Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32322d3232203d3e20323731323934.roa
File:                     3230312e3232312e3131362e302f32322d3232203d3e20323731323934.roa (raw, json)
Hash identifier:          rqCaVh1FV4L+JnPgs2fFG8BcONry76dmWqW8G17uwNk=
Subject key identifier:   45:77:4C:48:F9:99:56:87:44:6C:54:33:2C:D0:4F:5F:07:E5:AD:D2
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       54CEDB3EAA21A61423DE305DA41C3573D31B2744
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32322d3232203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:20 +0000
ROA not before:           Wed 10 Jan 2024 12:40:20 +0000
ROA not after:            Wed 08 Jan 2025 12:45:20 +0000
asID:                     271294
IP address blocks:        201.221.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ce:db:3e:aa:21:a6:14:23:de:30:5d:a4:1c:35:73:d3:1b:27:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:20 2024 GMT
            Not After : Jan  8 12:45:20 2025 GMT
        Subject: CN=45774C48F9995687446C54332CD04F5F07E5ADD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:ac:e9:67:0f:59:fa:a6:4c:87:4d:d9:52:
                    80:3c:54:52:6d:fd:13:b5:21:47:0c:95:9d:8d:c0:
                    e5:5a:aa:24:84:86:85:5a:d5:12:19:e6:66:33:de:
                    64:84:e4:2d:35:19:07:72:06:cb:7c:7f:a2:c0:09:
                    e5:28:ed:44:6c:c8:83:d7:2b:38:ab:21:57:c9:65:
                    34:90:08:cd:4d:b1:83:81:2b:29:12:8b:49:4e:96:
                    d1:13:45:15:e6:58:c2:7d:f7:05:4e:1a:80:8c:64:
                    ba:57:cc:61:ff:da:47:0c:5a:c3:45:5b:0d:d7:86:
                    cd:17:ee:b1:13:79:e4:8c:c9:70:21:65:02:a5:33:
                    a8:28:56:85:9f:44:12:24:96:5a:cf:fa:97:44:30:
                    bf:b9:76:b3:eb:00:27:40:85:06:20:be:99:7e:51:
                    e9:ce:d2:f5:eb:2d:82:e8:c4:07:67:c8:69:33:21:
                    21:c5:82:ee:a9:37:10:8e:92:99:ef:5f:f9:bc:e9:
                    e2:3d:c9:9d:1d:6c:c2:05:62:5f:05:a8:b9:df:fa:
                    ee:e3:52:f3:1b:95:23:71:41:43:0c:28:5b:11:43:
                    a4:c2:95:fc:fc:27:2b:64:00:35:cb:10:b6:c0:04:
                    04:c6:21:76:ca:b2:8a:70:5d:b5:fa:24:03:af:f6:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:77:4C:48:F9:99:56:87:44:6C:54:33:2C:D0:4F:5F:07:E5:AD:D2
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32322d3232203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:be:0a:01:45:60:71:7f:fa:02:07:30:2b:d7:3e:f5:1e:
         5f:cd:e0:ab:88:43:d7:f3:78:a0:ff:c2:72:ae:90:41:fc:b6:
         3c:2e:40:10:21:7f:dd:c2:e9:58:12:14:24:03:03:f6:9b:25:
         1e:da:12:7a:c1:b2:8a:75:e0:13:a8:c0:6e:19:57:15:3a:3c:
         94:3a:b8:25:86:4c:d2:22:54:4a:7a:20:78:98:0a:8b:30:8b:
         ee:cc:71:b6:91:c5:74:0c:85:fa:e0:1d:29:57:fb:88:03:fa:
         27:cb:74:d0:9d:fe:09:20:cb:05:54:7d:22:4f:4c:56:6a:8f:
         20:60:3c:f9:41:9e:07:79:e5:17:56:30:b4:8a:42:1d:ac:1d:
         6a:8f:96:0d:0d:4f:d8:e9:f6:16:1d:c9:18:2c:91:96:dc:6b:
         da:f1:26:b0:3c:0b:4c:c8:c6:8f:c1:5a:4a:12:5c:7f:df:c2:
         99:4f:d4:4c:ff:ff:96:6d:2b:b5:23:b9:b3:af:ea:ae:2c:0f:
         d7:ff:1b:16:ef:0a:23:76:4d:a1:79:99:b9:da:5c:37:5c:ce:
         2b:58:a4:2a:ca:39:12:c0:ef:bc:df:a0:36:7b:68:b1:e9:91:
         6e:f7:a7:c5:77:5e:39:6e:d7:f9:dd:82:09:37:74:97:88:14:
         38:27:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org