Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32342d3234203d3e20323730343937.roa
File:                     32342e3135322e3131362e302f32342d3234203d3e20323730343937.roa (raw, json)
Hash identifier:          +0SfyUZ/RoBqBQgJdSCED+C86HmEp/k8g6GiM7meqaI=
Subject key identifier:   D8:6A:65:CB:E8:F9:EA:D5:95:43:52:4F:CF:DF:82:73:35:8D:CF:8B
Certificate issuer:       /CN=1B48865C2ECB384BCBAAB41003FABA098EC1CFB8
Certificate serial:       33A0470351285450DA588E10A882468F813FB5FB
Authority key identifier: 1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32342d3234203d3e20323730343937.roa
Signing time:             Tue 29 Nov 2022 16:51:21 +0000
ROA not before:           Tue 29 Nov 2022 16:46:21 +0000
ROA not after:            Tue 28 Nov 2023 16:51:21 +0000
asID:                     270497
IP address blocks:        24.152.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a0:47:03:51:28:54:50:da:58:8e:10:a8:82:46:8f:81:3f:b5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B48865C2ECB384BCBAAB41003FABA098EC1CFB8
        Validity
            Not Before: Nov 29 16:46:21 2022 GMT
            Not After : Nov 28 16:51:21 2023 GMT
        Subject: CN=D86A65CBE8F9EAD59543524FCFDF8273358DCF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:42:b6:a3:18:9d:cb:50:60:b4:44:8f:33:
                    aa:19:97:08:0c:d6:76:61:59:1b:19:b1:de:99:dd:
                    4b:41:76:e5:fc:ae:b8:9c:ab:b4:98:b7:e9:c9:39:
                    da:3a:2a:22:3f:cd:43:38:b8:c7:db:dc:70:52:52:
                    5b:85:7f:57:97:87:25:1f:e6:01:84:eb:00:cf:f2:
                    3e:0b:3f:68:1a:dc:ef:ce:a7:46:1f:db:40:0b:16:
                    29:66:1e:f7:aa:14:0f:f2:61:c1:18:08:56:2d:1b:
                    73:db:8a:83:36:71:45:5e:46:81:f8:b9:1f:f6:01:
                    3d:b7:8b:5e:c1:2e:d7:b1:12:20:4f:d6:ad:df:54:
                    30:53:45:d0:3a:54:b8:17:7b:d1:10:12:b7:a8:07:
                    64:1f:fe:75:40:e0:c7:b0:76:77:2b:83:39:7d:78:
                    19:3d:6f:c8:77:f9:e3:b0:e9:f8:57:ba:ab:37:a5:
                    0d:44:38:8d:94:af:83:66:14:b8:e4:47:1f:45:e4:
                    31:01:f4:cf:8d:e3:30:71:76:6c:25:86:fe:44:7f:
                    ea:ab:9e:81:0f:1f:c7:57:b2:ba:72:1d:01:f8:36:
                    17:48:c8:03:41:82:75:1a:e6:26:e7:c8:09:63:3a:
                    96:35:6d:e9:45:c1:c8:22:21:e8:fc:2b:b2:74:74:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:65:CB:E8:F9:EA:D5:95:43:52:4F:CF:DF:82:73:35:8D:CF:8B
            X509v3 Authority Key Identifier:
                keyid:1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/32342e3135322e3131362e302f32342d3234203d3e20323730343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:96:3a:62:d8:f7:97:1a:ae:26:0e:48:8a:ab:0f:e4:c2:ec:
         db:73:4a:d2:58:9c:f9:b0:b7:f7:1b:d9:ba:3a:17:1b:ff:87:
         a2:da:f8:39:65:68:f1:b5:24:eb:06:c5:fe:d6:1a:95:3f:f5:
         28:a8:29:9e:cc:8b:41:f4:9a:56:0c:91:d4:dc:5d:36:07:ef:
         28:f3:c6:16:e3:ca:f3:ba:b1:35:eb:9f:cd:5d:77:c9:71:89:
         64:58:2b:f0:7a:e9:f8:50:00:f9:ec:ba:d5:89:e2:09:5d:ec:
         e3:f2:d6:f1:d9:9c:e1:53:66:b3:7b:ff:6e:0d:4c:6b:68:9b:
         01:a9:e3:57:c8:3b:2e:6e:a6:1c:1e:a4:6d:75:0a:87:80:1d:
         41:04:f8:6d:a5:fb:81:e9:e4:94:7a:69:9a:27:e6:ed:31:40:
         c9:00:75:8e:c0:29:15:59:b3:27:c3:f5:5c:dc:22:fa:ad:f2:
         91:8c:c6:1d:2e:05:a7:23:fa:45:20:26:34:e1:58:2c:7a:09:
         16:9f:84:b6:01:ba:23:a9:77:9c:2a:91:c2:36:b6:35:a1:9f:
         ca:aa:41:a5:62:f1:cf:ea:26:38:4e:db:4e:bf:cc:55:6e:d8:
         56:6b:76:89:01:0d:db:f6:50:ed:d3:37:a4:51:3f:8e:d8:03:
         db:ee:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org