Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa (raw, json)
Hash identifier:          37l0DV1E9XuJ3HzQ3wZEmBGJYg3zetv6WNuE3gwlYVU=
Subject key identifier:   D1:6B:22:24:6C:9B:A0:F7:AC:3E:EE:52:9C:0B:0A:E1:31:64:C0:A6
Certificate issuer:       /CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
Certificate serial:       47AB6D354D1CE463FE911687AA35CDC7F1CED806
Authority key identifier: 8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
Signing time:             Tue 18 Apr 2023 14:21:18 +0000
ROA not before:           Tue 18 Apr 2023 14:16:18 +0000
ROA not after:            Tue 16 Apr 2024 14:21:18 +0000
asID:                     61785
IP address blocks:        201.131.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ab:6d:35:4d:1c:e4:63:fe:91:16:87:aa:35:cd:c7:f1:ce:d8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
        Validity
            Not Before: Apr 18 14:16:18 2023 GMT
            Not After : Apr 16 14:21:18 2024 GMT
        Subject: CN=D16B22246C9BA0F7AC3EEE529C0B0AE13164C0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:18:e9:c9:3c:0b:3e:e1:20:cb:29:32:7a:
                    e6:bf:63:10:54:d8:7a:58:40:41:6b:51:08:b2:d6:
                    ef:e2:0c:6d:41:23:3d:c3:5e:9d:34:88:d4:7b:51:
                    26:97:3a:a6:af:8e:8d:ed:b6:d9:61:93:e6:a6:f3:
                    c3:b6:1a:7c:91:b4:29:15:0a:e7:a1:8a:2c:5e:89:
                    5b:21:7c:ab:d6:54:c7:b8:45:a9:f4:da:73:fb:be:
                    2d:14:cb:c5:ea:bc:ed:a9:42:c1:30:7a:d8:b8:09:
                    8d:fe:6d:4f:0a:a5:e5:bd:00:8f:25:5b:a7:fa:4e:
                    81:3e:65:b3:67:61:d6:53:74:b0:fc:6a:e3:4c:d1:
                    02:71:47:51:c9:3e:d9:a5:96:aa:39:13:a4:72:74:
                    61:cf:bf:d3:77:22:9e:46:ab:fa:70:99:07:ac:dd:
                    0d:a2:57:c2:6e:91:12:8d:f9:0c:d1:fd:3e:12:e2:
                    f1:3b:e5:5b:ef:49:ff:33:79:db:09:56:51:8e:6d:
                    bf:72:d6:2e:75:d0:2f:c3:29:61:ae:6b:55:fc:d6:
                    44:ba:e1:75:f3:2a:e2:65:af:52:f9:ed:df:90:7c:
                    6d:36:77:25:c9:40:2e:59:78:2f:96:8a:a1:8a:fb:
                    99:7b:4c:1b:27:a2:e2:45:6e:f3:0e:2e:4b:61:e9:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6B:22:24:6C:9B:A0:F7:AC:3E:EE:52:9C:0B:0A:E1:31:64:C0:A6
            X509v3 Authority Key Identifier:
                keyid:8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:2e:8a:35:ed:1c:c0:58:34:17:92:41:35:a3:4e:f5:0e:
         6b:22:4d:17:02:b2:e8:6c:c4:50:01:78:c6:29:1d:50:13:2e:
         c9:bc:6d:7c:eb:77:bc:f7:f7:fa:b9:df:c7:7c:93:5b:39:4e:
         e2:43:c0:48:8c:80:9c:f7:db:46:a8:05:e1:2b:6b:c4:1b:4b:
         2e:bf:0d:b7:1c:5e:bb:26:55:aa:18:8a:3b:47:6b:a8:94:2c:
         64:f2:c9:1b:b6:f4:d6:49:53:ad:e7:9a:0b:5a:33:06:4b:eb:
         70:4c:42:ee:ec:ac:19:09:83:a7:d6:d8:f8:1a:8b:21:14:91:
         64:2e:d6:11:c7:60:f4:d2:13:e6:14:09:2f:99:43:c7:d8:c7:
         39:a7:cf:64:0f:a3:80:ea:cc:29:99:75:27:cb:90:f4:cf:3c:
         d5:b4:8e:64:b0:bc:04:e6:9a:0b:e6:e8:0a:eb:97:b8:f9:fb:
         e0:ec:99:8a:d4:f2:5c:d1:e0:a8:72:dc:dc:68:9d:87:17:5a:
         64:57:d4:10:39:c5:99:23:c9:75:6a:a5:48:f2:6c:ca:35:71:
         10:d1:44:ca:fe:99:02:88:54:98:9a:3a:19:60:d0:39:05:5b:
         8c:d7:c0:ad:a0:09:88:37:82:b6:b6:24:a7:85:b4:86:bc:11:
         ed:69:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org