Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          ZjbhMDtPrOKaFmnCq8eYL7Y1NEkbZuvF4i95rDhUYbM=
Subject key identifier:   0D:01:6A:EC:F3:4B:B9:42:C3:49:7E:11:4F:00:3C:FE:5E:B0:C5:F0
Certificate issuer:       /CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
Certificate serial:       07CEC7D1B03530EC53F17607E90799B0C7543275
Authority key identifier: 8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
Signing time:             Tue 18 Apr 2023 14:21:24 +0000
ROA not before:           Tue 18 Apr 2023 14:16:24 +0000
ROA not after:            Tue 16 Apr 2024 14:21:24 +0000
asID:                     61785
IP address blocks:        201.131.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:c7:d1:b0:35:30:ec:53:f1:76:07:e9:07:99:b0:c7:54:32:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
        Validity
            Not Before: Apr 18 14:16:24 2023 GMT
            Not After : Apr 16 14:21:24 2024 GMT
        Subject: CN=0D016AECF34BB942C3497E114F003CFE5EB0C5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:b8:fb:00:90:1a:26:51:f2:50:39:a1:f4:
                    3b:84:e6:b0:cd:67:ca:c8:76:df:7f:49:16:70:1d:
                    07:20:fe:eb:e1:9a:8f:1d:f8:93:64:36:b5:3b:82:
                    23:2f:c9:1a:fd:bb:f1:99:fa:ad:77:d3:36:e8:45:
                    49:b5:98:c1:8c:55:d8:0a:ff:e5:3b:85:d4:ca:9d:
                    ad:a5:6a:0c:1a:b3:d5:2d:f3:34:c0:fb:46:88:42:
                    f3:f7:72:1f:e9:ac:26:08:33:a4:c9:d7:b8:3e:6d:
                    21:ca:d3:99:09:5d:6c:42:89:b8:ee:bd:15:19:d7:
                    79:ca:6f:0b:19:27:6d:b4:12:9a:1f:65:9d:36:c7:
                    1d:5b:5d:a0:7f:c4:e9:33:bb:9b:c5:7e:f1:9f:56:
                    30:11:ff:90:9c:38:07:67:09:32:c9:4c:88:4d:24:
                    35:b1:38:4e:a7:7e:60:29:12:92:8f:e7:9f:3d:ee:
                    7e:4d:dc:58:53:c2:2d:a9:17:52:5d:6c:21:63:d4:
                    91:a2:6a:79:86:94:75:40:24:4d:86:98:1e:f7:82:
                    22:5a:a6:35:75:32:61:3c:52:42:87:6c:60:8d:61:
                    e7:0e:a1:e0:82:ba:b4:a1:f0:d1:39:85:92:29:f1:
                    32:48:8c:16:1e:3d:68:0a:5a:25:d7:93:21:9f:77:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:6A:EC:F3:4B:B9:42:C3:49:7E:11:4F:00:3C:FE:5E:B0:C5:F0
            X509v3 Authority Key Identifier:
                keyid:8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:aa:57:d1:a1:a1:2a:79:d0:ca:d5:0b:61:9b:c2:3c:c4:
         cc:08:74:f0:e6:c0:30:4e:0a:f1:f3:11:68:ca:83:5d:bb:f0:
         e0:e0:99:3e:a3:cb:7e:59:9f:5f:06:49:6d:47:94:4a:16:8d:
         bf:de:e4:16:4e:35:85:82:ac:47:fa:38:20:3d:e6:21:ce:9b:
         4a:94:05:e5:c1:77:5f:4f:a8:98:3f:86:04:45:e6:cd:05:7b:
         b4:fb:00:20:49:64:2a:81:51:1d:28:e9:92:82:42:36:a7:9b:
         97:ae:52:51:1d:83:99:23:13:4b:f3:53:18:e1:da:41:b8:75:
         dd:03:16:81:69:05:e6:9f:b1:07:6e:75:88:2c:28:a1:7c:d7:
         52:c8:5c:7c:df:4a:44:d5:5f:9d:68:eb:3d:d7:2d:e3:f1:c7:
         78:dd:9a:e8:30:df:4a:a1:7f:bb:8b:5c:ca:27:e1:fc:a9:af:
         73:cd:73:4a:f5:65:2b:b8:44:19:1d:57:7d:28:9a:69:02:f8:
         50:bf:6c:34:d0:99:27:d6:be:48:20:6d:e3:94:b3:d6:98:b1:
         a1:2e:15:73:e1:07:aa:94:ca:80:95:5b:91:39:ce:be:4d:d2:
         b6:e4:0c:84:fc:a7:8e:16:12:ca:51:35:96:db:d8:c4:35:5f:
         f2:fc:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org