Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
File:                     3230312e35352e3139382e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          kXdboP6jb1B2b2+D87TcxXtt1zO2ypVqjhQQQxA4I6w=
Subject key identifier:   76:F6:23:48:FE:52:FC:BA:1E:55:FC:87:91:51:E5:0E:55:89:15:5F
Certificate issuer:       /CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
Certificate serial:       2436BBF4C461B403B9B8C7F87DCF5726A7EC7116
Authority key identifier: 71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
Signing time:             Fri 16 Feb 2024 13:19:47 +0000
ROA not before:           Fri 16 Feb 2024 13:14:47 +0000
ROA not after:            Fri 14 Feb 2025 13:19:47 +0000
asID:                     61792
IP address blocks:        201.55.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:36:bb:f4:c4:61:b4:03:b9:b8:c7:f8:7d:cf:57:26:a7:ec:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Validity
            Not Before: Feb 16 13:14:47 2024 GMT
            Not After : Feb 14 13:19:47 2025 GMT
        Subject: CN=3082010A0282010100D46807B389D69D5D2829771E6ADB4029632F1F727818A87CB9578396F2F82C1AFC35906069D3ACABDF34470FA271562A0291354069F5AE73499F99DD65FE533859A63D4C3D9B6BAD6BB484E55E07AEB96758E7F80093FD65D85EE2737A0FA067B413CC71E77359BCD4E809D69956C7E2315CE1001A9503FAA3F0FE99780C2B4FA3BEC6223E830517484AB879DCCE7D9F5AC5C7E74AA4E5A3E415A039DF1978FA071CC9BEE60B0C6ECBDB6CBE0CACA7439AC1F02BCD9F090DB0F8AB1602F286EF342938A72C26B261CAA2E6032A88FBC92A9782C6DFCDFFD5D6C6F19365F97E6F2565F0B13FDF37E53CF26C3432A7CCEEB5B5D09B886C3A44DE641B04AE15705D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:07:b3:89:d6:9d:5d:28:29:77:1e:6a:db:
                    40:29:63:2f:1f:72:78:18:a8:7c:b9:57:83:96:f2:
                    f8:2c:1a:fc:35:90:60:69:d3:ac:ab:df:34:47:0f:
                    a2:71:56:2a:02:91:35:40:69:f5:ae:73:49:9f:99:
                    dd:65:fe:53:38:59:a6:3d:4c:3d:9b:6b:ad:6b:b4:
                    84:e5:5e:07:ae:b9:67:58:e7:f8:00:93:fd:65:d8:
                    5e:e2:73:7a:0f:a0:67:b4:13:cc:71:e7:73:59:bc:
                    d4:e8:09:d6:99:56:c7:e2:31:5c:e1:00:1a:95:03:
                    fa:a3:f0:fe:99:78:0c:2b:4f:a3:be:c6:22:3e:83:
                    05:17:48:4a:b8:79:dc:ce:7d:9f:5a:c5:c7:e7:4a:
                    a4:e5:a3:e4:15:a0:39:df:19:78:fa:07:1c:c9:be:
                    e6:0b:0c:6e:cb:db:6c:be:0c:ac:a7:43:9a:c1:f0:
                    2b:cd:9f:09:0d:b0:f8:ab:16:02:f2:86:ef:34:29:
                    38:a7:2c:26:b2:61:ca:a2:e6:03:2a:88:fb:c9:2a:
                    97:82:c6:df:cd:ff:d5:d6:c6:f1:93:65:f9:7e:6f:
                    25:65:f0:b1:3f:df:37:e5:3c:f2:6c:34:32:a7:cc:
                    ee:b5:b5:d0:9b:88:6c:3a:44:de:64:1b:04:ae:15:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:23:48:FE:52:FC:BA:1E:55:FC:87:91:51:E5:0E:55:89:15:5F
            X509v3 Authority Key Identifier:
                keyid:71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:e4:88:65:55:fa:c9:62:6c:f0:4e:82:d1:c3:8d:ba:95:
         4a:62:c5:56:cc:30:a4:b6:6e:86:da:03:85:c8:50:d2:84:8b:
         af:c9:21:a5:77:23:b2:9d:49:86:cb:ad:dd:13:7e:7a:3e:98:
         ae:b6:5a:c3:7e:57:aa:a9:72:eb:ba:0e:45:79:99:41:c0:6e:
         29:c6:eb:79:67:df:2d:36:89:b0:4a:11:01:aa:80:93:2b:59:
         aa:5b:15:b2:99:69:ee:f0:5e:5c:49:34:75:73:ba:81:1a:dd:
         b2:17:7a:4c:95:3b:b1:a0:fa:f8:95:85:44:a8:ec:e7:57:4f:
         cb:09:fe:5d:88:7b:68:7b:b5:c7:ad:5b:8a:d4:d7:d6:3b:db:
         ee:9f:bd:0f:27:27:08:bd:3b:4e:39:e1:a3:f3:f2:9f:f2:a9:
         3d:c7:54:dd:c4:92:c3:e9:47:0a:42:63:3d:e8:fe:84:4a:4d:
         c5:86:cc:fd:19:b0:76:5d:d9:b5:91:3d:1d:76:ce:fb:57:0b:
         06:72:1c:89:ed:5a:28:5e:40:9d:f9:9d:c5:16:65:62:90:5c:
         cd:8f:0f:fc:0b:5c:de:71:32:31:e4:34:51:a3:5c:4b:f3:10:
         fb:7b:5a:90:c1:82:54:c4:23:2c:25:7b:b0:e1:c2:a7:02:0d:
         0f:df:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org