Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135372e302f32342d3234203d3e203631383133.roa
File:                     3230312e3135392e3135372e302f32342d3234203d3e203631383133.roa (raw, json)
Hash identifier:          O4lbTynPxPugE62GkmV63Z5CnoSBdteQGKbP4F+IQ00=
Subject key identifier:   EA:CD:51:84:BA:FB:01:D3:1E:30:8B:82:E3:B6:CB:0C:AB:0C:EA:30
Certificate issuer:       /CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
Certificate serial:       3C0F41828CA35467CBB8097AE3727D2085BCD235
Authority key identifier: F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135372e302f32342d3234203d3e203631383133.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61813
IP address blocks:        201.159.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0f:41:82:8c:a3:54:67:cb:b8:09:7a:e3:72:7d:20:85:bc:d2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=EACD5184BAFB01D31E308B82E3B6CB0CAB0CEA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:69:98:00:69:2e:07:e3:7f:30:94:52:73:
                    b0:c0:a2:28:9d:fc:36:fb:86:e2:87:ba:19:d9:11:
                    2a:ff:7c:e8:09:c6:99:7b:ea:8a:61:27:b8:3e:c8:
                    5c:6a:65:29:b0:d8:cd:31:3f:fd:d1:35:11:c0:60:
                    34:bc:d0:02:a3:f5:50:20:00:08:30:1a:15:ef:4a:
                    51:d9:e6:db:82:64:f3:8b:76:ce:dd:2e:63:9e:0e:
                    f5:48:3b:46:32:24:dc:22:ad:aa:67:c7:0f:8a:55:
                    88:20:44:51:46:5d:52:20:33:69:f6:77:27:a2:d2:
                    0d:b2:5e:60:83:dd:98:47:37:7d:2c:58:41:c5:cd:
                    55:02:d0:c9:b5:43:7c:73:7c:7d:00:f1:85:c6:4d:
                    63:d2:84:42:80:42:4e:22:0d:ba:ce:d5:73:ef:ca:
                    fa:ce:6a:4c:9b:46:40:bd:5c:5d:82:55:96:65:ad:
                    81:e2:44:1a:19:72:a3:33:9e:1b:98:bd:64:4c:46:
                    9d:93:f1:1a:84:4d:0d:63:0d:08:f3:2d:db:b8:c6:
                    0d:20:36:eb:93:79:d8:51:99:6b:ad:f2:66:0b:40:
                    88:05:f3:cc:a0:da:b7:a5:13:7d:97:87:1e:9e:f9:
                    29:32:93:16:5e:fe:87:da:ab:ca:8f:37:e3:04:e2:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CD:51:84:BA:FB:01:D3:1E:30:8B:82:E3:B6:CB:0C:AB:0C:EA:30
            X509v3 Authority Key Identifier:
                keyid:F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135372e302f32342d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:8d:6f:3e:53:a1:88:66:b6:70:59:91:5a:59:44:4c:eb:
         e2:95:9b:cb:ae:c5:f6:30:be:ef:49:50:59:46:b1:07:bc:40:
         47:1f:0d:31:b1:59:3e:87:20:6e:d2:87:ef:45:91:8e:5d:9c:
         63:fe:c6:8c:d1:f8:29:1b:f6:9a:89:c4:72:47:f2:46:fa:01:
         d2:09:1e:89:90:8f:95:ea:e8:bd:8c:a2:65:15:2f:bd:d0:26:
         f7:d2:ca:a8:31:75:0b:76:00:92:12:16:50:d9:1a:e8:3b:31:
         38:54:a2:2b:54:ca:1a:08:a1:59:29:07:10:e0:8c:c7:7e:f1:
         16:48:f9:5f:c6:47:c6:0b:49:79:34:60:43:66:74:e9:83:51:
         11:83:c0:f1:d2:73:e5:22:18:9e:71:e0:2a:36:7b:0f:03:ae:
         91:a2:b2:03:83:a8:02:66:5b:f1:47:75:13:6d:bf:9a:f0:74:
         e1:ad:85:f2:70:bd:f7:f2:1a:f8:5a:5b:d4:90:69:b1:3e:ec:
         15:5c:40:ad:34:e7:30:ea:c5:f2:12:20:37:2b:5d:e9:4f:f3:
         54:b9:8d:e1:9b:2e:04:ec:6e:c4:bd:83:fe:8c:e3:be:6d:ce:
         1f:68:0e:a9:b0:30:59:67:fb:ff:94:18:ab:07:2a:e2:28:04:
         c0:7f:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org