Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135362e302f32342d3234203d3e203631383133.roa
File:                     3230312e3135392e3135362e302f32342d3234203d3e203631383133.roa (raw, json)
Hash identifier:          Xeaz4TgM9fxIFzzFqeViJEnVt+5VkTKJO98Dv1eo6SU=
Subject key identifier:   80:B5:7E:53:BC:88:12:9F:7C:1C:7D:69:36:7A:B0:2B:76:6A:F2:A4
Certificate issuer:       /CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
Certificate serial:       2CDFD1F1E5862C0A07A8D36E3B74134B27EC7ECA
Authority key identifier: F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135362e302f32342d3234203d3e203631383133.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     61813
IP address blocks:        201.159.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:d1:f1:e5:86:2c:0a:07:a8:d3:6e:3b:74:13:4b:27:ec:7e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=80B57E53BC88129F7C1C7D69367AB02B766AF2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:f6:9a:8d:4d:1e:81:c1:0e:80:e5:73:71:
                    eb:a5:c5:73:d2:12:bd:bc:55:8a:88:e0:1c:89:34:
                    4b:c6:bd:9c:d0:b9:c7:63:ac:82:8b:f1:c3:be:87:
                    a9:6d:70:22:14:20:0b:f6:17:ee:7a:69:15:4c:fd:
                    6b:7d:56:03:7c:77:f9:11:00:13:02:64:e8:f3:01:
                    37:d5:cd:79:dc:2e:68:76:29:97:58:74:fb:46:32:
                    bd:2e:46:27:e4:f2:8c:eb:86:40:81:90:ce:79:15:
                    52:aa:da:78:e6:d4:fe:8d:bc:cc:6d:5c:76:ba:48:
                    ce:7d:0b:7e:fd:d9:ce:80:94:bc:1f:4d:d2:d4:89:
                    84:09:13:04:0c:27:18:f4:f9:02:80:25:8a:7b:cc:
                    ae:5b:03:97:c0:b7:4a:05:4d:91:9e:64:02:8c:0c:
                    7f:d2:b6:1f:c5:16:ad:2f:0e:8a:91:79:d6:87:8a:
                    a1:39:50:01:85:74:66:3c:af:fd:15:41:1c:56:8b:
                    46:6e:32:40:da:d2:bb:03:77:1f:0f:cf:02:f4:8c:
                    7d:c0:26:b6:29:9e:a1:00:18:12:8c:d4:d6:9e:c9:
                    66:68:1f:7c:e3:26:c9:ca:78:1b:f2:d6:b4:53:70:
                    f9:f4:d6:70:6b:bf:b1:af:fa:8c:b5:c6:ae:c9:56:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:7E:53:BC:88:12:9F:7C:1C:7D:69:36:7A:B0:2B:76:6A:F2:A4
            X509v3 Authority Key Identifier:
                keyid:F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135362e302f32342d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b1:e4:08:26:86:5e:39:c8:98:ef:2e:45:24:ee:dc:f6:b8:
         da:85:af:70:72:e3:29:df:23:d7:40:7c:51:fb:98:5a:99:84:
         db:6c:1f:b0:4e:31:c0:6b:a4:ea:76:97:88:c9:fe:f7:7e:5d:
         20:87:51:02:b2:58:87:82:d0:f0:50:89:e2:a1:99:f6:2e:ed:
         d1:1a:7e:c6:b0:e2:40:f6:8e:fb:23:50:85:1e:8a:de:26:fb:
         4e:f0:6f:d1:22:fc:74:9c:1c:84:d8:ac:d7:4d:fb:21:5a:1b:
         dd:cb:9b:4f:72:64:2f:c2:2b:72:3f:6d:66:d4:dd:74:41:f7:
         7d:8e:5e:34:0e:38:a8:04:ef:5c:20:c6:5a:fc:2f:58:88:14:
         43:e4:8f:52:81:d7:ed:0e:8b:85:3e:f2:0b:1b:91:bf:4f:a1:
         7e:47:53:1a:d5:69:0e:02:09:06:82:fe:2b:c9:39:15:61:c7:
         44:e7:37:9f:a7:8a:90:40:5b:f1:00:b2:7d:03:d2:60:81:50:
         03:89:4a:af:0b:4c:ad:98:80:5e:65:f0:28:16:61:cc:38:be:
         94:f3:fd:97:e7:a5:e2:1e:d7:24:3b:0e:a5:70:4a:44:4d:fa:
         9f:93:8f:8e:be:a8:bd:9a:64:cc:fe:36:87:86:3d:37:0a:d6:
         88:1a:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org