Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          BBLdU3Q1hLQGW0j1vajGw/dAUBN49yAR6YPOIhLvNnc=
Subject key identifier:   67:5F:6D:00:77:B4:67:FD:72:C7:55:16:FD:7F:D3:CD:7E:B8:57:44
Certificate issuer:       /CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
Certificate serial:       20A2D8AF8C884E51FF7E0F587A7B52B4C29BD9E0
Authority key identifier: C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa
Signing time:             Fri 13 Oct 2023 13:06:03 +0000
ROA not before:           Fri 13 Oct 2023 13:01:03 +0000
ROA not after:            Fri 11 Oct 2024 13:06:03 +0000
asID:                     270519
IP address blocks:        24.152.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:d8:af:8c:88:4e:51:ff:7e:0f:58:7a:7b:52:b4:c2:9b:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5947EE3BA954E287A1F49DF78F43E881DA0A1B8
        Validity
            Not Before: Oct 13 13:01:03 2023 GMT
            Not After : Oct 11 13:06:03 2024 GMT
        Subject: CN=675F6D0077B467FD72C75516FD7FD3CD7EB85744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:b9:2a:75:9c:29:25:77:6f:a6:45:21:5f:
                    0a:63:50:ae:80:46:2e:7e:1a:4f:cd:9a:69:e0:2b:
                    58:9e:0c:f6:13:3e:24:5c:51:06:ca:87:8b:6a:45:
                    0e:9b:60:c0:2d:23:17:45:db:b8:fd:6c:d6:bf:25:
                    fe:be:eb:de:fd:e1:b0:13:16:01:e9:d1:47:c9:48:
                    6b:6c:17:8c:80:f5:25:2c:10:64:5f:31:ef:8e:01:
                    07:e0:7d:0b:be:8e:4b:d5:f7:dd:24:d2:ba:8d:93:
                    c8:6a:6d:96:0b:cd:17:bf:0f:25:ec:51:d3:ca:82:
                    c9:54:69:1b:e8:a5:a1:ac:69:b4:bc:d2:53:7a:df:
                    61:ed:86:5c:bc:f5:67:48:cf:19:a0:38:14:5d:1d:
                    8e:af:71:d3:20:f7:b4:47:cb:76:32:4c:3b:12:df:
                    fe:37:37:26:34:15:e7:f3:0c:35:fa:bf:fa:92:13:
                    36:30:d2:29:e3:c6:d1:b1:ec:88:64:4f:7d:e7:42:
                    92:a8:32:b5:69:6e:67:f3:52:01:10:ea:11:e7:ca:
                    fb:34:7b:9a:0b:b9:eb:02:e7:72:63:b8:02:7c:82:
                    9f:d6:a4:cf:ad:e8:5c:fc:50:45:0d:aa:a3:73:ba:
                    46:e6:67:64:82:4c:06:61:29:29:7b:3a:d0:05:1a:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5F:6D:00:77:B4:67:FD:72:C7:55:16:FD:7F:D3:CD:7E:B8:57:44
            X509v3 Authority Key Identifier:
                keyid:C5:94:7E:E3:BA:95:4E:28:7A:1F:49:DF:78:F4:3E:88:1D:A0:A1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5947EE3BA954E287A1F49DF78F43E881DA0A1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:75:99:b1:37:c1:95:24:64:d9:0b:41:9f:2b:4a:05:7b:36:
         a4:76:e8:03:3f:70:c3:b0:99:42:8a:a6:15:f2:84:37:7e:61:
         02:de:7b:2c:c0:c3:ca:d4:9c:fc:f2:15:77:d6:27:ad:b2:b3:
         18:06:ba:9a:3f:37:2a:ae:f9:9f:57:60:01:ce:7e:45:4a:64:
         2f:85:2f:ae:3d:1c:e6:c4:99:74:a9:18:1e:b2:e8:06:19:a3:
         71:50:26:95:09:c7:02:73:15:21:46:62:a6:99:49:8a:23:ed:
         40:93:57:27:e0:b9:94:f9:6d:16:16:2d:32:7b:36:cc:0b:2b:
         82:1f:fe:62:6b:cb:a0:1e:50:c4:07:0c:b7:6c:5f:85:ac:08:
         bb:f6:b3:0d:ce:04:3b:55:1a:43:39:d0:32:ff:36:88:47:d5:
         b5:a2:5b:bd:e4:fe:a9:06:cc:ce:9b:98:9f:d9:5a:ab:70:e7:
         a4:ff:7b:f0:ec:cc:a4:9b:6e:b1:6a:87:c7:01:33:a4:89:8c:
         65:ce:a1:3c:28:b8:e3:c7:ec:e1:27:64:ef:fe:00:66:b9:5b:
         33:f9:35:b8:24:9c:23:f9:ae:b9:54:c5:03:77:c7:2e:64:66:
         5f:ef:f6:df:27:07:3f:a7:66:bf:cd:fd:c5:60:89:c5:e8:87:
         e7:45:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org