Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa
File:                     AS61946.roa (raw, json)
Hash identifier:          mfCV2vk0baSyvLGcEi8rer8HZCoz9tgnX3zsv333UxM=
Subject key identifier:   80:99:EE:CA:5E:8D:E8:05:DE:82:2A:8F:8A:A1:53:EE:26:64:8D:8D
Certificate issuer:       /CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
Certificate serial:       213071A440D2471316CDFCD95ABD12EDA16B5F11
Authority key identifier: 3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa
Signing time:             Tue 02 Apr 2024 23:13:31 +0000
ROA not before:           Tue 02 Apr 2024 23:08:31 +0000
ROA not after:            Tue 01 Apr 2025 23:13:31 +0000
asID:                     61946
IP address blocks:        201.139.184.0/21 maxlen: 21
                          201.139.184.0/23 maxlen: 23
                          201.139.186.0/23 maxlen: 23
                          201.139.188.0/23 maxlen: 23
                          201.139.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:30:71:a4:40:d2:47:13:16:cd:fc:d9:5a:bd:12:ed:a1:6b:5f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D40CF30F71728D13ED1EDA1B87700FA2696DD
        Validity
            Not Before: Apr  2 23:08:31 2024 GMT
            Not After : Apr  1 23:13:31 2025 GMT
        Subject: CN=8099EECA5E8DE805DE822A8F8AA153EE26648D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:ee:27:73:ca:50:53:07:8c:bf:02:de:fa:
                    7d:22:d6:a8:2a:7e:26:c2:85:ed:e1:0b:83:cd:6f:
                    c2:d4:e7:33:4c:d3:45:2d:0a:4f:95:1f:3f:39:3b:
                    08:e8:f0:44:10:94:25:bb:ee:ba:79:47:d0:e7:10:
                    36:4c:97:b0:e8:eb:63:36:bc:95:a0:5c:88:b8:be:
                    84:be:91:38:6c:67:41:d4:a8:f6:37:67:76:83:47:
                    72:05:d5:40:e6:52:c1:c4:39:d6:d5:b0:b8:41:3a:
                    a1:e4:29:21:16:dd:94:2b:b8:e8:27:5a:34:97:57:
                    48:64:78:d3:36:32:2d:a2:6f:a7:31:fa:a5:7c:b5:
                    a5:79:25:2f:9e:a8:8f:fe:d7:21:4a:14:70:24:1e:
                    1e:51:3d:f4:75:a5:67:60:23:27:ad:5d:56:26:09:
                    ea:02:30:1c:3a:25:96:82:51:46:19:cd:a5:08:38:
                    bc:e1:ea:ca:d7:92:68:02:29:92:d9:b5:dd:ff:b3:
                    99:98:14:3e:6e:53:49:22:2b:67:1f:15:2b:68:3c:
                    f4:a1:6f:a1:26:74:9d:0b:98:70:80:e4:e1:af:d8:
                    25:7c:f4:32:17:58:ab:a0:64:f0:a3:7e:14:da:53:
                    f6:21:31:0f:0c:5a:cf:3e:89:f2:d4:42:2d:0d:fe:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:EE:CA:5E:8D:E8:05:DE:82:2A:8F:8A:A1:53:EE:26:64:8D:8D
            X509v3 Authority Key Identifier:
                keyid:3D:5D:40:CF:30:F7:17:28:D1:3E:D1:ED:A1:B8:77:00:FA:26:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D5D40CF30F71728D13ED1EDA1B87700FA2696DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/AS61946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:38:d1:3f:26:9c:be:61:ee:82:f3:25:6e:36:96:61:67:9f:
         c5:80:92:d1:01:38:8b:f2:38:23:61:24:b2:c5:ab:ec:ed:dd:
         a3:e4:9d:fb:f9:b4:ae:f4:83:6c:89:2c:0e:61:c8:3a:dd:07:
         5e:77:cd:21:d4:ac:ab:d6:ef:fd:76:a6:b6:f7:05:4c:d9:e1:
         72:0e:d1:d4:54:e0:50:7e:da:de:9f:18:78:70:8e:b0:79:e1:
         30:47:69:b4:82:a4:d4:58:5d:58:69:4e:c3:5c:d1:6c:64:83:
         40:f2:d4:8d:97:19:c0:d0:74:52:95:9b:fb:b3:bf:4c:94:50:
         a2:41:64:6b:47:be:df:31:d7:16:47:5b:a7:cc:da:58:e9:c0:
         8d:79:d7:bc:0f:61:50:5b:d2:de:c5:e1:2c:30:6e:3f:6a:ce:
         a2:9d:02:8e:01:72:71:94:62:39:09:7b:f3:97:a6:96:d8:39:
         53:56:c3:08:b7:fa:a2:36:dd:c3:60:f1:c8:c0:1d:17:45:fb:
         3d:b5:fb:fc:bc:3a:ae:2b:07:a3:3b:a8:46:d3:d7:4a:d9:47:
         8c:47:ca:29:fb:c7:cb:c4:21:bc:21:5b:6a:d2:f0:82:bc:83:
         ea:9c:ec:80:81:99:b4:92:5d:c4:b8:f0:f1:fb:1e:33:dc:bb:
         2a:c2:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org