  8 17:33:57 2025 GMT
        Subject: CN=4B4A17CB03EE492299323F49643B290FE1F2B44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:a6:00:8c:51:a0:b1:8e:4c:63:b6:03:f8:
                    43:d8:14:96:94:9e:4b:9e:94:dd:c3:3d:4c:ff:62:
                    be:e0:92:c0:3b:d2:ee:e8:a7:68:56:12:ee:4b:2c:
                    bf:f7:0e:30:55:35:94:89:26:cd:1c:71:23:f0:fc:
                    c6:67:54:29:3f:f1:7c:b3:03:0e:c8:2b:04:83:20:
                    10:eb:45:06:bb:04:6a:b8:95:22:b2:32:c2:36:81:
                    e6:05:16:61:67:7d:c1:91:f8:ae:8f:c2:be:f1:2c:
                    ec:c7:5d:11:ad:67:70:be:3d:be:66:c2:b9:e8:0e:
                    56:b9:79:2a:c6:d6:7c:e4:3c:06:5b:08:b9:f2:7c:
                    5a:f5:20:76:36:35:43:4e:7a:53:80:89:93:55:13:
                    cc:e9:54:91:cd:58:12:1f:8f:43:ff:de:e1:a2:5a:
                    1a:26:cb:89:b5:cf:3a:b6:1b:d0:b0:3e:0b:d0:59:
                    ed:4c:97:81:5c:f7:fa:e3:76:e0:34:f6:57:e6:25:
                    c0:4f:80:0c:f3:15:fe:c9:1a:e8:0b:80:76:8f:25:
                    5f:e2:6e:4c:3f:1f:0b:ef:e1:22:3e:8f:89:62:92:
                    c0:6a:e0:51:43:55:1c:65:df:77:be:a6:f9:21:dd:
                    23:98:6f:ad:8b:ec:f7:96:a1:0b:4a:24:e5:be:a5:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:17:CB:03:EE:49:22:99:32:3F:49:64:3B:29:0F:E1:F2:B4:4A
            X509v3 Authority Key Identifier:
                keyid:44:36:43:41:5D:4D:CD:4C:D0:DD:4E:41:1D:1A:26:1F:F4:7A:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443643415D4DCD4CD0DD4E411D1A261FF47A5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n7FvD3QxPLEXs8HpgWUupHqBhPVsJGKH8GEkRpVpt7X/0/3230312e38372e3134362e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:3d:96:47:8c:60:43:0d:59:ae:d5:e9:f3:ef:02:a4:bf:
         ad:09:cc:53:e3:7d:87:fe:0d:7f:bd:be:85:65:58:fa:0f:a7:
         b1:e9:22:7c:e2:31:c2:ab:37:d2:1c:1f:4a:a0:47:9b:22:f2:
         b1:ec:b5:f8:3a:ae:7b:0e:6e:c4:a9:49:20:6e:9a:ef:d5:f0:
         44:5b:b9:6d:c5:fc:7b:2c:a7:5a:3d:1e:b3:d5:67:68:0c:1d:
         0c:da:df:a6:53:0a:d8:a9:57:18:a4:ce:ce:0e:e8:d5:d0:a4:
         c1:20:b2:51:f5:d7:ac:8b:ec:56:c9:e1:d6:8b:2f:ea:1b:2f:
         31:bd:54:32:42:7b:9c:9e:24:83:86:d4:d7:82:56:8e:73:fb:
         5c:8f:d5:a9:ab:e6:98:8a:d9:86:b9:0c:66:56:98:9a:58:86:
         db:fb:f6:30:08:ca:69:8b:5e:01:61:78:ec:1e:5c:a4:b2:a7:
         09:80:8f:98:a7:4a:aa:f0:78:a3:8e:43:89:a5:47:d7:dd:04:
         46:e8:b6:35:ef:f5:8f:41:de:68:78:8c:a3:f1:06:49:74:ed:
         9c:0e:1c:dc:9f:0d:0c:41:07:70:93:9a:b6:a5:0b:87:4b:49:
         10:f1:18:5a:9e:2a:c3:41:1d:ca:f2:9b:55:4b:02:76:c9:e5:
         18:f4:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org