Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa
File:                     3230312e35352e3139362e302f32322d3232203d3e203631373932.roa (raw, json)
Hash identifier:          tZ/irtW5iQyfJjmjN0Z5prwtUEKL/b2hEpUUDYpYtf8=
Subject key identifier:   B4:9D:CE:38:96:45:52:42:40:C2:B1:47:B4:A9:66:1E:AB:A7:50:4E
Certificate issuer:       /CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
Certificate serial:       1C584AE276D8509D0B8066A94FBBB46B24B94FF5
Authority key identifier: 71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa
Signing time:             Fri 16 Feb 2024 13:19:47 +0000
ROA not before:           Fri 16 Feb 2024 13:14:47 +0000
ROA not after:            Fri 14 Feb 2025 13:19:47 +0000
asID:                     61792
IP address blocks:        201.55.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:4a:e2:76:d8:50:9d:0b:80:66:a9:4f:bb:b4:6b:24:b9:4f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Validity
            Not Before: Feb 16 13:14:47 2024 GMT
            Not After : Feb 14 13:19:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:cb:c7:10:df:69:2b:06:c3:89:24:22:7b:
                    85:54:9f:ff:39:bb:95:a3:02:fa:0d:fd:28:06:31:
                    4f:40:3c:44:dd:8d:ec:60:b4:a9:d0:9a:66:6b:b9:
                    a3:f4:2c:de:32:04:c7:da:64:51:15:58:15:d0:fa:
                    a9:36:08:38:17:50:0b:68:36:5e:fb:1a:1e:d0:a2:
                    98:45:e1:f0:92:9c:b1:83:8b:84:e5:49:1e:4f:2a:
                    f9:d3:e4:dc:29:2c:93:7c:46:b7:4f:28:47:0f:d4:
                    29:be:28:a8:3f:83:4f:4e:18:60:ea:a5:2b:8b:d9:
                    cc:18:d5:cb:5e:8c:05:bc:e7:3a:42:c8:90:bd:01:
                    41:7c:11:dc:0a:66:d6:ee:bf:a3:ce:b2:94:7a:d8:
                    b6:87:c7:b3:0d:a9:b1:5b:f0:a3:c0:30:42:d9:d3:
                    7e:38:4b:7d:b4:8a:5b:d2:02:81:f4:a7:4d:c1:cc:
                    7d:c2:57:e0:b6:2f:b7:42:81:30:c2:67:c1:dc:c5:
                    dd:4a:90:75:1f:e8:e2:a2:e1:fe:03:48:d7:f9:4f:
                    ff:1d:3c:e4:9a:3d:57:1d:18:c9:ef:12:3e:f2:ad:
                    bc:db:c6:c0:c9:6b:75:a6:b7:75:a9:7d:f7:e8:e7:
                    95:44:24:33:46:4d:85:7a:51:ed:50:93:86:d4:d8:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:CE:38:96:45:52:42:40:C2:B1:47:B4:A9:66:1E:AB:A7:50:4E
            X509v3 Authority Key Identifier:
                keyid:71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139362e302f32322d3232203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:1e:13:79:f6:37:10:1d:0c:fa:3c:79:56:01:0c:c4:59:
         12:c9:5e:84:d7:f5:09:4d:26:74:8d:54:8f:d1:ef:58:f8:11:
         21:1d:d9:88:e9:d0:18:da:82:63:66:dc:0a:cd:aa:d6:45:65:
         8f:5d:f1:55:23:8f:3c:7c:16:fb:fa:7e:98:a5:79:04:5d:51:
         92:87:38:4b:98:e7:ea:1b:79:33:aa:63:3a:2a:24:be:5e:65:
         4a:77:08:5e:61:11:bc:03:bd:7c:12:32:92:7d:f2:35:b4:26:
         23:b6:ae:18:4c:9f:b8:3d:ee:36:15:06:94:1c:a4:74:b7:94:
