Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELydVWgwn921m3aFwEVn1VJ6VMectpNhDsfPTiuZfhZH/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa
File:                     3230312e33332e3234302e302f32302d3234203d3e203238323830.roa (raw, json)
Hash identifier:          1uYWDXtSDpzzqRt1p30jYBJUu82Q5izyts2apYnim4s=
Subject key identifier:   6E:83:03:0E:39:1D:13:52:21:F5:54:40:F0:A8:5C:17:12:9E:54:8D
Certificate issuer:       /CN=F13FBDB1A7DE2A2278C3E926FD87355F3CEDDED4
Certificate serial:       64F61B0514FDE5967BD928A5EB26B0A3BDE522F6
Authority key identifier: F1:3F:BD:B1:A7:DE:2A:22:78:C3:E9:26:FD:87:35:5F:3C:ED:DE:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F13FBDB1A7DE2A2278C3E926FD87355F3CEDDED4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELydVWgwn921m3aFwEVn1VJ6VMectpNhDsfPTiuZfhZH/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa
Signing time:             Mon 24 Oct 2022 12:18:33 +0000
ROA not before:           Mon 24 Oct 2022 12:13:33 +0000
ROA not after:            Mon 23 Oct 2023 12:18:33 +0000
asID:                     28280
IP address blocks:        201.33.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f6:1b:05:14:fd:e5:96:7b:d9:28:a5:eb:26:b0:a3:bd:e5:22:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F13FBDB1A7DE2A2278C3E926FD87355F3CEDDED4
        Validity
            Not Before: Oct 24 12:13:33 2022 GMT
            Not After : Oct 23 12:18:33 2023 GMT
        Subject: CN=6E83030E391D135221F55440F0A85C17129E548D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:1c:16:fb:d3:21:be:ab:dd:47:c0:2b:e2:
                    b4:c6:58:86:eb:5b:b3:46:9e:29:bb:be:a8:17:a3:
                    0b:5a:fe:03:98:d8:9e:b6:37:17:ff:2f:88:5b:82:
                    ad:59:53:65:b2:7c:da:32:cb:d5:30:53:fb:64:d5:
                    01:ac:c3:3f:9e:c5:de:a0:f8:99:1f:88:50:8a:09:
                    15:86:43:38:d6:49:50:7c:ca:50:70:30:43:fe:40:
                    b3:a0:ca:96:1d:29:be:5c:74:f5:71:1d:5f:e8:b9:
                    6b:d0:57:48:bd:3a:1b:31:57:e9:fe:78:1c:c1:91:
                    03:a7:43:74:81:1f:ed:49:3c:53:ac:c7:dc:47:90:
                    ad:23:cd:fd:cb:83:be:93:dc:7c:77:95:48:4f:42:
                    ab:50:01:48:ed:e5:23:7f:fe:f8:e8:17:e1:74:7b:
                    ab:5c:99:b6:6f:a9:3d:49:c6:7e:37:c2:a7:ea:b5:
                    3b:2d:59:7a:b1:cd:c3:30:80:0f:9e:d0:c3:ee:6e:
                    5d:c0:84:42:c4:81:92:32:51:c2:f2:ca:be:48:d9:
                    22:74:7d:e3:4d:1a:57:57:f4:44:df:2a:34:88:59:
                    68:95:c1:df:e1:05:ea:79:ec:c3:f6:ce:35:b2:8f:
                    7e:95:98:c5:ac:37:b6:09:0c:07:8d:0b:6f:15:d4:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:03:0E:39:1D:13:52:21:F5:54:40:F0:A8:5C:17:12:9E:54:8D
            X509v3 Authority Key Identifier:
                keyid:F1:3F:BD:B1:A7:DE:2A:22:78:C3:E9:26:FD:87:35:5F:3C:ED:DE:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELydVWgwn921m3aFwEVn1VJ6VMectpNhDsfPTiuZfhZH/0/F13FBDB1A7DE2A2278C3E926FD87355F3CEDDED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F13FBDB1A7DE2A2278C3E926FD87355F3CEDDED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELydVWgwn921m3aFwEVn1VJ6VMectpNhDsfPTiuZfhZH/0/3230312e33332e3234302e302f32302d3234203d3e203238323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:8a:44:d9:97:ec:f4:76:3f:90:36:57:8d:5f:99:43:34:
         2e:4f:19:29:c1:73:da:89:98:e0:66:e8:79:ea:31:ed:e9:23:
         ef:ec:29:1a:c6:09:8b:d7:40:e5:d1:1f:d9:fd:73:2c:b4:0a:
         7c:e9:12:11:10:72:8a:2a:6a:11:76:f5:d4:4f:68:77:37:f8:
         69:c6:3c:cd:4b:3c:0d:39:48:01:bd:d9:f8:b5:0f:1f:f8:e8:
         a9:47:31:a7:54:bc:0c:14:91:d4:f1:40:82:d5:3e:db:20:90:
         03:6a:bd:66:3e:f5:3f:e2:30:ec:93:e5:69:dd:f3:b1:be:d9:
         5f:5c:fb:79:35:b1:46:69:9c:c4:83:2c:ab:ac:6f:6f:d9:c0:
         81:39:92:a0:9e:e8:f4:e1:c8:cb:1e:6c:93:f6:bf:36:0e:dd:
         51:9b:b0:2c:6c:cc:b3:b7:58:1d:b2:d4:f2:01:fc:f3:f6:98:
         21:43:7c:91:49:42:e1:59:19:65:c1:0b:24:1b:cb:39:b2:42:
         e3:b0:eb:08:75:d8:74:64:cc:f9:b4:23:ad:e8:e8:a9:e1:54:
         69:26:cb:7e:ab:aa:a0:57:9f:1f:eb:72:b0:fc:1b:e8:08:4c:
         0c:7a:9e:65:1f:63:8d:46:8e:76:98:e0:0b:b1:24:70:7f:2a:
         75:82:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org