Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32342d3234203d3e20323731303435.roa
File:                     3230312e35342e3138362e302f32342d3234203d3e20323731303435.roa (raw, json)
Hash identifier:          rEDRSkXiAAdiyiVvQJk/xTmsZCu8T3PR46z32Kbj3zk=
Subject key identifier:   67:79:A3:97:D3:32:C8:F7:F2:88:15:74:A5:A0:5A:D5:BD:8E:5A:C1
Certificate issuer:       /CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
Certificate serial:       2A21BAD14338B65BAA23685F393824FF9E04EF59
Authority key identifier: 64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32342d3234203d3e20323731303435.roa
Signing time:             Thu 14 Jul 2022 20:44:57 +0000
ROA not before:           Thu 14 Jul 2022 20:39:57 +0000
ROA not after:            Thu 13 Jul 2023 20:44:57 +0000
asID:                     271045
IP address blocks:        201.54.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:21:ba:d1:43:38:b6:5b:aa:23:68:5f:39:38:24:ff:9e:04:ef:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644502B8FE18AC1B411B40E7ABAB3959C1F76DD0
        Validity
            Not Before: Jul 14 20:39:57 2022 GMT
            Not After : Jul 13 20:44:57 2023 GMT
        Subject: CN=6779A397D332C8F7F2881574A5A05AD5BD8E5AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:97:44:bf:8a:bf:ae:48:fc:5c:79:ab:f0:
                    43:e0:4c:5e:b1:d8:bd:12:c8:2c:cb:05:39:32:7a:
                    a4:ed:32:ef:8e:51:a6:31:8a:58:91:56:b9:b6:65:
                    83:f9:30:d6:1c:50:b2:ea:10:e8:ea:82:4f:c6:0e:
                    ad:90:58:cc:ba:ba:90:40:21:5a:09:9b:d5:f3:9e:
                    03:41:47:20:ac:0c:35:07:35:e5:43:fd:c1:c7:4a:
                    b0:d6:0c:75:20:2b:7c:ba:5d:11:0d:ac:bd:83:12:
                    b0:62:f5:56:52:f8:88:6a:31:1f:f2:fd:ca:17:7b:
                    f7:45:4e:84:db:96:08:b6:1b:5e:39:ec:28:a5:37:
                    d9:88:17:de:db:ff:33:49:79:5a:75:94:d6:d4:f6:
                    11:1a:bb:ec:c5:92:0b:ef:b8:d4:70:a8:28:83:cd:
                    54:42:ed:a3:9c:e5:e1:3d:cd:bc:69:52:56:0c:da:
                    4e:5d:41:1a:ce:c3:96:79:e6:cd:4b:8f:fd:41:e6:
                    ab:db:fb:aa:c5:ee:09:cf:11:3f:0e:21:e7:24:54:
                    eb:0b:fb:eb:8e:15:73:26:7b:60:02:a4:34:98:e1:
                    68:cf:29:16:0f:ed:32:62:47:74:39:bf:e4:fd:8f:
                    63:09:46:62:9c:d8:2a:8d:45:b4:b4:f5:80:58:f5:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:A3:97:D3:32:C8:F7:F2:88:15:74:A5:A0:5A:D5:BD:8E:5A:C1
            X509v3 Authority Key Identifier:
                keyid:64:45:02:B8:FE:18:AC:1B:41:1B:40:E7:AB:AB:39:59:C1:F7:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644502B8FE18AC1B411B40E7ABAB3959C1F76DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DcHVwdnpbXkKGmh2VJ88bKNc38687WMxsYKgcox19Geg/0/3230312e35342e3138362e302f32342d3234203d3e20323731303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:09:d8:d5:47:ab:20:dd:a1:a2:d5:7c:b1:23:50:51:8d:dc:
         26:fa:7e:f0:8b:ae:5e:57:4e:b4:f6:07:5d:33:d9:43:2f:d6:
         82:6f:96:59:23:5a:dd:70:0d:77:7b:1f:aa:78:af:f8:22:08:
         75:b2:ba:bf:1f:10:ff:01:09:3d:d1:19:51:6c:54:54:f6:64:
         a7:cd:fc:67:d9:4a:f9:7b:84:b7:03:4e:5d:c6:a9:1f:79:cb:
         b0:db:65:e1:fe:d1:e0:0d:a2:4a:41:7c:24:98:f3:15:96:4b:
         0e:0f:b8:8c:21:47:cf:43:78:36:6d:0d:12:56:88:d0:39:8e:
         81:2d:cf:f9:55:25:d6:5c:d9:59:55:ed:25:e2:18:35:87:6e:
         34:44:80:03:83:f8:47:62:d6:ca:72:ed:dd:af:dc:ca:f3:11:
         76:62:5b:97:e9:af:5c:da:8d:6c:00:e6:39:49:06:60:10:e0:
         8e:9a:d5:cf:8c:50:51:03:cb:bd:ae:5c:42:2e:c5:67:9d:ae:
         62:57:4b:b1:22:e4:e7:65:e7:37:69:81:19:b1:b0:67:94:4d:
         31:bb:f5:eb:a5:f0:8a:2a:45:01:93:20:a4:e2:a0:5c:9f:d4:
         18:c3:81:f0:95:80:28:33:d6:df:ed:7f:f3:97:22:da:c0:7e:
         6c:0c:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org