Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32332d3233203d3e203631383336.roa
File:                     3230312e372e3231382e302f32332d3233203d3e203631383336.roa (raw, json)
Hash identifier:          33GoVwHCpD/6p+MGYVeLw703Wl9g7SmM/cn7dPESTGg=
Subject key identifier:   85:B6:E8:BA:82:46:27:E4:0E:A8:27:C4:71:AE:94:79:FA:6A:61:9F
Certificate issuer:       /CN=02947886CEA206731DA1BF481BFF69013A8848A6
Certificate serial:       50D233F80BB70BA686EC16D9415F9EB265BB73DB
Authority key identifier: 02:94:78:86:CE:A2:06:73:1D:A1:BF:48:1B:FF:69:01:3A:88:48:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02947886CEA206731DA1BF481BFF69013A8848A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32332d3233203d3e203631383336.roa
Signing time:             Tue 30 Aug 2022 01:11:09 +0000
ROA not before:           Tue 30 Aug 2022 01:06:09 +0000
ROA not after:            Tue 29 Aug 2023 01:11:09 +0000
asID:                     61836
IP address blocks:        201.7.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d2:33:f8:0b:b7:0b:a6:86:ec:16:d9:41:5f:9e:b2:65:bb:73:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02947886CEA206731DA1BF481BFF69013A8848A6
        Validity
            Not Before: Aug 30 01:06:09 2022 GMT
            Not After : Aug 29 01:11:09 2023 GMT
        Subject: CN=85B6E8BA824627E40EA827C471AE9479FA6A619F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:b9:91:0d:9f:6a:29:cb:af:1b:b6:11:c9:
                    61:13:87:ee:73:bf:5d:50:19:63:6a:02:a5:58:39:
                    96:6e:e6:27:3b:3b:0e:04:e3:b6:56:a8:84:dc:f0:
                    3c:1a:93:a2:01:1b:74:67:a6:2f:3c:a9:05:21:11:
                    06:49:aa:c0:46:2f:52:f4:07:4c:25:6c:07:c8:c1:
                    a2:c0:e1:48:08:51:92:3f:a0:09:58:d6:e3:4f:89:
                    2d:fd:32:16:0f:c5:8f:aa:d6:4d:48:bb:d7:54:c6:
                    58:ab:5c:9f:b8:e3:05:ed:70:34:9b:21:c3:e7:fb:
                    49:7a:4a:62:57:b3:d3:f0:dd:37:39:85:ab:0c:e4:
                    39:49:ee:af:c1:74:73:43:ed:1f:c9:7d:44:d2:f3:
                    d5:b5:64:2f:cf:7f:4e:57:e4:e4:e0:f7:24:a1:2e:
                    56:1f:b9:ca:17:24:cd:4c:38:98:0d:8d:b2:de:67:
                    46:5c:2e:40:75:2a:32:5b:a8:75:77:f1:65:92:b6:
                    a8:ad:79:c6:a4:c5:51:a7:0a:dc:07:3f:00:4b:0a:
                    0d:ff:b1:38:fb:bf:3f:9e:9c:3b:f2:23:7b:d6:0b:
                    ec:8b:31:ab:19:17:db:d3:13:79:d6:1c:fe:3e:0f:
                    65:8c:5d:9d:ff:d9:6c:ff:0f:80:35:6a:76:fb:7f:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B6:E8:BA:82:46:27:E4:0E:A8:27:C4:71:AE:94:79:FA:6A:61:9F
            X509v3 Authority Key Identifier:
                keyid:02:94:78:86:CE:A2:06:73:1D:A1:BF:48:1B:FF:69:01:3A:88:48:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/02947886CEA206731DA1BF481BFF69013A8848A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/02947886CEA206731DA1BF481BFF69013A8848A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgSByf9ZmDpytRbUdiwck29v8keZ2u3isULUZP2G9icP/0/3230312e372e3231382e302f32332d3233203d3e203631383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:cb:5d:23:7e:1f:e4:a6:17:b9:0c:6e:44:ff:74:d6:a6:
         77:d2:d9:83:72:d5:fc:a7:a6:4a:0a:a9:7f:9e:d1:60:ef:41:
         d2:40:5e:44:df:5c:45:55:ce:78:bd:73:25:78:84:1e:3c:79:
         f6:00:fe:ad:45:19:93:8b:4f:ce:d2:31:6e:c6:08:83:05:ab:
         e2:77:7c:15:a2:3d:90:3f:c6:ea:fd:55:e1:5b:22:26:d2:65:
         2d:c2:58:55:fd:c3:63:42:f5:84:84:d5:53:94:5e:bc:76:e2:
         5f:3b:ee:a8:04:2d:f5:f5:2f:1a:92:8f:99:b1:6e:9c:28:a8:
         53:57:76:55:6e:86:4f:6a:23:64:cf:9d:17:bc:f9:18:2f:20:
         e0:9a:fd:a8:3a:a2:6f:75:dc:3e:79:5f:fe:b9:e5:18:cd:3f:
         71:b9:47:af:b3:0a:2a:22:d8:d8:3b:2a:c5:54:1e:70:8d:34:
         af:71:9d:3e:82:91:ee:8b:b5:3e:1e:ac:fc:85:a7:cb:1a:3b:
         7a:14:67:58:c3:22:b2:b9:b6:f6:c0:ca:93:64:98:2f:ed:f1:
         c3:bb:9b:f1:e9:1b:1a:1e:d9:a8:48:61:63:3b:fb:a8:2a:4a:
         a4:c3:5d:fc:7c:d5:94:e1:0b:59:72:57:1f:51:19:93:88:a4:
         a2:2f:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org