Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323032.roa
File:                     3230312e33332e3136302e302f32302d3332203d3e20323032.roa (raw, json)
Hash identifier:          GEfUaFXzVm2GpwKEe2kcReS911cLblEfUn+5+coQb9M=
Subject key identifier:   6C:33:41:4A:D1:D5:4C:2E:2F:DD:70:F1:F9:7B:4F:7D:34:F2:A9:9D
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       5209424681AEFDC7C12AB5B4C18B634BC8B520B1
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323032.roa
Signing time:             Sat 21 Jan 2023 22:22:35 +0000
ROA not before:           Sat 21 Jan 2023 22:17:35 +0000
ROA not after:            Sat 20 Jan 2024 22:22:35 +0000
asID:                     202
IP address blocks:        201.33.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:42:46:81:ae:fd:c7:c1:2a:b5:b4:c1:8b:63:4b:c8:b5:20:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:35 2023 GMT
            Not After : Jan 20 22:22:35 2024 GMT
        Subject: CN=6C33414AD1D54C2E2FDD70F1F97B4F7D34F2A99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:fc:24:6f:ae:a4:4c:87:51:65:f2:b1:28:
                    29:a5:9b:16:de:95:19:4d:ab:48:9b:e1:df:0b:a9:
                    97:7a:28:a1:1e:43:1d:fc:62:f0:fb:8b:81:a0:ea:
                    cf:8d:03:62:ce:ac:d1:23:1e:63:b9:dd:04:fc:db:
                    cf:e5:c3:1b:59:b9:c6:e2:04:8c:0a:68:93:96:a4:
                    e7:fe:5a:ab:2d:f4:c8:78:d2:c8:39:20:e9:69:d6:
                    9b:3b:9c:ab:c5:fe:8a:7f:bb:52:27:08:42:4e:a1:
                    78:1e:53:ac:cc:cf:f6:53:0e:02:d3:f8:bd:f2:46:
                    4b:53:1c:e8:22:f1:ec:94:d5:e8:a8:cf:83:94:54:
                    45:9f:01:f0:04:56:1d:8f:18:61:40:82:84:76:1c:
                    c0:4f:98:20:f3:48:f9:aa:30:99:f6:85:b2:ea:38:
                    5f:b6:2b:a0:9a:e4:85:e5:89:23:1d:83:6c:9a:2d:
                    88:0d:08:fe:b7:87:ba:6c:89:fb:6a:ae:37:16:a8:
                    cb:8f:53:97:df:8a:3e:38:e7:de:5c:30:af:4e:f3:
                    f5:4a:34:7a:81:3d:06:8d:11:37:e2:eb:dd:4d:2e:
                    6b:63:38:c2:87:cf:65:3e:d8:e6:69:c1:c7:60:5d:
                    12:e9:94:fd:ad:af:04:c3:99:af:43:b0:22:cc:06:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:41:4A:D1:D5:4C:2E:2F:DD:70:F1:F9:7B:4F:7D:34:F2:A9:9D
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:18:b7:11:d1:ea:62:b1:5e:1f:88:8d:7d:05:f2:b8:e4:
         8c:0b:90:ad:d6:ec:98:69:d2:21:4e:6d:e9:01:a6:e8:37:6c:
         52:bb:05:10:3e:c3:fe:41:01:bd:b4:2c:11:d9:ab:df:00:19:
         cd:21:33:61:49:0c:80:62:47:ce:ed:33:ed:89:e7:d9:47:b3:
         05:5b:80:ad:d4:4f:c7:3c:98:78:1a:1d:53:85:b7:23:f3:bd:
         ae:51:97:93:c2:ed:2c:6e:ff:23:58:e3:af:e8:ce:7f:48:46:
         cd:8c:91:5d:05:40:cd:97:49:4d:6f:a6:f4:1b:e4:57:24:45:
         d4:f5:1d:91:33:5e:ff:ce:77:4a:0a:f0:c9:05:d5:70:a3:02:
         64:f0:33:c2:a0:28:97:4b:04:30:b2:79:13:1d:c8:d4:de:98:
         bd:b7:09:6d:96:62:30:90:59:5b:c9:1b:67:2e:b2:0c:80:9e:
         74:8c:e9:ab:59:3f:13:5c:f0:b1:89:ca:01:f1:a1:d2:15:cf:
         cf:a4:36:8a:04:cb:a8:40:fb:3f:db:e4:e0:80:2b:4e:c8:ad:
         5b:52:f9:d7:27:7a:e7:ca:1b:45:9c:e0:15:05:56:90:4c:42:
         22:03:9b:b9:c7:ec:4e:2a:33:04:4a:c9:f5:2d:b8:fb:a1:de:
         f9:5c:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org