Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa
File:                     3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cnSrylYcUs8EVAOt6jo3T06EodPHqm9iQmcqheNyWbE=
Subject key identifier:   F6:5C:D5:CC:9D:27:78:ED:2D:0C:81:85:09:51:B9:ED:0E:51:4E:4B
Certificate issuer:       /CN=F44EDF36C881BC97A766BDEEFF070251613E095D
Certificate serial:       2EC654CFA5FEAC3D6FFDD538462B71FD1D440954
Authority key identifier: F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 28 Nov 2023 20:33:51 +0000
ROA not before:           Tue 28 Nov 2023 20:28:51 +0000
ROA not after:            Tue 26 Nov 2024 20:33:51 +0000
asID:                     262589
IP address blocks:        201.33.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c6:54:cf:a5:fe:ac:3d:6f:fd:d5:38:46:2b:71:fd:1d:44:09:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F44EDF36C881BC97A766BDEEFF070251613E095D
        Validity
            Not Before: Nov 28 20:28:51 2023 GMT
            Not After : Nov 26 20:33:51 2024 GMT
        Subject: CN=F65CD5CC9D2778ED2D0C81850951B9ED0E514E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:c4:21:e9:f3:33:41:01:54:8d:cd:77:f0:
                    41:64:44:53:4f:76:de:86:2d:4d:44:f3:22:e4:42:
                    64:51:a0:ab:2f:14:65:ef:bf:b1:86:9c:df:7e:59:
                    bf:2b:64:02:24:db:16:4a:98:16:23:08:53:55:ab:
                    c1:66:b7:a8:16:c3:a2:94:b2:c0:b6:0f:3c:f7:77:
                    64:f4:a1:bc:32:cb:58:25:80:e5:d9:4a:53:68:5c:
                    32:bf:fa:75:f1:4d:18:2a:0f:74:7b:54:b4:1c:c3:
                    64:d6:ea:20:25:68:d9:f0:33:45:dc:c0:c0:bf:6b:
                    05:34:3a:e4:b3:80:84:78:f4:7e:1a:8b:e5:59:fa:
                    e9:82:48:7f:e3:9d:d2:7d:a7:e8:55:e3:1f:8e:0d:
                    7f:1a:c4:a6:3b:74:df:f7:1a:77:d3:bc:e4:07:c2:
                    ab:bf:40:85:85:09:15:3f:d2:07:58:55:d8:cb:de:
                    6b:02:89:f9:06:9d:d0:db:b6:ce:30:3a:0a:20:41:
                    d5:60:16:0e:ec:d8:2a:70:95:e5:74:fe:f4:26:b8:
                    16:8d:f0:33:2a:9e:f3:61:79:38:73:78:60:6d:f7:
                    65:76:0f:1a:66:f6:c8:06:28:6c:b9:2a:d2:d0:99:
                    8d:fb:e5:7f:c9:a3:a4:24:15:39:b8:1c:ab:f5:42:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:D5:CC:9D:27:78:ED:2D:0C:81:85:09:51:B9:ED:0E:51:4E:4B
            X509v3 Authority Key Identifier:
                keyid:F4:4E:DF:36:C8:81:BC:97:A7:66:BD:EE:FF:07:02:51:61:3E:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/F44EDF36C881BC97A766BDEEFF070251613E095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F44EDF36C881BC97A766BDEEFF070251613E095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:54:8f:94:be:0a:2e:9c:e0:4d:86:64:25:0e:4c:c9:68:
         20:db:01:be:7e:e0:a4:b5:ab:0e:e9:66:1a:f7:15:5f:19:98:
         1c:d6:64:00:94:3a:22:d1:50:6d:f7:ab:ea:12:f4:c6:91:bd:
         f7:48:9b:e4:a8:68:4b:75:9f:77:67:6f:18:5c:63:37:10:d3:
         90:67:8e:41:9a:ee:d9:6d:8d:7e:c7:5c:53:9e:35:4a:2c:43:
         3a:3a:5d:a6:f5:99:44:37:5b:67:2d:80:c7:2c:9b:00:b7:18:
         90:26:f0:5e:ba:67:6d:17:b1:ba:b3:04:97:3d:70:b8:a4:9e:
         83:57:6f:5a:73:76:25:b8:e0:3e:a6:72:c9:52:ac:30:4e:e7:
         84:01:b0:1d:e1:b5:4c:47:c1:38:5d:df:26:ac:46:a3:a1:44:
         4a:ba:7e:44:21:ee:14:91:40:d0:3c:5b:b4:05:0d:36:62:b8:
         79:b6:70:3d:e4:11:87:ee:89:a2:5c:ff:db:66:38:10:aa:76:
         74:1b:76:b2:15:66:64:81:63:e3:be:c2:eb:c3:1b:b8:2f:55:
         ee:16:d1:ad:a0:a6:73:3f:00:7a:42:6a:6a:aa:c1:a2:f1:31:
         50:54:2e:2a:63:8c:90:63:68:42:f7:96:c9:ca:37:43:55:9c:
         96:17:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org