Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131382e302f32332d3233203d3e20323731323934.roa
File:                     3230312e3232312e3131382e302f32332d3233203d3e20323731323934.roa (raw, json)
Hash identifier:          kIRIyWHhth2FVhS95cHZP7NWlL8yELYKcTmFHI7i7h4=
Subject key identifier:   1C:A6:92:41:41:E9:1B:D3:77:78:5E:E0:51:66:63:77:16:1B:79:FF
Certificate issuer:       /CN=DD3E7B838121B434E340680D66319BE2A1861311
Certificate serial:       65027FB0BB8EBBC4D52520CCC4A1DFD6BD755F34
Authority key identifier: DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131382e302f32332d3233203d3e20323731323934.roa
Signing time:             Wed 10 Jan 2024 12:45:45 +0000
ROA not before:           Wed 10 Jan 2024 12:40:45 +0000
ROA not after:            Wed 08 Jan 2025 12:45:45 +0000
asID:                     271294
IP address blocks:        201.221.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:02:7f:b0:bb:8e:bb:c4:d5:25:20:cc:c4:a1:df:d6:bd:75:5f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3E7B838121B434E340680D66319BE2A1861311
        Validity
            Not Before: Jan 10 12:40:45 2024 GMT
            Not After : Jan  8 12:45:45 2025 GMT
        Subject: CN=1CA6924141E91BD377785EE051666377161B79FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:b8:be:c5:f0:04:c0:b8:e4:7e:6e:c1:91:
                    aa:6b:10:b5:60:bd:21:82:c5:a8:fc:e5:c3:5b:40:
                    45:80:33:e1:52:31:1e:f0:f5:61:27:06:ea:51:7c:
                    9c:9f:34:94:22:8a:5a:2f:1b:64:58:54:77:b6:db:
                    c4:19:3b:cb:2c:b6:2d:28:41:68:f6:1f:73:ab:67:
                    5e:64:b9:29:cc:7e:90:68:a7:60:02:a3:61:8a:05:
                    b4:28:94:c6:35:3c:8b:7b:6b:92:9e:aa:1f:3f:a8:
                    13:72:ad:24:11:cc:b4:a5:86:24:d8:e5:96:6b:c6:
                    49:7c:f6:85:f3:95:03:7c:ad:ce:b2:bb:46:57:04:
                    c3:b7:a7:70:84:33:ae:0a:77:cd:d5:06:a7:b2:c0:
                    87:d3:78:27:c0:19:e3:12:ac:11:79:11:01:51:72:
                    3f:b7:27:c6:65:6f:e2:66:ab:e2:87:f8:01:e0:be:
                    85:64:69:46:c3:40:67:86:b9:8f:c0:7a:88:51:5d:
                    54:3d:ba:f5:d1:1e:23:3f:8b:87:40:9b:ff:98:bd:
                    b8:3a:21:fe:21:89:e9:e8:de:bf:49:91:6f:fa:6c:
                    aa:7b:b1:3b:7c:82:4e:45:52:9a:c6:a1:22:64:97:
                    bb:ed:a7:40:72:c9:f2:8a:e3:bd:06:10:30:b5:ca:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A6:92:41:41:E9:1B:D3:77:78:5E:E0:51:66:63:77:16:1B:79:FF
            X509v3 Authority Key Identifier:
                keyid:DD:3E:7B:83:81:21:B4:34:E3:40:68:0D:66:31:9B:E2:A1:86:13:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/DD3E7B838121B434E340680D66319BE2A1861311.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD3E7B838121B434E340680D66319BE2A1861311.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/3230312e3232312e3131382e302f32332d3233203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:07:42:98:d7:2d:b5:83:c8:e1:4e:8e:af:7c:7d:74:11:75:
         de:c8:6a:71:e0:5e:cd:4f:7f:eb:e6:a7:51:d5:33:35:b8:30:
         a4:96:23:0a:8e:2c:b7:41:f9:90:18:8d:e1:f8:84:8f:48:8c:
         00:9e:03:c8:84:a9:87:35:24:98:96:9e:df:1d:8f:07:e5:9b:
         35:a4:92:41:bc:41:4f:16:95:25:85:9c:b8:a3:20:c2:b2:ab:
         20:98:3e:16:e3:71:c0:18:b4:29:fa:f5:2b:e2:10:d0:d5:e7:
         f8:39:7d:3d:e5:1e:0e:f6:bd:6b:81:93:24:c6:50:5a:0c:9c:
         a0:e5:a7:18:c0:10:b4:68:45:3d:26:13:42:67:ab:32:f1:f9:
         c8:03:0d:1e:db:60:ee:28:5d:18:55:57:8b:a6:23:46:c3:0e:
         2f:a4:8d:fa:d0:86:5c:1b:0b:78:a1:1a:36:de:d9:ca:7a:1a:
         86:66:60:11:3f:da:57:3b:73:63:c9:44:d5:c1:b2:27:38:25:
         06:2a:37:62:9c:f3:c6:fa:74:32:6c:bf:d9:ea:da:0a:02:94:
         06:7c:e2:ca:04:15:53:2f:07:48:79:82:a6:1a:8f:9a:ab:ec:
         ba:f8:0a:1c:73:68:fc:84:02:aa:8e:93:5c:ed:fe:76:84:7e:
         fd:e5:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org