Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
File:                     3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (raw, json)
Hash identifier:          KFEvRh2NORKZD3oavIrEEU4LRTDGJTC6dr3w13NAsnA=
Subject key identifier:   63:AB:A6:F7:6C:CB:6B:BE:4C:0B:80:10:A5:BC:68:02:A5:70:67:27
Certificate issuer:       /CN=4A652148ABBD2A28216F293F9FDB99E291A91E56
Certificate serial:       64837ED974307E24F23E9F976CA504EDE5AC7B48
Authority key identifier: 4A:65:21:48:AB:BD:2A:28:21:6F:29:3F:9F:DB:99:E2:91:A9:1E:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
Signing time:             Wed 20 Dec 2023 16:04:11 +0000
ROA not before:           Wed 20 Dec 2023 15:59:11 +0000
ROA not after:            Wed 18 Dec 2024 16:04:11 +0000
asID:                     271487
IP address blocks:        201.94.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:83:7e:d9:74:30:7e:24:f2:3e:9f:97:6c:a5:04:ed:e5:ac:7b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A652148ABBD2A28216F293F9FDB99E291A91E56
        Validity
            Not Before: Dec 20 15:59:11 2023 GMT
            Not After : Dec 18 16:04:11 2024 GMT
        Subject: CN=63ABA6F76CCB6BBE4C0B8010A5BC6802A5706727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:de:da:71:49:d0:9b:60:4c:be:57:b9:76:
                    f6:2d:ea:6b:7b:8b:72:50:ad:69:f6:19:4e:dc:9a:
                    4e:db:59:91:b2:a2:d0:08:4f:fd:3f:3c:ce:73:02:
                    44:07:fa:19:c6:8c:08:f8:b4:7c:c0:8c:bf:37:f1:
                    51:01:67:ef:0c:a2:5d:82:14:f5:81:87:04:cc:56:
                    12:f3:1e:22:75:23:ce:3a:90:dc:42:28:5b:2e:a5:
                    ca:61:34:28:4d:00:09:75:62:0c:39:72:76:93:c7:
                    e2:99:37:7a:62:28:50:2e:af:49:d4:ca:24:f8:58:
                    ae:e0:a2:d4:1e:32:a8:dc:ea:0c:3b:9e:40:fc:d4:
                    19:ec:48:8d:6a:8f:c9:f0:42:bb:95:86:4c:90:a1:
                    4e:72:95:93:b7:61:ac:9a:e7:28:3e:bc:78:ab:cc:
                    31:13:a3:d0:cd:3b:f8:13:de:4f:dd:0a:6d:fa:b0:
                    11:39:7a:d3:9a:e6:86:d6:3b:c6:03:9b:b2:26:96:
                    64:b0:20:32:28:a5:74:c7:f4:d6:7f:a6:9a:ad:68:
                    12:72:bf:41:2f:2a:14:fb:7d:05:a2:52:97:ab:72:
                    44:f0:57:92:de:84:bf:69:26:46:d2:06:c2:b2:22:
                    dd:c3:04:13:ff:ea:b5:ec:9d:44:ec:48:9b:69:f9:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:A6:F7:6C:CB:6B:BE:4C:0B:80:10:A5:BC:68:02:A5:70:67:27
            X509v3 Authority Key Identifier:
                keyid:4A:65:21:48:AB:BD:2A:28:21:6F:29:3F:9F:DB:99:E2:91:A9:1E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A652148ABBD2A28216F293F9FDB99E291A91E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/0/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:37:bf:e1:5d:77:43:3e:fc:b7:f4:2c:53:93:bb:de:0f:e2:
         ef:db:96:30:37:73:77:0f:69:95:ed:5c:7a:17:1c:07:06:f1:
         f2:bd:99:3d:b5:2a:70:28:65:f7:ff:65:26:07:95:40:c9:6e:
         ec:c7:d8:f3:c1:b8:d1:05:0f:6f:da:94:61:a3:a1:9f:63:bb:
         4b:f7:8e:f2:23:5b:16:e0:3f:6d:3f:aa:c7:50:ad:37:ac:03:
         81:35:2b:c0:07:a1:eb:16:9a:b6:e6:73:12:9d:b4:00:3e:0e:
         b1:e1:6e:41:ad:1a:7d:92:58:88:9d:fa:50:1e:27:80:cc:5f:
         8e:5d:e3:01:4e:6d:cd:a9:58:ee:4b:8c:10:d4:dd:f8:87:94:
         a3:64:70:4c:68:ed:70:90:c0:f3:54:32:0f:d7:40:74:78:54:
         ea:89:c3:e3:bb:8c:35:03:71:cf:fd:be:77:58:e9:32:f1:f1:
         fb:ae:a4:5a:98:c8:a2:ae:8d:87:43:b3:05:30:e9:d0:9d:d1:
         6f:aa:59:14:7b:4c:62:83:6d:cc:43:a9:56:88:50:66:63:4a:
         bc:33:6a:f3:5c:a8:ac:5b:b3:d5:90:cc:fd:34:bb:67:b7:e1:
         28:79:b2:90:87:06:af:1f:0b:6a:ea:36:1b:90:10:e1:da:5c:
         7f:01:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org