Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139392e302f32342d3234203d3e203631373932.roa
File:                     3230312e35352e3139392e302f32342d3234203d3e203631373932.roa (raw, json)
Hash identifier:          W1yrHstqi7VtuALbvK0yrcOr1fJl0FmjP9y0KCAGjlI=
Subject key identifier:   16:8F:F8:01:96:D4:44:8E:1E:4A:72:B4:00:2B:BE:66:11:B3:1B:98
Certificate issuer:       /CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
Certificate serial:       62204545F63A0DE8F27EF6D92F5B5DB3ABB67AEA
Authority key identifier: 71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139392e302f32342d3234203d3e203631373932.roa
Signing time:             Fri 16 Feb 2024 13:19:47 +0000
ROA not before:           Fri 16 Feb 2024 13:14:47 +0000
ROA not after:            Fri 14 Feb 2025 13:19:47 +0000
asID:                     61792
IP address blocks:        201.55.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:20:45:45:f6:3a:0d:e8:f2:7e:f6:d9:2f:5b:5d:b3:ab:b6:7a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7118DBB6F419AC1957CD203A0BE108FBC95D0C04
        Validity
            Not Before: Feb 16 13:14:47 2024 GMT
            Not After : Feb 14 13:19:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:6b:3b:5c:b3:86:24:d1:e1:2a:6f:d7:44:
                    f8:c8:9d:e0:b5:fe:e2:87:51:4f:87:bd:4c:0b:cb:
                    f2:a6:c9:c9:dc:60:24:fe:ac:16:b8:d4:70:5c:bc:
                    e9:14:df:7d:e7:58:46:bc:41:5a:55:af:b0:62:0c:
                    7b:dc:2b:c5:88:f2:6f:2e:8b:20:b6:d5:1a:34:8c:
                    4e:65:12:eb:91:54:90:56:5c:2b:5c:7f:c5:53:2f:
                    7d:96:b7:0d:51:20:36:d7:f8:d4:c6:f3:7b:08:dc:
                    97:05:32:22:ba:ba:98:7c:e1:29:5b:4a:bb:ef:1d:
                    6c:02:fd:5a:8c:99:01:8e:91:33:ca:df:2b:5d:74:
                    3d:67:69:c7:54:5f:3f:ef:99:3f:46:8a:a4:ba:6b:
                    52:72:05:18:0e:82:5c:9b:8c:a2:98:6e:14:3d:3e:
                    1f:b4:16:5e:4a:89:a9:d3:29:9f:5d:d7:11:b9:bf:
                    eb:07:9e:b1:48:8f:1c:44:51:94:38:3e:16:c5:e2:
                    39:14:5e:e8:63:8f:cd:82:92:29:d2:5a:05:92:9c:
                    08:3f:38:cd:b3:7c:88:74:91:79:47:d6:9b:e9:7c:
                    1b:e0:4c:30:f9:de:ea:ed:d0:32:b5:6d:dc:1a:8c:
                    8f:64:da:bd:19:72:e7:48:1d:9a:ff:fb:d2:25:79:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:F8:01:96:D4:44:8E:1E:4A:72:B4:00:2B:BE:66:11:B3:1B:98
            X509v3 Authority Key Identifier:
                keyid:71:18:DB:B6:F4:19:AC:19:57:CD:20:3A:0B:E1:08:FB:C9:5D:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7118DBB6F419AC1957CD203A0BE108FBC95D0C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139392e302f32342d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:48:31:cb:b6:9c:af:f6:a8:aa:b5:aa:1e:21:75:07:b1:
         49:a9:f9:01:9b:47:f1:e5:2f:99:fc:d4:4f:2b:75:99:13:d4:
         0c:59:f0:cf:4c:9d:dc:f1:bb:30:01:b3:52:07:bf:24:8c:d7:
         ab:b0:a2:ee:36:3a:f2:7e:8d:15:f3:a1:89:53:bd:96:4d:f1:
         e3:d7:63:69:ac:4d:2e:79:ab:d3:5f:ba:95:85:21:ab:75:4c:
         c2:03:dd:f5:58:ab:38:5e:34:01:0a:d1:e3:b6:d0:f4:ca:4d:
         07:c9:ec:cb:d6:12:b5:53:b9:92:54:10:b3:05:0f:5a:4b:5c:
         d2:25:47:6f:22:e0:54:1e:18:9a:77:4d:56:09:6a:62:7d:93:
         7a:6d:19:da:c3:68:0e:90:38:46:7b:b5:8c:4d:07:7f:1c:77:
         07:e9:4c:e0:ea:65:3f:e1:1f:54:45:3c:9f:22:4b:01:17:3e:
         e1:c6:08:7b:77:c0:5b:3c:2e:7d:4c:ed:aa:b9:92:aa:cd:5c:
         23:54:51:89:13:90:47:9e:8b:bb:bd:09:8d:6d:80:26:8e:20:
         0c:42:bc:1e:e6:02:6e:37:f8:dd:21:de:de:83:7b:bc:88:cb:
         68:2e:43:72:c1:84:b9:46:81:79:79:66:e0:27:21:57:5a:fd:
         10:06:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org