Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131372e302f32342d3234203d3e20323731323934.roa
File:                     3230312e3232312e3131372e302f32342d3234203d3e20323731323934.roa (raw, json)
Hash identifier:          qkVyuC1prGyDPRY3qw6aRa/ZXYYrHRX/Lfl93/G93Z4=
Subject key identifier:   39:0B:ED:DC:97:B1:2B:36:C6:B6:F3:DE:06:73:45:ED:7E:53:10:CA
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       2FC8EEF5584BC38121506CFD42C8D13D3023B8E5
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131372e302f32342d3234203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:41 +0000
ROA not before:           Wed 10 Jan 2024 12:40:41 +0000
ROA not after:            Wed 08 Jan 2025 12:45:41 +0000
asID:                     271294
IP address blocks:        201.221.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:ee:f5:58:4b:c3:81:21:50:6c:fd:42:c8:d1:3d:30:23:b8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:41 2024 GMT
            Not After : Jan  8 12:45:41 2025 GMT
        Subject: CN=390BEDDC97B12B36C6B6F3DE067345ED7E5310CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:81:78:ac:00:79:f3:f9:44:ff:9c:7d:37:
                    fc:48:0c:53:1a:05:de:4d:10:8c:20:51:f8:d9:bc:
                    0b:41:6b:88:2d:23:65:c6:fb:25:f4:47:ef:0c:82:
                    be:f2:0f:2b:fc:95:c1:37:5f:5c:59:35:b1:8d:cc:
                    06:1e:85:aa:6a:f7:37:84:18:c1:5d:49:a3:a8:36:
                    f7:69:70:d3:1a:8c:6d:f8:8a:89:a6:f0:eb:3b:b1:
                    4f:77:a4:a9:9c:6e:5a:9b:9b:69:32:d9:8c:ab:23:
                    83:fc:cd:86:d3:d1:af:4a:ae:49:88:e5:ca:be:46:
                    62:99:fe:31:38:5e:99:89:97:9d:b2:55:8e:9f:6b:
                    c7:d6:5b:3c:c6:df:1c:17:ee:7b:52:de:21:c6:20:
                    21:6b:ab:4c:af:06:dd:af:3a:d1:2b:98:f6:1c:9f:
                    df:2b:83:98:7c:47:65:54:c4:1a:23:3e:57:7d:c6:
                    e2:c8:26:48:74:87:9a:3f:3e:c8:6f:6f:c3:2b:89:
                    17:b9:ec:0e:c8:be:4e:0a:d4:8e:e2:0e:cb:02:55:
                    28:c8:6e:07:59:18:76:95:2a:ee:70:7b:f4:28:08:
                    d1:4f:c3:9c:7c:b3:b6:da:83:d7:a6:be:e7:33:70:
                    85:ed:13:17:6d:5e:a9:76:65:a7:27:fc:b9:86:e5:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:ED:DC:97:B1:2B:36:C6:B6:F3:DE:06:73:45:ED:7E:53:10:CA
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131372e302f32342d3234203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:32:4c:10:e6:7e:79:9c:81:01:47:da:67:50:8d:44:ab:ff:
         9b:01:c0:88:3e:e6:ae:1c:9b:f1:f8:ea:37:df:54:a9:4c:2b:
         17:05:be:bd:fc:76:0f:e7:a1:6f:02:10:df:45:c9:0b:c3:88:
         c5:1e:7f:91:9d:74:2c:4e:a3:5a:fc:32:ca:59:ac:60:d0:30:
         f6:ac:36:44:09:81:ab:b1:47:ad:33:4d:2c:38:b4:82:ba:de:
         1a:6c:8d:64:9f:42:97:c4:b3:de:37:73:ee:2e:35:c2:0b:61:
         71:f9:71:f8:4e:7b:93:03:41:14:6a:db:50:29:20:0e:77:21:
         53:45:81:dc:cb:a0:44:ed:fe:cd:4d:e8:e1:b8:f0:39:a6:5f:
         46:d9:8c:72:cf:42:0b:b4:fb:b0:3a:66:69:95:f5:4b:43:a9:
         9f:64:e5:96:f0:d7:a9:b5:11:ff:40:ff:75:94:58:6e:77:bf:
         88:86:a0:9c:de:d9:2b:61:52:d8:75:4a:2a:b7:4e:64:1e:f4:
         f7:b6:2f:ef:30:c9:62:9f:87:a3:e9:a9:50:83:49:63:45:93:
         a7:f6:f7:1f:78:97:ff:cf:5a:1a:84:05:aa:e3:05:69:d0:b4:
         39:8b:0a:d2:53:d0:0b:35:43:f3:16:09:b5:5e:af:ce:af:54:
         c7:c0:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org