Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3230312e3134302e3232302e302f32322d3234203d3e203631373934.roa
File:                     3230312e3134302e3232302e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier:          FiBxEJzrVs4LgHJ8xC4rHMbjzMt5uMnxmiLfrDPBEgE=
Subject key identifier:   99:0C:7B:DE:C4:87:4D:54:3B:32:2A:29:99:F8:65:F8:4C:FC:6D:28
Certificate issuer:       /CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
Certificate serial:       499C3220A50D130258F806AB662DD24DCFE58EEA
Authority key identifier: DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3230312e3134302e3232302e302f32322d3234203d3e203631373934.roa
Signing time:             Mon 16 Oct 2023 11:14:59 +0000
ROA not before:           Mon 16 Oct 2023 11:09:59 +0000
ROA not after:            Mon 14 Oct 2024 11:14:59 +0000
asID:                     61794
IP address blocks:        201.140.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9c:32:20:a5:0d:13:02:58:f8:06:ab:66:2d:d2:4d:cf:e5:8e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496
        Validity
            Not Before: Oct 16 11:09:59 2023 GMT
            Not After : Oct 14 11:14:59 2024 GMT
        Subject: CN=990C7BDEC4874D543B322A2999F865F84CFC6D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:c6:fc:2a:8c:98:2d:e1:79:c7:16:a3:10:
                    63:86:d8:e3:c2:4c:54:9d:30:75:f0:ad:be:31:60:
                    2f:50:e7:6c:cf:a5:1a:72:91:23:5b:d2:2c:12:f1:
                    c9:90:de:95:62:6b:e1:8b:f4:bb:69:62:f5:32:97:
                    0e:0a:3d:ce:fa:03:63:a6:cd:79:b2:29:cb:50:08:
                    9f:7e:0e:1b:5e:07:9c:3a:36:51:e8:4e:86:42:d5:
                    1f:47:98:40:f8:06:fc:3f:67:72:d9:b1:a1:b7:40:
                    57:51:40:dc:2a:7a:9b:68:85:ef:3f:2f:2c:37:f4:
                    6d:74:95:21:35:9c:ae:4c:6d:a1:a6:5f:84:c5:2c:
                    49:f6:b8:58:0a:8f:62:31:ca:1c:69:4b:3a:1c:f3:
                    9d:59:6b:11:4b:6c:d5:64:1f:9e:5e:73:49:b0:f1:
                    82:21:7d:9f:41:5b:d4:70:7b:55:fc:18:a3:2a:16:
                    ef:f5:8f:6f:b2:0d:48:31:be:71:5e:e7:5b:d8:2c:
                    ec:9b:0f:42:36:1b:95:df:0d:00:a2:c2:e4:b6:0e:
                    16:e2:f6:53:3f:b8:62:c3:a4:8d:9d:bd:a1:ef:72:
                    b1:47:5d:99:32:42:7f:0d:c0:80:89:ab:2c:39:25:
                    12:d6:1f:18:98:b7:d8:d8:63:86:4b:2e:10:bb:12:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:7B:DE:C4:87:4D:54:3B:32:2A:29:99:F8:65:F8:4C:FC:6D:28
            X509v3 Authority Key Identifier:
                keyid:DA:0F:D3:FE:50:2E:3E:A1:9C:7F:7A:BF:80:BA:C7:B3:94:CD:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA0FD3FE502E3EA19C7F7ABF80BAC7B394CDF496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Deax9mc8xUtqkAiwvevBHoeqnEFQci7cEHv3x7m1BFnY/0/3230312e3134302e3232302e302f32322d3234203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:55:6a:db:dc:45:aa:12:9c:a4:54:dc:b4:65:4c:e4:ef:ee:
         1a:c6:d3:e2:8f:e8:13:65:31:d2:ee:79:40:b5:5f:57:34:f5:
         bb:ed:10:be:53:3d:92:5e:15:d7:20:b8:cd:11:de:7f:ed:75:
         aa:6f:5e:f9:f2:59:a4:ed:b8:7a:ae:2a:dd:2b:b8:01:6c:7b:
         95:e2:a4:0d:08:2a:bd:93:33:0d:86:a3:ad:34:80:e7:14:88:
         26:5a:ff:49:84:6a:c9:15:51:a6:ef:2d:56:55:30:5c:b3:a6:
         0b:c0:33:d2:02:af:cb:93:3c:26:30:fa:81:77:7e:3e:ac:4e:
         9c:7d:c1:26:77:64:e5:d1:a2:25:e3:fe:32:0d:f4:af:22:f7:
         f6:7c:fd:31:b5:9b:2e:a0:22:2a:74:be:f4:8f:59:37:93:2c:
         3d:59:79:be:6c:1b:09:4e:21:0c:55:6f:9d:ce:c3:9b:eb:3c:
         ed:42:d4:29:3a:61:47:0d:25:74:4b:f7:34:e2:a4:7e:5e:08:
         96:75:a6:40:ce:28:4a:78:ba:91:eb:6b:b6:4d:cc:f5:64:a1:
         60:c9:54:88:15:52:c6:84:03:01:14:64:e2:8e:ae:85:f2:62:
         21:e2:55:a9:87:a9:49:ea:50:a2:f2:e8:4e:16:fa:e6:7d:fd:
         3e:22:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org