Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          SR6zvrzc+N8CWCpfnevMTPOmmru0fSFzOIEbUUBRGEI=
Subject key identifier:   0F:1B:01:A9:1D:30:D4:BF:2A:7B:CA:51:B6:F7:5C:A6:C4:56:E9:12
Certificate issuer:       /CN=1315C278EA55EBC9FF08F152612C3E2F7432AF22
Certificate serial:       7FBD36E111A2D7D86D73A06EB91F45102CAB9615
Authority key identifier: 13:15:C2:78:EA:55:EB:C9:FF:08:F1:52:61:2C:3E:2F:74:32:AF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
Signing time:             Tue 11 Apr 2023 15:03:00 +0000
ROA not before:           Tue 11 Apr 2023 14:58:00 +0000
ROA not after:            Tue 09 Apr 2024 15:03:00 +0000
asID:                     61785
IP address blocks:        201.131.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:36:e1:11:a2:d7:d8:6d:73:a0:6e:b9:1f:45:10:2c:ab:96:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1315C278EA55EBC9FF08F152612C3E2F7432AF22
        Validity
            Not Before: Apr 11 14:58:00 2023 GMT
            Not After : Apr  9 15:03:00 2024 GMT
        Subject: CN=0F1B01A91D30D4BF2A7BCA51B6F75CA6C456E912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:df:51:23:1d:fc:f2:f1:fa:07:8a:1e:ca:
                    e3:04:0d:36:9b:69:96:a3:67:05:dc:77:06:63:35:
                    57:17:72:a2:66:7b:c9:bd:8c:b7:07:eb:74:66:fe:
                    be:2d:c3:ea:74:82:cf:3a:3a:70:3f:db:4d:76:dd:
                    6a:f5:8e:ad:23:d5:ad:94:22:af:47:e3:29:48:f4:
                    1f:66:59:8b:c6:a2:31:ae:03:cf:42:7d:b6:da:c6:
                    01:a7:e9:77:db:5a:0a:80:af:45:4c:9d:c7:1f:0c:
                    e4:00:a3:67:46:0b:d9:68:16:ec:fb:ac:1e:30:c8:
                    4a:e4:e3:8d:6b:de:f1:ef:60:46:41:bd:ed:bd:9e:
                    87:27:75:cb:f9:86:d7:41:7d:2a:63:a8:68:56:74:
                    81:fd:c8:78:6f:38:f5:1b:df:42:eb:2c:a8:c4:c2:
                    cf:39:c8:d6:e5:92:c5:8a:7e:7c:de:37:c5:f0:55:
                    e4:9c:7f:82:fa:b9:e8:99:27:63:3d:ae:ba:cd:fd:
                    f6:a7:71:0a:75:17:71:4d:2b:f7:c5:5b:36:99:f8:
                    4c:e5:55:8d:b6:b2:3b:fc:69:b7:3a:6b:ea:a4:58:
                    3b:43:52:42:6b:3b:a5:0f:c1:9b:62:f9:8c:6d:bb:
                    c6:8d:96:4b:39:15:34:b1:6a:79:dc:f2:c8:10:5b:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:01:A9:1D:30:D4:BF:2A:7B:CA:51:B6:F7:5C:A6:C4:56:E9:12
            X509v3 Authority Key Identifier:
                keyid:13:15:C2:78:EA:55:EB:C9:FF:08:F1:52:61:2C:3E:2F:74:32:AF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1315C278EA55EBC9FF08F152612C3E2F7432AF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:80:9a:bb:1c:11:af:32:e9:5c:72:90:bc:59:93:5f:7b:56:
         f1:9d:3f:d6:40:3d:74:b9:ff:f1:bb:a2:fd:e5:f5:3e:b2:07:
         b5:e1:ab:4e:58:13:16:06:0e:ac:66:fd:92:dd:26:a0:2d:2b:
         c5:18:46:42:fc:33:db:d0:87:a1:9b:80:15:0b:d5:c8:3a:12:
         24:be:fb:6a:a9:7b:91:be:2d:ba:dc:f3:b2:10:9e:23:1c:c8:
         b2:95:d5:96:37:d9:52:03:e7:0c:df:46:b6:ce:c7:bf:2b:a4:
         ef:0d:ec:09:36:ef:5a:eb:9f:c4:ee:de:b6:89:0d:e8:82:af:
         b9:ca:fe:2a:bc:dc:47:0a:9d:84:93:da:02:00:eb:60:50:14:
         0f:a3:f7:a7:15:ca:4b:09:37:55:d0:33:d9:e8:c7:7f:67:33:
         ba:12:c0:33:22:fa:e6:42:e3:80:75:e4:06:1d:7f:8a:df:8f:
         86:4f:a9:37:a1:97:36:12:de:1f:3e:84:47:85:6e:71:63:98:
         6b:6b:d1:35:bc:37:53:97:d3:da:21:81:fb:20:12:98:e1:e8:
         8e:49:0d:4f:48:ed:7b:ea:1b:21:df:1d:f3:22:a0:aa:60:ce:
         bf:a2:9c:c8:f5:5d:31:26:ef:64:ba:df:7e:41:70:36:04:d3:
         38:e1:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org