Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32332d3233203d3e20323637353031.roa
File:                     3230312e3138322e36342e302f32332d3233203d3e20323637353031.roa (raw, json)
Hash identifier:          J5Jm84OvEKP70GcM8dxTHlE/EaD2sgnl5Jd4CH5qhxU=
Subject key identifier:   F3:FC:BA:8B:7B:1E:88:54:C3:79:61:2F:10:1F:73:60:93:2B:95:B6
Certificate issuer:       /CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Certificate serial:       7CB5522B50BFE863E961B6F2BBD213F021D43B9C
Authority key identifier: 83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32332d3233203d3e20323637353031.roa
Signing time:             Sat 16 Mar 2024 12:12:51 +0000
ROA not before:           Sat 16 Mar 2024 12:07:51 +0000
ROA not after:            Sat 15 Mar 2025 12:12:51 +0000
asID:                     267501
IP address blocks:        201.182.64.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:52:2b:50:bf:e8:63:e9:61:b6:f2:bb:d2:13:f0:21:d4:3b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
        Validity
            Not Before: Mar 16 12:07:51 2024 GMT
            Not After : Mar 15 12:12:51 2025 GMT
        Subject: CN=F3FCBA8B7B1E8854C379612F101F7360932B95B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:1a:b0:95:01:56:0f:30:8c:5e:02:3d:66:
                    df:c1:ce:4f:db:99:d6:a8:09:33:e1:8f:46:09:87:
                    a5:e5:24:7d:6e:95:ff:0f:ab:b8:79:5a:a2:6e:ab:
                    0a:b0:3c:4a:73:3c:08:3e:54:54:2a:7b:2a:6f:15:
                    11:2d:81:37:51:33:fe:94:13:a5:83:6b:b2:53:9e:
                    bc:81:a1:b7:86:f0:93:df:d6:bd:54:72:a5:d1:b6:
                    de:90:6e:a1:22:63:0a:5c:b7:5b:37:e1:97:5e:6c:
                    25:7a:b2:cb:8b:6a:a4:e6:3d:f0:fc:86:d8:81:92:
                    5d:d3:ae:20:03:91:2f:83:4b:9b:fc:bc:60:84:cd:
                    76:68:ed:c7:07:16:f5:bf:c2:db:a9:b3:2d:c6:ad:
                    12:ba:da:c4:58:d5:e9:98:4b:9e:32:4a:51:26:29:
                    96:35:7a:af:9c:41:02:ce:7a:3f:32:99:76:e3:7e:
                    2e:11:53:98:2a:21:81:29:5d:66:b9:7e:de:21:84:
                    a4:89:87:ed:e9:c4:d8:f2:55:d4:58:8c:d9:ce:42:
                    34:de:49:56:50:8a:e3:0c:df:53:ac:62:2b:d3:01:
                    32:6c:b3:17:9f:3d:24:32:71:b5:81:47:f5:bc:9a:
                    0c:da:01:1e:44:c2:6d:e0:87:f1:ca:4d:07:8f:7a:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FC:BA:8B:7B:1E:88:54:C3:79:61:2F:10:1F:73:60:93:2B:95:B6
            X509v3 Authority Key Identifier:
                keyid:83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36342e302f32332d3233203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:f8:e1:30:13:e2:53:ea:97:63:2f:51:93:93:4c:a5:3a:
         ca:c3:45:02:29:86:4c:d1:85:d9:20:a6:7f:a1:8a:a5:4a:b0:
         26:d5:65:fd:62:db:20:33:14:cb:ff:e4:42:47:fd:32:53:c3:
         3d:c0:a4:d8:f8:f4:7c:df:5d:29:97:53:b9:1f:93:13:01:96:
         b9:61:92:4b:2c:cb:eb:32:0f:8d:f0:38:1f:22:bd:4c:47:84:
         5e:0e:93:f6:83:bf:e7:67:f5:0d:f6:af:26:19:2a:44:ff:ad:
         e0:9c:cc:48:39:89:73:81:2e:1f:f5:e6:dc:61:3d:ce:ff:d1:
         7d:e7:d4:b3:66:57:0c:c4:eb:dd:d1:ac:91:1d:81:ab:99:b2:
         43:d8:77:d9:a0:05:65:25:7a:0b:04:9e:89:2b:ad:40:aa:83:
         c6:c4:30:55:79:16:7b:3a:5c:96:ca:8f:80:26:18:22:19:4d:
         f2:01:50:7e:f1:12:78:2b:ca:8c:21:27:91:2a:7b:42:24:f6:
         3a:89:ed:86:30:30:5c:d1:b3:5b:c3:d7:96:9e:4f:a4:af:38:
         49:9c:c1:34:58:b4:7d:a8:c4:f9:40:38:6c:c2:7a:6a:ac:8e:
         26:89:ec:5f:1a:be:c0:fe:8c:0d:5c:78:07:b7:c8:c6:4e:f9:
         c7:a6:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:20 2025 by rpki-client