Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36352e302f32342d3234203d3e20323637353031.roa
File:                     3230312e3138322e36352e302f32342d3234203d3e20323637353031.roa (raw, json)
Hash identifier:          m5eWY42ZEDJB41y+7ViS5eNJcPpPiHot5XfZuETo3SY=
Subject key identifier:   3D:7F:E9:00:46:73:44:B5:8E:4C:72:30:E0:83:C5:94:9A:03:F9:21
Certificate issuer:       /CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Certificate serial:       02AB40843DEE22CA35C1BBAE00800CCE9403BC66
Authority key identifier: 83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36352e302f32342d3234203d3e20323637353031.roa
Signing time:             Sat 16 Mar 2024 12:12:53 +0000
ROA not before:           Sat 16 Mar 2024 12:07:53 +0000
ROA not after:            Sat 15 Mar 2025 12:12:53 +0000
asID:                     267501
IP address blocks:        201.182.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ab:40:84:3d:ee:22:ca:35:c1:bb:ae:00:80:0c:ce:94:03:bc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
        Validity
            Not Before: Mar 16 12:07:53 2024 GMT
            Not After : Mar 15 12:12:53 2025 GMT
        Subject: CN=3D7FE900467344B58E4C7230E083C5949A03F921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:7a:f5:06:d5:a1:1a:05:97:5b:db:a1:1c:
                    37:25:38:e6:da:48:d6:7b:65:b0:ff:b5:ad:68:36:
                    c7:9e:41:84:a9:39:94:d1:01:fc:6e:b1:e5:7d:3c:
                    bd:ac:4a:49:e9:99:f3:4a:e6:7c:5e:0a:91:0a:55:
                    6b:89:4b:84:fa:d9:af:14:b5:6c:e5:59:76:a5:49:
                    d4:3c:f1:a9:34:a4:dd:09:c5:d0:1c:c2:39:e9:63:
                    89:77:3c:95:01:83:d0:34:03:3b:2f:60:cd:e5:2e:
                    cb:5a:e7:cc:4d:d5:f7:ae:ab:b3:4d:8d:ca:5e:56:
                    53:b4:62:25:0e:fc:de:ff:3e:b7:9b:3e:48:b4:b7:
                    ad:2c:d3:3f:49:87:5a:36:36:cd:e4:6e:cc:17:06:
                    13:3d:da:79:04:ed:a6:cf:44:ac:2b:e5:f2:3e:4c:
                    a3:e6:fc:26:91:18:8f:fc:95:47:2f:53:5e:33:5f:
                    fd:d4:56:ab:6d:76:08:d1:21:21:65:30:aa:ff:02:
                    2a:7a:4f:86:5f:4b:06:1e:20:d1:da:04:a7:ef:7b:
                    07:bc:b5:95:a6:72:b1:3d:d6:ae:42:7b:2c:64:c6:
                    e8:50:a6:5e:d1:66:dc:fa:fe:01:97:35:b5:f5:ca:
                    6d:25:4a:19:8d:f6:13:66:dd:f4:39:9a:04:68:04:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7F:E9:00:46:73:44:B5:8E:4C:72:30:E0:83:C5:94:9A:03:F9:21
            X509v3 Authority Key Identifier:
                keyid:83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/3230312e3138322e36352e302f32342d3234203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:85:5d:3e:6a:9c:0a:bc:75:30:0f:ed:94:58:c9:db:a3:
         09:20:b8:04:9b:64:68:83:4c:91:54:f5:d7:00:7a:9d:7b:09:
         ef:67:2e:c4:90:b5:af:4c:3c:89:6d:ec:15:33:9b:bd:fe:aa:
         74:a5:c9:f2:ef:1c:49:95:d8:b3:1e:9d:f9:38:bc:d7:a6:06:
         31:fb:bf:d9:e5:a7:15:cd:86:16:1b:ae:f9:87:1c:de:84:b2:
         fa:1f:40:60:e6:8c:7a:d9:52:f9:59:1b:fa:3e:9b:ca:b2:7f:
         17:c7:ca:1b:f3:38:1e:32:c5:4b:12:cc:09:a0:d9:de:1c:c6:
         30:b0:b6:96:3a:3d:37:b3:a9:cf:f9:9c:bb:03:3d:cf:18:1d:
         5f:eb:40:b1:db:66:23:d0:6c:c5:71:3f:3a:79:40:2e:74:88:
         c0:6c:93:00:8f:ee:42:aa:e9:89:e9:01:cd:28:58:d0:31:b4:
         2d:7d:15:aa:9b:3d:8d:42:32:07:5b:10:fb:93:eb:8a:b1:06:
         bd:88:d1:4a:e7:5d:e4:2e:ab:26:df:12:40:cb:21:f7:28:b3:
         75:a4:15:ba:7b:62:9a:40:63:af:2f:43:37:9b:21:f2:f0:24:
         fb:41:6c:50:d1:bc:28:25:f8:5c:ff:3b:85:c9:62:97:d0:5b:
         6e:e5:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org