Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          PdZ93WxAG0RdyUzsLTfpC1gbyuFTGqQXbFzUxhNoeB4=
Subject key identifier:   E8:E5:BD:14:7A:E9:A0:BA:18:08:E1:3A:BE:2B:93:D5:23:15:3F:82
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       46CBAF626E098DCE087285D075DBF5122A36A0F9
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:09 +0000
ROA not before:           Mon 18 Dec 2023 19:16:09 +0000
ROA not after:            Mon 16 Dec 2024 19:21:09 +0000
asID:                     270793
IP address blocks:        201.159.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cb:af:62:6e:09:8d:ce:08:72:85:d0:75:db:f5:12:2a:36:a0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:09 2023 GMT
            Not After : Dec 16 19:21:09 2024 GMT
        Subject: CN=E8E5BD147AE9A0BA1808E13ABE2B93D523153F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:21:b4:90:0f:29:95:c9:ae:d1:93:90:6d:
                    86:9b:ab:ab:3d:83:17:02:b0:4d:e8:dd:86:56:6b:
                    d1:bb:69:65:09:95:79:ac:ab:c5:9f:0f:79:2c:7a:
                    eb:6e:de:c7:83:b2:3e:80:95:d3:6f:01:ef:60:a3:
                    8e:d8:92:fd:32:7b:15:52:be:f8:7c:ba:f2:e8:82:
                    f4:f6:f0:93:5a:90:74:b7:98:b5:ef:d7:54:e9:44:
                    f5:fe:41:2b:51:62:6b:18:41:16:ca:4a:d6:67:c3:
                    de:88:3f:e8:66:a9:61:ba:7b:5b:ef:92:31:4f:6e:
                    ad:27:1c:10:30:08:d4:7d:08:f6:7a:0f:16:55:16:
                    72:9d:66:5f:f3:fe:aa:9f:ef:2a:06:4f:f8:95:eb:
                    61:e3:37:7d:17:1b:66:13:28:f2:92:c2:66:c1:ec:
                    30:3c:7a:cf:b7:ca:a1:8e:6c:4d:6a:09:5d:17:8b:
                    f4:21:cb:d0:84:6a:df:c1:5a:f6:1e:fa:60:55:84:
                    47:13:b8:2f:26:ee:e8:e7:dd:c0:ed:b6:5b:0a:91:
                    16:f9:21:a9:37:7a:b9:46:23:01:21:b4:a4:15:f0:
                    30:f6:28:12:45:2e:c8:ee:84:e7:7c:8b:59:37:6c:
                    d0:9d:08:6d:d1:2e:e3:63:78:e1:c3:d4:32:65:b4:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:BD:14:7A:E9:A0:BA:18:08:E1:3A:BE:2B:93:D5:23:15:3F:82
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:22:32:14:f6:0d:fe:d5:17:70:ab:4d:4d:6d:5b:c2:57:28:
         26:e4:fc:d3:fd:4e:d0:5f:f5:67:cd:a4:48:ab:1b:19:bd:41:
         61:08:57:2a:ae:c4:43:31:c5:58:1b:14:49:e4:a0:99:36:56:
         26:d1:31:a4:90:90:57:29:43:44:89:cd:2d:ab:b4:5d:4b:21:
         43:f3:f4:2d:ee:87:68:34:23:dc:21:61:d0:14:6e:35:34:a7:
         68:ed:73:29:35:66:27:b5:17:e5:81:46:e3:f1:57:48:a6:46:
         a9:f6:9a:85:f3:42:95:89:46:8f:41:8a:65:d4:a9:65:75:c9:
         09:79:ff:6e:1e:1a:5b:e8:f5:aa:92:cf:bc:9c:99:67:57:9b:
         3e:10:70:74:11:a7:3f:cb:45:e8:e5:b7:28:75:9c:d9:e7:f0:
         44:59:15:c0:8d:6d:4e:85:78:7a:98:80:16:9a:1d:11:5c:7c:
         4d:1e:a9:86:be:ed:cb:dd:7d:3d:77:fd:12:ac:51:42:bd:07:
         2d:c9:23:c5:c1:64:06:2e:5c:42:83:d8:50:62:cd:02:61:0d:
         5f:0e:fe:b7:30:d0:97:95:19:6f:31:3d:3e:ec:83:dc:ae:ca:
         02:97:93:2e:fb:7a:40:ea:4b:9c:5a:3c:cf:f7:f0:5b:57:71:
         7e:5d:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org