Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa
File:                     3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          E2qg+rAYvPkryywF8W1Cn9SgxVcc/5zNY11d+naeXL8=
Subject key identifier:   19:0D:A2:FA:4F:0B:BB:CD:FF:73:EF:21:AB:DC:EA:4B:7B:2D:61:BD
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       409B9CD4C50F811B9969DFDDFFDF430EDDF4DE2B
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa
Signing time:             Wed 01 Nov 2023 13:00:00 +0000
ROA not before:           Wed 01 Nov 2023 12:55:00 +0000
ROA not after:            Wed 30 Oct 2024 13:00:00 +0000
asID:                     262952
IP address blocks:        201.148.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:9c:d4:c5:0f:81:1b:99:69:df:dd:ff:df:43:0e:dd:f4:de:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Nov  1 12:55:00 2023 GMT
            Not After : Oct 30 13:00:00 2024 GMT
        Subject: CN=190DA2FA4F0BBBCDFF73EF21ABDCEA4B7B2D61BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:82:29:bf:e2:47:10:00:4d:96:c4:50:13:
                    51:11:83:6a:c2:18:3c:41:45:0e:6e:79:05:eb:33:
                    52:9b:7d:3f:6a:5b:21:ec:a1:37:a4:9b:cf:74:99:
                    74:aa:57:e0:aa:22:7e:10:89:1c:8d:39:80:d8:62:
                    32:e1:fc:cb:76:97:b0:8f:b0:1c:8d:20:bd:90:c6:
                    18:98:00:c5:f1:ff:aa:4d:25:8c:61:8e:a4:24:c8:
                    97:c6:80:36:9b:dd:76:de:c6:7e:43:2d:a6:aa:ee:
                    ab:cc:95:b8:90:47:1a:3c:31:03:45:0b:30:52:19:
                    56:49:0e:b4:6b:e3:83:32:cf:63:8d:53:46:84:f9:
                    21:a9:94:6f:f5:24:3e:bc:7e:0b:3d:18:4a:ab:40:
                    60:87:69:d1:fd:3e:10:81:40:a0:72:f3:27:1e:c4:
                    cd:da:38:89:9a:da:55:a7:d5:4a:58:48:40:83:fe:
                    bd:76:ef:ba:dd:d6:09:2f:b1:eb:2f:53:a9:d4:30:
                    18:7b:5c:bc:8b:14:1f:b7:92:ab:92:e1:ba:24:c1:
                    71:ca:43:95:83:e0:10:2d:3c:a1:4e:89:b7:81:bd:
                    5f:0c:bd:5b:74:ed:bf:e9:f2:99:a6:7f:48:18:76:
                    77:66:18:7c:08:bb:b9:38:e3:38:3d:63:96:84:9c:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0D:A2:FA:4F:0B:BB:CD:FF:73:EF:21:AB:DC:EA:4B:7B:2D:61:BD
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3230312e3134382e3231362e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:26:43:b4:4d:4a:d3:dc:0e:be:6d:0d:92:55:ad:e5:cf:
         44:6c:f6:71:fc:55:a3:b4:6a:08:ef:04:bd:34:e4:72:86:cf:
         6e:92:d9:de:63:85:58:61:94:1d:d6:62:cc:c1:2f:5b:e8:4d:
         97:4a:8f:82:af:18:00:82:d3:ed:06:7b:c3:44:fe:d0:f9:11:
         00:89:35:b4:7c:7a:b9:03:b7:5d:39:d6:58:72:2f:b7:b3:bb:
         d6:b7:af:d9:94:6d:e3:fd:28:41:8f:53:ce:44:ae:0e:04:46:
         14:62:d9:f6:a4:98:9a:01:d6:eb:f4:99:1d:a2:99:32:9b:38:
         df:05:59:0c:09:57:e8:ba:d5:52:c0:58:12:a7:d7:9c:16:18:
         da:7b:7c:26:58:d7:0f:da:5d:b3:51:6f:57:2f:98:10:d6:ed:
         8e:76:d3:da:68:1e:55:fb:29:8e:51:15:85:07:87:b5:1d:8d:
         b4:77:d7:bf:aa:61:af:79:4c:77:a1:e6:fe:68:15:1e:5f:3a:
         a6:e2:bc:4e:46:88:fa:44:64:cc:5d:1a:4d:4e:13:ef:48:c2:
         f0:e8:76:cf:0b:3f:c0:cd:53:15:e8:e0:9b:47:32:7d:1a:7d:
         e7:15:ae:de:c7:03:e5:c1:2a:75:92:c5:01:42:d2:16:4b:fd:
         e7:71:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org