Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32332d3233203d3e20323731323934.roa
File:                     3230312e3232312e3131362e302f32332d3233203d3e20323731323934.roa (raw, json)
Hash identifier:          +FAR56VsrBSqwPh3U2OPDQkIc0t97O175A//Gqu4yfg=
Subject key identifier:   A9:22:E7:08:1F:DE:4A:96:FE:2D:90:D2:A6:D3:57:31:F3:D3:75:A2
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       0D54669A3293A13C5E9F53E7E7AD893856F28FCB
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32332d3233203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:36 +0000
ROA not before:           Wed 10 Jan 2024 12:40:36 +0000
ROA not after:            Wed 08 Jan 2025 12:45:36 +0000
asID:                     271294
IP address blocks:        201.221.116.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:54:66:9a:32:93:a1:3c:5e:9f:53:e7:e7:ad:89:38:56:f2:8f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:36 2024 GMT
            Not After : Jan  8 12:45:36 2025 GMT
        Subject: CN=A922E7081FDE4A96FE2D90D2A6D35731F3D375A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:9f:8f:4b:ed:69:5b:71:ae:de:0c:ff:86:
                    a5:d0:67:ef:d0:1f:ef:30:ab:0d:18:64:5e:74:5c:
                    b6:c7:18:2f:d5:79:a0:54:f8:09:b4:df:01:4f:69:
                    1f:0d:d8:60:05:ad:3d:1c:c3:f5:f8:15:60:c6:fe:
                    48:3e:6a:a7:d9:b1:fc:00:fd:dd:99:6f:29:01:a9:
                    27:56:5e:f1:2d:a3:05:93:72:d3:7e:08:d2:45:7b:
                    1d:21:e9:54:63:77:20:3d:f7:c8:b8:09:68:5d:5b:
                    fd:c8:ee:6d:a9:38:23:62:87:13:17:e9:57:66:7f:
                    4d:7b:ea:4d:0f:92:ca:29:13:58:cb:89:20:85:5e:
                    cd:55:53:77:74:7c:3d:f7:75:23:b6:47:aa:3a:66:
                    ec:c4:07:5b:28:ae:83:31:f6:91:db:de:0b:15:8e:
                    31:a3:96:25:f2:91:e3:57:c7:fd:fb:72:86:60:0f:
                    79:0b:a8:d6:52:82:16:89:55:4c:71:3a:06:79:d6:
                    a3:f3:2a:0d:97:46:09:53:9a:09:d4:a2:91:72:33:
                    d5:40:79:1c:f3:c8:59:1e:a9:da:2e:59:06:e6:7c:
                    b3:5a:93:39:f1:57:f2:a0:42:33:78:d4:db:82:83:
                    ee:98:dc:20:b9:99:f2:f1:0a:e5:52:1e:ca:24:d0:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:22:E7:08:1F:DE:4A:96:FE:2D:90:D2:A6:D3:57:31:F3:D3:75:A2
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32332d3233203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:59:75:18:90:4d:c9:ee:13:18:b6:00:f5:ba:57:bd:99:49:
         a8:77:b5:4c:2d:75:52:55:66:ad:a2:7e:3a:d1:ee:2e:c4:41:
         f7:8f:94:0e:ff:9f:58:b5:8b:2f:72:0e:4f:54:33:72:f1:26:
         ad:f5:51:7b:c1:3f:12:b6:a8:27:76:e4:d2:a6:6e:c0:0d:93:
         7b:e8:67:18:6d:cc:6a:89:74:f2:15:2e:73:64:69:6b:0f:87:
         ad:e8:81:05:a2:89:b9:57:3e:6e:5e:f8:8a:cc:32:c2:ce:ed:
         94:99:c0:0b:30:92:c8:83:85:23:f8:82:cd:69:ae:10:33:65:
         5c:f0:32:ea:a3:98:e8:5b:9b:3a:2f:00:ef:86:e4:a0:e6:9e:
         72:f6:37:ac:bc:9a:8d:29:41:8e:42:5d:7e:52:13:6e:ff:d1:
         7b:34:6d:c8:7e:7f:85:8f:2b:2d:74:3d:77:f7:46:0c:90:b2:
         64:a7:78:60:f6:10:56:87:5c:83:a6:ad:0c:40:f9:c1:96:88:
         f1:3b:2b:f6:78:9d:38:63:8b:06:a3:b8:27:b9:dc:f0:02:63:
         32:62:c9:52:64:9d:7c:c7:cd:01:99:48:5f:2b:4f:cf:cb:f8:
         c6:68:f5:56:3f:b3:09:32:72:e9:87:37:17:23:d9:02:e3:2c:
         73:a1:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org