         c2:fb:67:ce:d4:5b:67:fa:8d:d6:55:90:ff:a8:cb:31:ff:9e:
         08:0a:e1:6f:7f:9b:f5:03:4a:d8:fb:45:0c:c9:71:e8:d8:94:
         48:fe:e0:57:7f:8b:a8:32:a4:70:a0:a7:a8:43:9c:35:50:88:
         55:44:f1:a4:1c:57:fd:d0:30:db:b1:b5:c0:3b:94:0f:10:03:
         c2:42:10:e4:d7:8d:e3:43:28:0c:e3:48:9e:38:63:37:5b:30:
         a8:8c:a3:ff:54:9f:1a:fe:c3:da:04:c4:1c:ac:45:86:e4:3f:
         63:b8:71:4d:cc:41:30:03:fa:cc:f1:b9:53:46:4e:a2:29:a8:
         26:31:2c:48
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHFhK4nbYUJ0LgGapT7u0ayS5T/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExOERCQjZGNDE5QUMxOTU3Q0QyMDNBMEJFMTA4RkJD
OTVEMEMwNDAeFw0yNDAyMTYxMzE0NDdaFw0yNTAyMTQxMzE5NDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NBRkNCQzcxMERGNjkyQjA2
QzM4OTI0MjI3Qjg1NTQ5RkZGMzlCQjk1QTMwMkZBMERGRDI4MDYzMTRGNDAzQzQ0
REQ4REVDNjBCNEE5RDA5QTY2NkJCOUEzRjQyQ0RFMzIwNEM3REE2NDUxMTU1ODE1
RDBGQUE5MzYwODM4MTc1MDBCNjgzNjVFRkIxQTFFRDBBMjk4NDVFMUYwOTI5Q0Ix
ODM4Qjg0RTU0OTFFNEYyQUY5RDNFNERDMjkyQzkzN0M0NkI3NEYyODQ3MEZENDI5
QkUyOEE4M0Y4MzRGNEUxODYwRUFBNTJCOEJEOUNDMThENUNCNUU4QzA1QkNFNzNB
NDJDODkwQkQwMTQxN0MxMURDMEE2NkQ2RUVCRkEzQ0VCMjk0N0FEOEI2ODdDN0Iz
MERBOUIxNUJGMEEzQzAzMDQyRDlEMzdFMzg0QjdEQjQ4QTVCRDIwMjgxRjRBNzRE
QzFDQzdEQzI1N0UwQjYyRkI3NDI4MTMwQzI2N0MxRENDNURENEE5MDc1MUZFOEUy
QTJFMUZFMDM0OEQ3Rjk0RkZGMUQzQ0U0OUEzRDU3MUQxOEM5RUYxMjNFRjJBREJD
REJDNkMwQzk2Qjc1QTZCNzc1QTk3REY3RThFNzk1NDQyNDMzNDY0RDg1N0E1MUVE
NTA5Mzg2RDREODk3MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzK/LxxDfaSsGw4kkInuFVJ//ObuVowL6Df0oBjFPQDxE3Y3sYLSp
0Jpma7mj9CzeMgTH2mRRFVgV0PqpNgg4F1ALaDZe+xoe0KKYReHwkpyxg4uE5Uke
Tyr50+TcKSyTfEa3TyhHD9QpviioP4NPThhg6qUri9nMGNXLXowFvOc6QsiQvQFB
fBHcCmbW7r+jzrKUeti2h8ezDamxW/CjwDBC2dN+OEt9tIpb0gKB9KdNwcx9wlfg
ti+3QoEwwmfB3MXdSpB1H+jiouH+A0jX+U//HTzkmj1XHRjJ7xI+8q2828bAyWt1
prd1qX336OeVRCQzRk2FelHtUJOG1NiXOQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLSdzjiWRVJCQMKxR7SpZh6rp1BOMB8GA1UdIwQYMBaAFHEY27b0GawZV80gOgvh
CPvJXQwEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N6RnE0VUVmYmN3TGt0
cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAvNzExOERCQjZGNDE5QUMx
OTU3Q0QyMDNBMEJFMTA4RkJDOTVEMEMwNC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MTE4REJCNkY0MTlBQzE5NTdDRDIwM0EwQkUxMDhGQkM5NUQw
QzA0LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DekZxNFVFZmJjd0xrdHBlWmhm
eW9TUHFpbUdoeExRTVZONDh4YWJhOVI1Ti8wLzMyMzAzMTJlMzUzNTJlMzEzOTM2
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM3MzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsk3
xDANBgkqhkiG9w0BAQsFAAOCAQEAAKUeE3n2NxAdDPo8eVYBDMRZEslehNf1CU0m
dI1Uj9HvWPgRIR3ZiOnQGNqCY2bcCs2q1kVlj13xVSOPPHwW+/p+mKV5BF1Rkoc4
S5jn6ht5M6pjOiokvl5lSncIXmERvAO9fBIykn3yNbQmI7auGEyfuD3uNhUGlByk
dLeUwvtnztRbZ/qN1lWQ/6jLMf+eCArhb3+b9QNK2PtFDMlx6NiUSP7gV3+LqDKk
cKCnqEOcNVCIVUTxpBxX/dAw27G1wDuUDxADwkIQ5NeN40MoDONInjhjN1swqIyj
/1SfGv7D2gTEHKxFhuQ/Y7hxTcxBMAP6zPG5U0ZOoimoJjEsSA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org