Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130322e302f32342d3234203d3e203631383332.roa
File:                     3230312e3134382e3130322e302f32342d3234203d3e203631383332.roa (raw, json)
Hash identifier:          947mBK/sAAenRgTGKve0FfrRyL/hYvCZxJTRSJX4zKA=
Subject key identifier:   D2:D6:A6:C8:42:EC:E6:A1:15:65:19:DC:DB:74:5B:BD:90:86:2C:5E
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7F865A4242BCDA9B88D78BC531990A0E72E210C8
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130322e302f32342d3234203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     61832
IP address blocks:        201.148.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:5a:42:42:bc:da:9b:88:d7:8b:c5:31:99:0a:0e:72:e2:10:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=D2D6A6C842ECE6A1156519DCDB745BBD90862C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:72:e0:a7:f5:0d:84:e7:01:bc:7d:99:3f:
                    49:f3:90:39:e3:98:f3:1e:95:26:b2:80:6a:14:8c:
                    40:56:69:bf:96:56:14:32:ef:e0:fe:fb:f7:87:ba:
                    d4:b7:8b:06:d3:5c:4c:92:eb:dc:b4:5d:d6:f3:30:
                    e7:7d:98:62:88:44:80:24:ea:b1:30:d3:65:16:70:
                    a7:02:66:33:1f:1b:e8:84:99:c6:68:8e:1b:d6:b9:
                    be:a2:e2:21:4b:4b:12:4c:11:41:e5:b7:87:17:45:
                    e0:dc:fd:75:5d:25:ee:39:16:a1:4c:26:06:49:65:
                    c5:dd:e9:9a:ec:e1:4f:6f:bf:4d:9d:ac:69:74:c4:
                    69:18:ed:30:0d:a9:08:04:de:e9:88:8d:a5:30:b0:
                    db:6a:de:30:e6:1e:ce:12:09:23:e7:ad:ed:c7:b2:
                    56:d9:22:08:7d:ad:c7:64:63:61:2e:70:b9:87:d3:
                    93:c5:0a:cd:3c:1e:aa:d4:be:e0:55:eb:cf:46:61:
                    69:b3:b3:12:18:80:ff:f0:36:e8:b0:40:05:29:8e:
                    95:10:f7:e8:8d:d1:f8:22:8d:38:d4:fd:99:97:cb:
                    9d:a9:f5:b4:8e:e0:18:8e:24:43:b8:a4:a4:ae:14:
                    8e:75:a3:01:3c:cc:0c:65:23:2d:78:1f:d8:19:8f:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:A6:C8:42:EC:E6:A1:15:65:19:DC:DB:74:5B:BD:90:86:2C:5E
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130322e302f32342d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:38:a8:0b:dc:f5:4b:4c:bb:dc:08:d2:95:62:a1:50:b8:86:
         69:98:5c:83:6e:23:cd:e6:9d:67:6a:be:68:22:b9:2f:1d:6b:
         8e:66:77:d4:70:cf:d8:26:3f:60:ad:a2:5f:60:9d:50:00:0a:
         62:99:22:8d:d0:ab:be:fd:c6:cd:57:56:2d:c1:12:11:5e:e6:
         59:ed:dd:9b:fc:04:8c:42:9c:47:2b:ca:c1:8a:98:1e:ee:ef:
         5c:d5:ca:63:46:62:95:c7:99:6e:97:75:37:e5:f0:12:33:6e:
         4e:fd:ff:74:52:e8:74:7a:05:00:f5:02:ff:84:37:dc:b9:a1:
         21:99:d4:98:fa:8a:e2:a5:09:70:8c:93:2a:cc:1c:54:49:2e:
         56:38:30:ea:11:b3:f1:cf:2d:ab:6b:35:83:68:52:df:b6:33:
         ab:25:a0:cc:86:d3:96:11:72:ba:a6:3a:d8:38:33:eb:3e:21:
         c7:07:e9:9e:25:21:5e:88:0f:6a:f3:f5:14:7e:c3:eb:e0:61:
         ae:df:e2:63:5c:1f:7c:3a:c0:2f:4d:a2:c0:cc:f4:ea:ca:30:
         17:1a:71:48:46:12:05:8f:aa:9f:cc:85:70:e3:b6:e6:7d:fd:
         0f:b8:dc:c0:c0:cb:01:31:74:ed:74:87:f6:83:13:b6:59:c3:
         80:77:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org