Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          pGkvbX1ZOhheI9Z0kMJmlDYToFl9tTJgWvHdtMuRuQk=
Subject key identifier:   E8:1B:08:56:92:80:43:64:2C:31:03:16:DC:50:A5:4D:85:DE:58:84
Certificate issuer:       /CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
Certificate serial:       6A84E7E3215D302FE6C3EFA9E1B5C1F0D7AAB82E
Authority key identifier: 8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa
Signing time:             Tue 18 Apr 2023 14:21:29 +0000
ROA not before:           Tue 18 Apr 2023 14:16:29 +0000
ROA not after:            Tue 16 Apr 2024 14:21:29 +0000
asID:                     61785
IP address blocks:        201.131.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:84:e7:e3:21:5d:30:2f:e6:c3:ef:a9:e1:b5:c1:f0:d7:aa:b8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C82F765CC710D7E2CA750E73CF161ADF599A011
        Validity
            Not Before: Apr 18 14:16:29 2023 GMT
            Not After : Apr 16 14:21:29 2024 GMT
        Subject: CN=E81B0856928043642C310316DC50A54D85DE5884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:91:3c:78:62:27:f0:88:8a:30:5d:6c:f4:
                    19:78:83:33:a3:3e:0d:cb:97:ce:d7:7d:ba:b4:a7:
                    80:6d:dd:d8:56:26:b4:d8:f0:f1:47:ef:77:ef:da:
                    75:24:ae:0c:0e:0c:8c:6f:c2:aa:d6:08:87:02:1a:
                    49:35:61:a0:50:fa:56:8e:90:55:a9:ef:87:6f:b3:
                    8e:4c:46:3e:e5:b3:d3:ac:77:5d:0b:0b:e1:04:81:
                    32:df:ae:cb:30:39:70:e2:ef:c4:a1:00:d5:af:db:
                    8e:1c:45:28:ce:7d:47:8f:57:5b:c9:8e:fe:94:67:
                    9a:c3:55:35:aa:85:21:68:4b:2b:de:03:f3:ad:dd:
                    0b:6d:37:87:b3:bb:92:fc:4e:ca:4c:c7:66:95:92:
                    fb:71:1d:38:c7:53:5a:da:c3:cf:fb:ce:7d:81:1d:
                    36:9f:83:89:10:00:c4:16:f6:fc:5e:05:85:3d:44:
                    a6:7d:a6:31:d7:25:72:41:ec:79:37:11:10:9d:f5:
                    dc:3f:8d:97:50:40:d8:99:62:86:46:8e:db:17:c8:
                    24:59:09:d0:c9:8b:ea:9d:13:3b:c0:bb:d7:53:05:
                    46:c1:ec:c4:24:32:78:19:ad:2f:44:75:a5:a2:62:
                    d8:71:f2:8a:0e:ff:50:22:94:c1:67:1b:d0:49:c8:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1B:08:56:92:80:43:64:2C:31:03:16:DC:50:A5:4D:85:DE:58:84
            X509v3 Authority Key Identifier:
                keyid:8C:82:F7:65:CC:71:0D:7E:2C:A7:50:E7:3C:F1:61:AD:F5:99:A0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/8C82F765CC710D7E2CA750E73CF161ADF599A011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C82F765CC710D7E2CA750E73CF161ADF599A011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/1/3230312e3133312e3135352e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:24:36:f8:32:9c:73:8c:e4:1b:29:c8:cd:b1:ca:06:da:c2:
         58:a8:38:b7:9c:3f:95:ea:a8:48:53:bf:88:fa:5c:ea:f2:5b:
         19:34:cd:f5:02:f4:f7:ee:58:4b:1a:f5:8e:b5:8f:f9:29:82:
         6d:c8:25:d0:93:67:40:9c:d8:2e:24:4d:24:b9:0e:d8:d6:90:
         70:f1:14:41:8e:be:9b:89:08:78:a1:5b:b1:4a:ce:52:99:d4:
         d0:7a:8a:64:8e:39:f5:03:cf:04:49:ce:74:53:a9:e3:e2:25:
         01:9e:05:c7:ea:ce:23:e7:6d:42:de:34:2d:1c:e5:14:4c:aa:
         86:0f:a8:08:ed:80:e7:4d:3a:92:13:f6:5c:2f:42:82:0c:15:
         21:95:f7:1f:63:0c:98:fa:37:dd:65:69:a8:9d:55:a9:9b:32:
         9f:5e:15:d4:6c:3f:25:00:aa:0e:28:2e:4d:f8:d6:c7:3a:2e:
         51:a4:f9:72:04:1a:1c:7d:ed:c0:e9:71:d2:4e:d1:e9:b9:5d:
         b6:da:2c:d0:62:f3:f6:07:23:91:5d:d3:4d:8b:4f:b0:74:30:
         5c:38:e3:32:f1:4d:0c:65:63:24:50:f8:f2:f1:b5:bc:48:22:
         02:6d:2c:8b:00:22:ca:c0:69:ed:a5:da:0f:c8:dc:93:cb:64:
         8b:12:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org