Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa
File:                     3230312e37312e33322e302f32302d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          NnkhCxotfKK8BK2bvQSOWfqav8wk8ThfDCjZ3KC7930=
Subject key identifier:   72:C6:C7:21:F4:C1:2C:D7:0E:AD:C0:DE:36:AD:F7:D2:69:5B:67:2B
Certificate issuer:       /CN=0A756EBEBF4D659E57B9AF964C23376698E6FF96
Certificate serial:       30342EE0498F5C45C5AF9435B7F1E12AA4D24706
Authority key identifier: 0A:75:6E:BE:BF:4D:65:9E:57:B9:AF:96:4C:23:37:66:98:E6:FF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa
Signing time:             Fri 08 Sep 2023 14:08:46 +0000
ROA not before:           Fri 08 Sep 2023 14:03:46 +0000
ROA not after:            Fri 06 Sep 2024 14:08:46 +0000
asID:                     262785
IP address blocks:        201.71.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:34:2e:e0:49:8f:5c:45:c5:af:94:35:b7:f1:e1:2a:a4:d2:47:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A756EBEBF4D659E57B9AF964C23376698E6FF96
        Validity
            Not Before: Sep  8 14:03:46 2023 GMT
            Not After : Sep  6 14:08:46 2024 GMT
        Subject: CN=72C6C721F4C12CD70EADC0DE36ADF7D2695B672B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:81:d0:46:4c:ec:b8:be:82:21:88:44:ab:
                    9e:ed:63:be:86:e0:ec:42:2c:af:a3:62:d8:82:51:
                    b3:2c:36:e1:3e:02:70:31:b3:38:d6:f0:1d:27:55:
                    de:ed:40:9c:61:87:a1:79:6b:9c:c2:b7:5a:52:f6:
                    31:e7:8a:dc:5b:ee:23:ab:37:eb:76:8b:a2:e6:d8:
                    e0:b4:5c:ce:60:5d:77:93:2d:2c:a5:24:fd:1a:04:
                    33:62:0e:80:47:5c:f8:a0:af:f7:c1:8e:cf:0a:e4:
                    37:d5:fd:6a:ef:85:61:72:7e:81:06:93:a4:23:53:
                    19:7f:cc:8d:0a:f4:82:81:d6:fa:e9:b1:a9:73:b3:
                    4f:d8:42:1f:5e:09:08:1c:5f:f4:d4:91:f3:15:be:
                    f1:53:72:3e:51:51:cc:fb:0d:78:31:e9:58:09:ae:
                    48:fb:6a:ff:dc:2f:4c:b7:53:c5:e9:c8:51:3c:22:
                    6a:f6:79:2b:15:42:66:de:5f:72:12:64:51:ea:12:
                    3c:80:1b:8d:89:6b:de:72:97:b6:25:54:a5:b7:d7:
                    55:10:b1:b5:5a:f9:59:df:d0:be:7f:3a:c9:42:b5:
                    c6:07:4a:20:5c:22:de:00:35:5e:2c:0b:0d:b9:06:
                    4d:61:67:a8:16:03:6c:b3:cf:2e:07:2a:e6:1f:62:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C6:C7:21:F4:C1:2C:D7:0E:AD:C0:DE:36:AD:F7:D2:69:5B:67:2B
            X509v3 Authority Key Identifier:
                keyid:0A:75:6E:BE:BF:4D:65:9E:57:B9:AF:96:4C:23:37:66:98:E6:FF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A756EBEBF4D659E57B9AF964C23376698E6FF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e37312e33322e302f32302d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:b5:10:76:6c:1b:d9:98:17:75:4d:48:5c:7d:b2:dd:b8:
         ed:f2:57:0c:6a:ee:c7:73:18:4b:f5:b2:83:35:d1:d1:70:92:
         ba:7e:5e:61:fa:5b:ec:dc:b7:e5:64:33:4d:5d:f1:9d:1b:d3:
         37:dc:2e:52:ef:20:87:ab:b1:37:79:97:29:c5:8f:a6:fc:37:
         ec:e7:bb:7b:21:50:1a:d1:bc:ea:9b:f8:95:2a:2f:88:f2:25:
         c1:8d:5f:26:64:f1:36:17:0e:79:f8:b2:cc:95:bd:86:0b:ec:
         53:77:6b:7a:57:71:e3:73:ff:36:38:8e:20:a5:62:35:0b:68:
         58:c8:55:6a:c3:d4:02:2d:59:3f:8a:48:3a:95:9c:a2:49:99:
         1e:1b:cb:81:d6:a9:a1:11:d6:87:03:d9:f4:38:1b:dd:24:a6:
         d2:13:20:13:4e:a6:50:6c:c0:43:b6:cf:67:f8:18:eb:ef:91:
         ca:fa:67:22:82:da:68:c0:63:05:8f:72:e5:29:f3:f4:c1:a8:
         fb:5a:d6:50:58:9b:9a:04:5b:10:0a:96:85:19:37:1c:9b:85:
         7b:99:e4:f2:3d:f8:21:1e:8c:d9:e8:0d:d2:52:c3:17:bf:42:
         38:a3:de:2c:43:ac:42:b5:11:23:62:ef:2e:18:87:b3:2d:3a:
         f6:72:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org