Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32342d3234203d3e203631383432.roa
File:                     3230312e3133312e3137322e302f32342d3234203d3e203631383432.roa (raw, json)
Hash identifier:          Oi4FjKA3VJeoqSTI3q9Ntfuu+eiSUbmNidBepi/jeng=
Subject key identifier:   B7:EA:26:97:08:0F:18:75:5A:41:50:45:A2:34:82:48:FB:73:81:49
Certificate issuer:       /CN=162A241537498C5CE40422A683B979180F6C6971
Certificate serial:       4C4FBF440A9E2498B00F6FB143226CCA45FC0EBC
Authority key identifier: 16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32342d3234203d3e203631383432.roa
Signing time:             Wed 20 Sep 2023 14:00:00 +0000
ROA not before:           Wed 20 Sep 2023 13:55:00 +0000
ROA not after:            Wed 18 Sep 2024 14:00:00 +0000
asID:                     61842
IP address blocks:        201.131.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4f:bf:44:0a:9e:24:98:b0:0f:6f:b1:43:22:6c:ca:45:fc:0e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162A241537498C5CE40422A683B979180F6C6971
        Validity
            Not Before: Sep 20 13:55:00 2023 GMT
            Not After : Sep 18 14:00:00 2024 GMT
        Subject: CN=B7EA2697080F18755A415045A2348248FB738149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:bb:a5:d4:d1:94:c0:9b:bf:c0:ec:ba:04:
                    c4:47:b0:3d:20:5b:8f:ee:32:28:38:5a:ed:95:74:
                    2d:f4:02:06:b8:91:ac:26:c8:2e:18:51:c5:4f:19:
                    f4:41:93:01:30:1e:1e:5b:17:b5:19:f1:c2:3a:fe:
                    b1:4e:ec:c4:5e:05:2d:f9:62:e2:5f:79:26:b6:d6:
                    24:65:85:a5:21:ee:0a:38:00:71:54:89:b1:62:57:
                    e0:c0:0b:2c:94:f7:0e:67:2c:d9:7e:f4:a4:d7:f6:
                    d1:60:2c:1c:f4:17:ef:92:43:f5:0e:a8:cc:d7:56:
                    3e:30:e9:3e:e8:92:ab:28:e7:95:61:e9:1e:bb:7b:
                    cc:75:a6:b1:55:2b:b9:36:83:94:ad:4b:02:5b:db:
                    6c:fd:92:7b:a9:ca:de:73:70:f3:38:c1:9e:98:13:
                    8c:2a:37:8c:0e:de:eb:d4:90:d6:55:f1:2d:75:0e:
                    0c:e3:2e:0f:bb:83:1e:83:e3:6e:52:e0:22:dd:43:
                    f0:44:a4:71:7b:2b:43:f3:22:64:21:da:e9:12:c9:
                    5c:ef:20:bf:5d:b2:35:a5:3c:3c:1c:59:60:04:a1:
                    76:ac:13:57:98:91:45:e3:01:79:ba:38:21:38:ed:
                    04:4c:12:59:19:c4:36:d7:aa:01:13:f8:5b:58:1d:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EA:26:97:08:0F:18:75:5A:41:50:45:A2:34:82:48:FB:73:81:49
            X509v3 Authority Key Identifier:
                keyid:16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137322e302f32342d3234203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:b8:50:93:71:7a:b4:23:89:7f:9c:4d:26:00:9a:cc:9a:
         43:ac:09:13:8b:1c:c9:1a:60:17:95:a0:30:cc:78:25:fb:88:
         d9:ae:dc:12:83:73:ee:58:2c:4f:1b:dd:5b:8c:70:24:b7:67:
         da:6e:4a:70:4b:32:a3:7c:fc:b3:16:5c:d7:6d:fa:bf:5a:c3:
         de:2f:ea:8d:51:c4:9d:f8:70:ea:fe:84:7e:48:8b:35:db:50:
         6e:2c:6c:69:5e:b9:80:bb:93:49:33:6a:3f:a8:2b:aa:51:b0:
         7c:01:52:5c:d7:94:4f:db:01:62:47:6b:68:3c:2e:22:04:cf:
         87:cb:b4:3f:7e:a3:b2:f9:e6:1d:ea:fb:e0:7c:9e:de:e9:2e:
         59:31:21:95:61:73:ce:b4:86:af:04:3f:ee:df:03:96:7e:9a:
         4e:e4:2f:18:74:84:20:29:3b:02:28:89:bb:68:53:1d:64:3d:
         aa:2e:72:1f:9b:05:ab:e0:b9:c3:8f:0f:72:3c:ab:48:0a:af:
         8b:da:e9:a5:fd:7a:80:a9:6a:76:ab:17:e9:4e:fe:91:c0:d0:
         5e:32:d2:77:04:31:7e:8f:8c:61:6b:97:d8:fe:c0:15:64:59:
         8a:bd:ed:57:4f:38:d0:5c:5c:ff:92:f3:0f:76:f4:7a:1b:b2:
         cb:f6:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org