Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa
File:                     3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (raw, json)
Hash identifier:          hENjpVB35QILUoPxNME73+CgKyG0hBQZf+xPnwnL008=
Subject key identifier:   93:C3:08:6E:21:BF:0D:42:5F:64:37:F5:0B:AC:D6:80:C0:C5:21:53
Certificate issuer:       /CN=35248CB09B693D23CFD3F80C290CB26E21F1B5BB
Certificate serial:       03CF60A3DFD6E2959FB73F52C3DA49E29D010339
Authority key identifier: 35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa
Signing time:             Tue 19 Mar 2024 20:46:24 +0000
ROA not before:           Tue 19 Mar 2024 20:41:24 +0000
ROA not after:            Tue 18 Mar 2025 20:46:24 +0000
asID:                     270304
IP address blocks:        201.216.124.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cf:60:a3:df:d6:e2:95:9f:b7:3f:52:c3:da:49:e2:9d:01:03:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35248CB09B693D23CFD3F80C290CB26E21F1B5BB
        Validity
            Not Before: Mar 19 20:41:24 2024 GMT
            Not After : Mar 18 20:46:24 2025 GMT
        Subject: CN=93C3086E21BF0D425F6437F50BACD680C0C52153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:7c:b3:aa:90:d8:6a:52:fa:ab:f4:b2:95:
                    71:d3:83:54:85:0b:b8:2e:e1:78:97:c2:cb:7d:a1:
                    de:c9:87:b3:29:0a:f7:77:da:2e:a0:fc:6f:07:c1:
                    8d:9d:53:23:06:18:12:b7:05:3d:34:59:e6:ea:22:
                    a4:dc:6c:db:e7:f7:d1:97:c7:ed:55:cc:ef:68:02:
                    12:a9:c8:7d:bb:2a:c3:32:3e:d1:b5:00:b8:1c:af:
                    6a:aa:7e:cb:79:af:12:2e:ad:79:62:a8:a6:bc:99:
                    51:56:23:9a:8b:95:4e:35:56:58:14:94:41:b0:fe:
                    a7:e3:f3:b5:fe:3b:e0:00:ae:62:63:d4:ad:6b:73:
                    f1:18:1f:c2:33:89:43:3b:1b:dd:83:6a:f8:62:1e:
                    44:f8:65:fb:61:80:45:29:71:63:80:f3:8e:5c:a8:
                    ec:d8:3b:78:b0:d3:94:69:cc:3a:68:dc:93:b5:bd:
                    79:20:b0:9e:79:77:3d:8c:4e:66:94:0c:c5:b8:8a:
                    f9:2f:80:69:9e:2d:50:8e:bb:4b:55:95:3a:31:2c:
                    b8:c6:b1:1d:5e:b1:54:18:f0:cd:1d:d7:0e:df:9a:
                    49:17:1c:eb:f1:f1:03:ee:6d:be:1f:18:6d:63:48:
                    05:c0:90:ce:f5:c8:f0:57:ac:83:52:36:1f:aa:7d:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C3:08:6E:21:BF:0D:42:5F:64:37:F5:0B:AC:D6:80:C0:C5:21:53
            X509v3 Authority Key Identifier:
                keyid:35:24:8C:B0:9B:69:3D:23:CF:D3:F8:0C:29:0C:B2:6E:21:F1:B5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35248CB09B693D23CFD3F80C290CB26E21F1B5BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/0/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:14:d5:28:29:a9:3d:69:bc:e4:f7:d0:46:4d:f5:56:b4:69:
         7e:49:dc:0a:db:ee:b7:38:d4:b6:fb:ce:ad:84:1c:76:21:d0:
         b1:20:39:39:24:1b:fb:07:b4:4a:29:e7:da:93:f7:30:15:06:
         5e:b0:ef:bc:76:15:87:9e:2e:70:2a:ff:c0:f8:fd:f5:92:59:
         de:f0:90:fd:d6:26:36:52:20:a1:4a:53:10:78:44:9f:e9:87:
         06:6d:db:07:fd:ac:3a:af:d3:e1:15:73:43:5f:39:18:a0:76:
         cf:37:af:0e:8c:24:86:9d:97:ab:a2:85:1b:76:7e:14:12:c6:
         54:bf:83:62:ac:bc:00:7b:55:38:94:04:9d:85:ee:80:d4:fb:
         ef:2b:70:a1:08:64:2b:eb:97:aa:c5:6c:08:a6:97:e4:db:da:
         2f:57:56:64:f7:e5:09:3c:ce:34:ba:20:80:a8:1f:78:c0:64:
         43:f6:06:c9:f9:a3:ec:36:6c:63:74:8f:d4:02:64:bd:1b:07:
         c8:ac:59:ed:c8:e3:98:72:a1:ac:61:e6:0b:5d:19:8a:13:46:
         54:80:46:3a:01:a3:9a:d1:77:3a:88:3c:71:6c:2c:15:a8:3a:
         1d:07:7f:22:f3:9b:85:0c:57:d5:e6:6c:5c:91:9c:d1:56:90:
         68:55:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org