Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137342e302f32332d3233203d3e203631383432.roa
File:                     3230312e3133312e3137342e302f32332d3233203d3e203631383432.roa (raw, json)
Hash identifier:          UOvId2g1a9a3QRAv0gsqGlfK5gxlhDgAMzXiSGj0+TM=
Subject key identifier:   C8:98:98:82:EC:0D:BB:0D:38:47:2D:25:54:75:FF:51:B0:98:BE:66
Certificate issuer:       /CN=162A241537498C5CE40422A683B979180F6C6971
Certificate serial:       3DC9428F421623D4BA967E801A90AE61D91D3ED0
Authority key identifier: 16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137342e302f32332d3233203d3e203631383432.roa
Signing time:             Wed 19 Oct 2022 13:53:12 +0000
ROA not before:           Wed 19 Oct 2022 13:48:12 +0000
ROA not after:            Wed 18 Oct 2023 13:53:12 +0000
asID:                     61842
IP address blocks:        201.131.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c9:42:8f:42:16:23:d4:ba:96:7e:80:1a:90:ae:61:d9:1d:3e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162A241537498C5CE40422A683B979180F6C6971
        Validity
            Not Before: Oct 19 13:48:12 2022 GMT
            Not After : Oct 18 13:53:12 2023 GMT
        Subject: CN=C8989882EC0DBB0D38472D255475FF51B098BE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:2c:e4:70:b1:37:0c:c6:5d:96:92:07:e2:
                    31:e8:8c:77:82:5b:8b:21:e2:6c:fe:15:6c:19:90:
                    7d:10:d2:a5:6f:4b:be:63:7d:9e:0e:0b:95:4c:eb:
                    ac:a4:8a:0f:dc:f5:1f:fa:a3:e6:f9:68:ae:7b:98:
                    a5:68:1e:5e:29:a7:72:3e:5f:55:ab:14:c0:96:07:
                    7d:17:4c:7d:e9:15:97:d2:e1:03:28:aa:e8:a2:61:
                    3e:04:19:c3:65:7d:a0:e7:39:fd:5c:4e:8a:ac:8c:
                    06:d0:06:51:9d:45:10:92:70:fb:3d:1a:d1:8f:e0:
                    7f:20:b8:c4:3c:e5:9e:12:bb:9f:00:73:9f:f4:a7:
                    54:50:76:c3:fd:e2:39:0a:8a:8e:2b:78:dd:8d:4c:
                    95:d0:e5:02:44:81:40:64:f4:8c:b5:5e:3a:13:cc:
                    90:19:ec:d0:7e:61:ba:d7:75:92:fc:eb:c4:36:a8:
                    03:b9:6b:7f:8c:50:21:7c:d8:d1:aa:49:85:22:b7:
                    0a:28:c2:89:be:27:38:29:0e:ff:a3:e1:7a:0f:56:
                    b1:99:93:2b:34:54:65:7d:1a:45:cc:87:9f:ff:97:
                    f2:96:a8:06:98:b0:74:0e:07:70:90:92:93:72:0f:
                    d3:75:fa:bc:b8:7f:13:51:71:ea:69:e8:58:be:45:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:98:82:EC:0D:BB:0D:38:47:2D:25:54:75:FF:51:B0:98:BE:66
            X509v3 Authority Key Identifier:
                keyid:16:2A:24:15:37:49:8C:5C:E4:04:22:A6:83:B9:79:18:0F:6C:69:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/162A241537498C5CE40422A683B979180F6C6971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/162A241537498C5CE40422A683B979180F6C6971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/0/3230312e3133312e3137342e302f32332d3233203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:42:99:53:a8:d4:67:dc:50:4f:12:6d:e1:ad:a7:0f:98:3d:
         50:b0:b7:b6:77:30:2c:e6:66:89:d9:a1:5d:77:52:c8:ab:fd:
         2d:f1:fe:32:aa:44:4b:ce:02:cb:d6:d2:3e:5b:2c:8f:37:54:
         e1:0a:e2:89:0a:46:44:fa:25:fa:f6:da:b7:b5:0a:fe:39:d7:
         88:7b:2f:43:4b:01:6b:88:81:4d:f1:a5:81:4e:6b:0e:e8:b6:
         ef:5b:51:c8:2b:ad:41:6f:00:d6:53:15:e7:a9:18:94:e4:90:
         15:c2:b9:de:2d:fe:9a:52:8d:7b:19:de:60:e7:9d:e1:37:a4:
         76:f6:fe:b8:04:ac:75:53:d2:64:36:bd:01:28:8f:20:aa:b3:
         30:31:fa:fe:29:da:19:83:d4:81:a2:f7:50:f1:e6:33:5c:83:
         65:36:03:cf:71:85:c1:b4:04:23:f6:22:2c:ff:46:b7:8b:f8:
         8a:f9:68:da:b2:f4:40:9c:4d:11:19:81:41:94:3d:64:2f:a3:
         fd:e3:f0:ab:50:8e:bb:f3:b9:2b:68:ea:ee:95:a9:0a:6e:a4:
         6c:f3:51:ad:8d:8b:fe:b0:86:93:54:2d:63:d9:16:80:2c:23:
         5e:f4:2e:c8:c3:17:d6:98:55:bc:fc:41:ea:d5:5c:c9:18:a8:
         4b:37:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org