Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
File:                     3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          wQ+c6C9R0yJMKYKB7YBDN4d9vaI7zLKtsNxTZ1I4XnE=
Subject key identifier:   DC:97:FB:2E:33:C7:E7:3E:F5:1A:5D:71:3C:1E:7C:D9:14:41:AF:85
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       4E62628C6341D2ACBE444B4F97CB18C7BF1513BB
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:45 +0000
ROA not before:           Tue 23 Jul 2024 11:50:45 +0000
ROA not after:            Tue 22 Jul 2025 11:55:45 +0000
asID:                     53080
IP address blocks:        201.216.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:62:62:8c:63:41:d2:ac:be:44:4b:4f:97:cb:18:c7:bf:15:13:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:45 2024 GMT
            Not After : Jul 22 11:55:45 2025 GMT
        Subject: CN=DC97FB2E33C7E73EF51A5D713C1E7CD91441AF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:38:9f:8b:f9:84:5d:44:c4:c4:3e:4d:79:
                    3e:3c:74:a1:f7:b8:a9:f5:82:3f:00:d9:25:f5:53:
                    1b:a7:58:33:26:c5:2c:f4:65:01:4d:7d:40:2f:91:
                    d0:5c:3d:f1:0b:89:fd:1a:1e:71:06:1a:05:a1:18:
                    57:37:66:ff:f6:e5:35:c3:06:24:8a:14:1f:6f:67:
                    63:2f:03:54:2d:bf:30:8a:86:11:63:6f:51:51:29:
                    72:f7:b5:a9:ab:fe:36:71:cb:ea:f0:48:8c:2d:30:
                    83:20:c3:08:39:48:6e:5e:5a:68:8c:49:45:e8:79:
                    43:df:a2:d6:7d:a1:db:3c:31:83:8e:28:5e:65:a3:
                    3e:e7:8c:b7:39:37:fe:a7:49:d9:91:5b:02:c9:50:
                    a4:c4:95:e8:66:bf:6f:24:64:61:5e:45:9d:a9:89:
                    2f:e0:c9:3a:a2:44:6d:32:61:ab:85:aa:63:81:95:
                    94:0f:14:a9:00:60:f0:9b:a5:d9:80:73:6a:c3:eb:
                    fd:7d:85:5e:76:38:6d:0d:7d:47:2c:a8:2f:ca:f3:
                    ec:90:c5:d3:71:26:88:4c:21:08:bc:e3:3c:fc:3c:
                    6a:f2:c5:9e:9e:0d:b8:9f:b8:6e:9a:bd:72:13:8e:
                    aa:93:61:c7:f6:80:aa:91:0f:55:2d:2a:8a:a5:60:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:FB:2E:33:C7:E7:3E:F5:1A:5D:71:3C:1E:7C:D9:14:41:AF:85
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3230312e3231362e3130302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:96:2a:c5:fd:6b:d8:e6:5a:b7:dc:70:6e:ed:c1:e5:2b:f7:
         13:65:67:19:48:a1:27:c0:f6:72:48:30:7e:c0:78:ce:c0:c0:
         94:ff:56:15:2b:be:05:03:70:a5:3d:c1:e9:83:a6:33:f9:aa:
         79:4f:60:2c:e7:d1:67:7f:fb:df:22:af:7c:0b:86:ff:35:0a:
         2d:e5:f0:55:ec:9a:cd:46:77:c7:fb:3c:32:d7:16:dd:a1:c1:
         0d:59:f6:28:25:11:2f:45:7c:9b:75:30:92:b9:47:e2:46:6d:
         94:d4:e1:45:45:87:7d:0c:c2:e0:8d:5e:25:88:5f:e1:3b:e2:
         9c:bb:36:50:a0:83:f4:8d:3a:50:16:c6:e9:16:74:d5:6e:9a:
         ad:a6:ed:7f:89:15:d9:8d:ff:be:44:03:e6:76:1b:d0:f9:d1:
         bd:52:ef:ac:f6:ef:44:24:4a:fa:58:83:aa:86:c1:9e:1f:76:
         97:95:21:9e:3b:41:62:29:e6:7c:97:52:36:51:83:a9:dc:20:
         2b:02:19:c5:78:29:54:cb:24:e7:9c:03:f5:16:13:94:4f:07:
         67:8f:60:7f:dc:e6:fa:01:4c:59:83:67:6b:c8:41:83:f8:40:
         6a:4e:23:c8:d7:3c:de:ff:2e:3b:5e:56:fc:62:0a:45:fb:3c:
         ce:f7:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org