Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32322d3232203d3e203631383432.roa
File:                     3230312e3133312e3137322e302f32322d3232203d3e203631383432.roa (raw, json)
Hash identifier:          Aufo5amdZIYCZFHm0NorkWEeHHUZpgd8ulEmzfweibg=
Subject key identifier:   FE:33:DC:B6:F3:D2:81:7F:F4:78:9F:89:86:B0:E3:6D:53:5E:DB:C1
Certificate issuer:       /CN=162A241537498C5CE40422A683B979180F6C6971
Certificate serial:       0F5A7FB87562536D0C38F6D945771D0F40E1D3F2
Authority key identifier: 16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32322d3232203d3e203631383432.roa
Signing time:             Wed 20 Sep 2023 14:00:00 +0000
ROA not before:           Wed 20 Sep 2023 13:55:00 +0000
ROA not after:            Wed 18 Sep 2024 14:00:00 +0000
asID:                     61842
IP address blocks:        201.131.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:7f:b8:75:62:53:6d:0c:38:f6:d9:45:77:1d:0f:40:e1:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162A241537498C5CE40422A683B979180F6C6971
        Validity
            Not Before: Sep 20 13:55:00 2023 GMT
            Not After : Sep 18 14:00:00 2024 GMT
        Subject: CN=FE33DCB6F3D2817FF4789F8986B0E36D535EDBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:d9:ef:79:98:aa:18:18:7d:50:f8:6f:20:
                    91:6b:5c:ba:b9:dc:ef:7a:af:12:1b:c6:01:fa:84:
                    9c:72:75:11:8d:86:d2:8f:41:26:69:1f:93:ae:d1:
                    36:9b:a3:87:51:c3:ff:b8:5f:a6:e5:c8:c9:ff:d6:
                    4f:a5:08:7c:5c:58:57:89:21:e0:ec:e8:66:f2:ff:
                    fb:40:39:84:53:00:61:91:21:7b:f6:75:6c:96:4d:
                    bc:09:e8:4b:ad:79:73:13:60:6c:d8:77:88:bd:33:
                    15:57:db:74:55:04:a0:37:a0:e4:46:a8:b2:4a:1a:
                    f6:48:d0:ef:b9:f9:e3:04:4b:bc:ed:d3:8e:c3:a3:
                    0a:1d:b0:09:20:03:34:9a:6c:04:5d:10:6b:cd:74:
                    2f:dd:3c:fa:35:a4:cf:09:b2:e8:9d:84:0d:f3:09:
                    c2:ae:a8:9f:66:9a:eb:77:ed:13:fa:5d:e7:dd:41:
                    7a:9f:c0:3e:82:b3:ca:76:2a:0a:5d:8e:3e:ec:96:
                    9f:40:0a:aa:15:e3:aa:20:1f:b5:c6:1a:f7:ac:3a:
                    37:30:d1:f0:68:07:6d:2a:e7:04:e6:a2:fe:1e:7c:
                    fe:89:f4:b1:da:97:2e:41:99:29:54:93:b5:72:a2:
                    50:4a:06:66:f1:08:54:bb:7d:39:16:37:0f:f5:3b:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:DC:B6:F3:D2:81:7F:F4:78:9F:89:86:B0:E3:6D:53:5E:DB:C1
            X509v3 Authority Key Identifier:
                keyid:16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32322d3232203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:12:ec:d3:93:84:6e:75:86:fa:97:8a:85:c6:47:eb:a7:
         8b:9d:0c:87:29:3d:20:80:b4:03:4d:0e:54:23:86:c8:48:18:
         68:31:2f:66:64:7a:7c:74:b3:c5:05:44:6e:d4:03:db:78:f0:
         ad:f5:c9:3c:07:df:6f:5c:e4:cc:09:0a:ba:af:0d:00:e5:c7:
         c4:47:b8:9f:bb:72:35:0f:a1:27:09:7c:2b:d8:11:ed:18:b9:
         73:c6:56:56:c6:2e:4b:5f:bc:c0:43:10:16:f6:a7:e7:b6:92:
         17:59:85:26:25:17:5c:10:e8:28:06:ff:4d:ef:fe:fb:ec:e9:
         55:c0:0c:37:d5:7b:96:fe:a2:69:bd:f5:11:22:12:1c:7c:ab:
         6b:70:59:d1:8b:e6:5a:93:e3:a5:66:0b:87:7d:4a:03:60:42:
         3b:1b:0b:66:17:5a:6d:5e:f9:9a:95:78:b9:c6:86:6c:4e:b9:
         86:c8:9e:36:87:d9:fa:2a:54:a7:78:19:e4:6d:f0:b2:a0:d6:
         a0:75:03:d6:7b:03:6e:90:57:33:1b:aa:8c:4b:f1:50:8e:21:
         8f:4e:d6:b0:f6:27:91:e4:6c:1d:1c:42:8b:b6:b5:45:ba:92:
         7c:43:a4:55:cd:e1:68:7f:1a:9d:3a:36:d5:f5:f7:47:31:f5:
         2a:3a:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org