Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32342d3234203d3e20323731323934.roa
File:                     3230312e3232312e3131362e302f32342d3234203d3e20323731323934.roa (raw, json)
Hash identifier:          +LV5Cp93ZjUDZfOsK8NCWIg7dr7+rTDLkPq0LjWaFxE=
Subject key identifier:   9C:15:22:51:FB:AE:31:06:2D:AC:D0:2D:DE:EE:D6:AE:B6:A1:4F:C9
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       04CA1666DAC91A6BEB580060C1FF8AD3D4D3B2E3
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32342d3234203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:39 +0000
ROA not before:           Wed 10 Jan 2024 12:40:39 +0000
ROA not after:            Wed 08 Jan 2025 12:45:39 +0000
asID:                     271294
IP address blocks:        201.221.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ca:16:66:da:c9:1a:6b:eb:58:00:60:c1:ff:8a:d3:d4:d3:b2:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:39 2024 GMT
            Not After : Jan  8 12:45:39 2025 GMT
        Subject: CN=9C152251FBAE31062DACD02DDEEED6AEB6A14FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:82:cb:11:77:00:48:89:63:53:99:db:7a:
                    05:0c:be:43:49:a7:15:ec:fe:6e:18:9d:e8:90:00:
                    9d:a7:42:e5:d6:bc:0e:e0:2f:f7:57:6a:a3:91:d7:
                    33:c3:a4:56:7b:98:3d:1b:26:d3:c7:88:d0:d2:e1:
                    3b:5f:6d:05:76:e5:6e:7b:96:25:8f:dd:f9:21:55:
                    f6:a5:36:73:e8:35:a3:cb:a6:ee:8d:11:00:4e:d5:
                    c9:77:e0:c5:c0:e5:a6:87:54:bb:df:e0:4b:b6:9c:
                    9e:21:a0:9b:c0:75:69:dc:29:b7:d3:b5:56:7a:e8:
                    4d:0f:12:06:e1:18:bd:7a:c0:9e:c4:a4:b5:83:15:
                    80:a3:69:f5:d1:2f:09:26:87:6e:19:31:47:f9:a8:
                    18:df:b7:68:3c:83:32:c5:ca:13:22:39:e0:59:e8:
                    16:17:bb:42:50:c1:6e:ae:8b:71:6c:4a:ee:6f:a9:
                    05:8f:ca:02:05:7d:60:8e:4a:87:8e:df:97:05:f8:
                    31:52:64:76:80:12:20:57:a5:97:49:8f:c7:24:99:
                    c9:a0:b2:c0:b7:36:e2:99:e2:1f:b3:9b:a6:a9:ce:
                    bc:71:c7:6f:14:a2:02:30:78:7e:07:78:3a:da:63:
                    de:a5:f4:2b:ca:db:8c:25:d8:45:1f:66:5c:d3:43:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:15:22:51:FB:AE:31:06:2D:AC:D0:2D:DE:EE:D6:AE:B6:A1:4F:C9
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131362e302f32342d3234203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:01:c7:6c:2c:3f:89:40:2a:60:5b:b3:2e:dd:ae:96:f5:
         c9:a8:f9:fa:33:7f:0d:6a:ef:f6:e0:01:7e:a6:2b:c1:64:98:
         ba:cf:eb:d5:44:fd:23:22:e9:d3:ad:b7:b7:2c:a3:d9:c6:97:
         0a:0b:bd:33:6e:eb:aa:4c:00:b6:21:cf:03:07:98:5c:9a:17:
         ad:5f:d6:1c:f0:ef:3a:ef:08:56:2b:2f:40:9d:49:4b:65:24:
         87:03:d5:9a:71:38:4d:4c:67:a8:c8:82:8a:c1:be:0c:eb:1c:
         85:65:09:90:18:ec:ef:0f:19:9f:e8:f9:da:6d:f0:a3:d9:68:
         98:f1:84:79:fb:4c:6e:73:16:29:4d:2a:a8:5a:e9:2c:50:f1:
         53:73:0b:a0:24:4f:b6:07:6c:08:76:98:77:de:d7:65:ef:a7:
         9c:ad:82:df:6a:29:3b:a7:4b:15:94:a2:7c:0b:08:5b:2f:8b:
         40:92:38:0b:5a:3b:27:cb:c5:4b:2a:3e:94:d6:c0:18:41:79:
         3c:a6:ee:f8:75:97:e8:4b:03:1a:78:43:3c:ad:80:e1:08:f8:
         40:a6:be:e8:b6:32:53:72:16:be:02:74:15:89:2d:bc:25:35:
         fe:c1:69:09:26:f4:67:1a:86:5f:c2:46:5e:4f:d9:45:f4:96:
         e1:c8:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org