Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135382e302f32342d3234203d3e203631383133.roa
File:                     3230312e3135392e3135382e302f32342d3234203d3e203631383133.roa (raw, json)
Hash identifier:          oAm8j+uKKq+CGQO0lB4MtxXh+uwCY241deXlgeh+BA0=
Subject key identifier:   F9:60:A9:BF:A8:6B:7B:F8:E2:C3:63:F9:EC:87:F3:2F:4D:A6:D9:AB
Certificate issuer:       /CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
Certificate serial:       47E8561373BB90D10D8C1E01C34D63CABF045EE2
Authority key identifier: F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135382e302f32342d3234203d3e203631383133.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61813
IP address blocks:        201.159.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e8:56:13:73:bb:90:d1:0d:8c:1e:01:c3:4d:63:ca:bf:04:5e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=F960A9BFA86B7BF8E2C363F9EC87F32F4DA6D9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:54:05:62:71:f1:eb:3f:da:ca:53:97:c1:
                    3b:f6:c8:b4:28:b4:3c:61:78:79:4b:7d:0f:83:f6:
                    20:20:86:53:12:b4:2f:8a:91:bf:7c:25:8f:3a:0f:
                    12:27:ce:0b:b5:e6:f5:44:15:1b:f9:e3:a0:f9:c7:
                    7c:9a:11:9f:d9:00:9d:e2:d5:6a:aa:08:4a:f0:a5:
                    8e:67:f3:17:9c:3b:42:0c:23:7d:c2:80:a2:f3:db:
                    eb:cb:1e:eb:dd:e0:5a:c8:9a:a1:41:a8:90:73:bb:
                    72:76:3d:f3:e2:31:ae:51:89:be:dc:99:b2:53:90:
                    43:4a:f4:1a:ff:46:43:30:85:de:ff:12:b2:a3:24:
                    58:d8:52:cf:0f:b4:3d:e4:e7:07:9e:c4:b5:50:28:
                    b9:ca:4b:6d:7b:f7:8b:ee:0f:52:06:04:f0:e3:8b:
                    dc:47:4b:5a:16:ed:f6:74:92:79:8d:e3:60:6d:16:
                    3d:00:2a:02:87:e4:dd:51:0a:fb:83:77:38:60:01:
                    99:42:80:cc:c4:96:61:8b:00:4e:c5:d6:67:b1:30:
                    eb:5b:d0:6b:a9:5b:83:60:23:8e:4c:35:65:a2:a0:
                    8e:c2:8b:7e:67:31:94:5b:fb:0d:73:05:e8:b4:9a:
                    e9:7d:23:ba:25:f9:80:ff:8f:42:7e:ea:e8:f5:f5:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:60:A9:BF:A8:6B:7B:F8:E2:C3:63:F9:EC:87:F3:2F:4D:A6:D9:AB
            X509v3 Authority Key Identifier:
                keyid:F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3230312e3135392e3135382e302f32342d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:5c:0c:1b:7d:db:6a:a0:f3:d6:67:fa:14:63:a8:32:bd:
         af:4b:99:c7:9d:3f:50:cd:12:12:99:08:ad:f2:b0:a8:d0:a4:
         28:db:3e:56:c3:d0:38:5e:8b:bd:35:be:c9:cf:16:9d:1a:58:
         49:9b:e8:80:65:d1:c5:4d:55:95:61:a1:29:2f:80:97:fb:aa:
         c5:ab:1d:20:19:38:43:e6:d8:c2:e1:61:a8:42:73:9e:65:cb:
         29:56:34:df:3d:dd:49:09:45:37:c1:62:4f:a1:6e:35:93:c5:
         98:08:39:7e:5f:09:17:1c:f9:9f:3c:14:31:b1:f1:13:97:08:
         6a:e2:f0:db:0b:fb:2c:b1:b5:35:da:2f:bb:bf:ca:41:c5:d4:
         e1:30:7a:0c:dc:8e:57:3c:d3:45:09:56:20:01:08:44:8f:89:
         c2:24:46:2b:f8:c0:81:6d:3e:dd:d5:12:fa:c9:1f:8d:67:fc:
         62:b0:e8:f5:63:18:44:48:d3:ae:67:1e:1e:a1:2e:b0:a0:6d:
         04:5a:20:16:b2:fb:e1:c3:a4:5e:37:3d:2e:e9:6e:ff:8b:1e:
         c0:a8:0b:28:74:f6:d8:a6:50:ac:21:c4:ae:71:15:60:e8:9f:
         88:d2:ee:a3:cc:f7:28:5a:0d:ce:55:35:72:34:a2:12:7d:a2:
         44:dd:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org