Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
File:                     3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          b1GKI3T6I6X1Nn2faBnZztnlj9FlyeeVkMhszucGA9c=
Subject key identifier:   7B:16:25:90:3E:5F:93:EA:3E:BA:B8:F6:EE:6C:B6:D4:A9:21:89:B6
Certificate issuer:       /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial:       5289613740C92F3DB4D39F4EC5599ED3CD1DDE46
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
Signing time:             Fri 09 Dec 2022 11:53:27 +0000
ROA not before:           Fri 09 Dec 2022 11:48:27 +0000
ROA not after:            Fri 08 Dec 2023 11:53:27 +0000
asID:                     53080
IP address blocks:        201.216.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:61:37:40:c9:2f:3d:b4:d3:9f:4e:c5:59:9e:d3:cd:1d:de:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
        Validity
            Not Before: Dec  9 11:48:27 2022 GMT
            Not After : Dec  8 11:53:27 2023 GMT
        Subject: CN=7B1625903E5F93EA3EBAB8F6EE6CB6D4A92189B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:85:03:e9:1d:14:f9:d1:c8:2c:3b:8e:48:
                    f4:d1:b3:61:c9:50:5e:54:f3:b3:8d:6d:4a:67:c5:
                    ee:ec:3b:0a:6f:94:7a:6a:09:c6:2e:84:dc:50:82:
                    2c:e2:26:66:f7:7a:28:23:e0:7e:5d:2f:78:ca:5b:
                    6e:39:26:3e:a7:55:32:97:c4:49:6c:1a:02:b6:8e:
                    1f:70:5e:07:76:d8:bb:0f:ad:bd:f5:c7:42:57:22:
                    92:d0:ae:94:21:cf:69:5b:8e:be:48:d1:43:18:c4:
                    e3:fa:8d:6f:9f:d5:dd:64:48:f8:03:40:b3:67:22:
                    f0:66:fa:84:fd:6f:c8:97:73:15:ad:0d:1a:1c:54:
                    c8:3c:9c:b6:75:75:87:2c:9d:95:74:31:1a:6c:c8:
                    47:38:46:0b:44:70:4b:b6:2b:b0:17:08:dc:75:5f:
                    52:bf:11:b4:18:fc:87:cd:73:ae:12:3b:b6:ee:9e:
                    19:3e:e0:1e:1e:9d:5b:29:c1:d7:58:a7:56:77:64:
                    5a:5a:d8:33:02:c2:61:c2:c5:25:2f:08:a1:c6:23:
                    76:6d:87:39:ca:65:e3:e0:2d:f2:22:de:8d:88:fc:
                    8e:48:78:7b:6f:a1:b1:fb:46:d1:a5:4c:dd:93:66:
                    db:4b:71:71:c6:12:ba:8c:88:e4:11:50:31:45:2f:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:25:90:3E:5F:93:EA:3E:BA:B8:F6:EE:6C:B6:D4:A9:21:89:B6
            X509v3 Authority Key Identifier:
                keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:fb:95:1c:f5:35:db:a1:84:b8:42:3a:8f:a3:0e:31:ab:
         b0:09:21:37:77:df:d5:2f:1f:54:56:38:31:b2:8e:80:22:e9:
         ec:06:83:bc:a3:dc:65:7e:23:31:ca:32:38:65:30:c2:2b:df:
         b1:a5:48:23:85:94:fb:58:a6:f7:36:ba:2e:4d:e8:8c:f0:c2:
         8f:9e:06:74:1e:cb:17:e5:18:b9:44:02:8a:73:67:a5:fc:ed:
         b7:89:19:2e:2f:8e:ee:a3:67:bf:56:81:bd:a7:cc:6a:ac:5f:
         69:29:58:98:2d:e1:6c:f2:2a:f3:fb:87:81:92:01:e3:91:7d:
         ba:70:a5:36:48:aa:24:23:c0:b2:18:e0:89:9a:75:05:70:ed:
         74:ab:c9:9f:34:60:d2:a4:99:cb:5f:50:f7:94:bc:e0:11:0f:
         5f:93:ca:2e:8e:e8:d4:59:fb:81:64:93:ac:c4:aa:c8:4a:1a:
         b8:8c:ae:f3:76:97:80:cc:cd:2a:87:0c:e8:28:d0:50:1e:1e:
         88:8d:15:11:27:d5:d4:1d:b5:c0:8e:87:a4:6b:0b:67:4b:ea:
         6c:08:be:bb:c8:e2:bc:a4:26:d0:46:1e:ee:60:e2:37:f6:25:
         b1:11:3f:a1:8b:30:5f:74:5f:73:74:2e:93:96:be:3c:1f:79:
         ca:d4:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org