Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323033.roa
File:                     3230312e33332e3136302e302f32302d3332203d3e20323033.roa (raw, json)
Hash identifier:          s8xN/OtMW3bUuIWOsj1bkzqDK5IKf/fJKBHhb9AV/Ac=
Subject key identifier:   58:E8:0D:35:D4:17:B9:17:EE:9C:15:DD:75:FC:39:BB:12:37:22:FB
Certificate issuer:       /CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
Certificate serial:       067446E8BFEEA0702B76550596A75FEF3927549A
Authority key identifier: 95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323033.roa
Signing time:             Sat 21 Jan 2023 22:22:35 +0000
ROA not before:           Sat 21 Jan 2023 22:17:35 +0000
ROA not after:            Sat 20 Jan 2024 22:22:35 +0000
asID:                     203
IP address blocks:        201.33.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:74:46:e8:bf:ee:a0:70:2b:76:55:05:96:a7:5f:ef:39:27:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA
        Validity
            Not Before: Jan 21 22:17:35 2023 GMT
            Not After : Jan 20 22:22:35 2024 GMT
        Subject: CN=58E80D35D417B917EE9C15DD75FC39BB123722FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:c6:2d:de:92:af:ff:18:9c:30:68:ca:e7:
                    03:61:cf:57:f6:a1:32:72:70:ef:d5:e5:61:d9:31:
                    c5:4b:45:ee:6f:86:2f:18:d1:25:21:51:c3:63:cd:
                    56:10:1f:7b:cb:5c:c8:af:af:90:5c:5d:4e:da:ae:
                    49:87:c6:78:e0:77:db:c5:09:eb:a3:78:05:4f:e8:
                    a8:27:dd:82:f5:f5:c4:e5:7f:b4:39:23:34:42:a2:
                    5c:d0:c7:2f:25:d9:b9:23:a9:77:60:00:3e:ea:16:
                    32:f5:95:10:e2:31:34:76:9e:af:84:cb:8e:f9:e1:
                    06:a9:a1:53:1f:c8:71:23:3b:de:1d:2a:83:db:ed:
                    f0:ee:4f:af:0d:bd:43:79:46:fb:2d:bd:81:d0:fc:
                    6f:81:d9:02:84:4a:b8:a5:f9:0a:39:78:79:4a:40:
                    6b:2c:f9:89:6d:ff:38:bf:17:82:16:92:11:11:b3:
                    ef:39:09:2e:43:41:29:9d:56:ee:96:26:d2:32:84:
                    7f:7a:5c:cb:fb:df:6e:9b:d5:30:35:dd:ae:44:41:
                    cd:57:54:58:c9:c8:3a:bf:8a:af:03:84:bf:9a:63:
                    da:3f:d2:26:7c:fa:4c:9c:6d:2d:7b:c3:98:2f:0c:
                    6f:18:15:27:c3:32:89:fc:66:d6:ca:5f:c7:89:51:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:0D:35:D4:17:B9:17:EE:9C:15:DD:75:FC:39:BB:12:37:22:FB
            X509v3 Authority Key Identifier:
                keyid:95:B5:A9:6C:77:43:93:9C:30:3E:DD:7F:2D:3C:C4:AB:9C:5D:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95B5A96C7743939C303EDD7F2D3CC4AB9C5DB9FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:60:00:82:1a:f1:e4:0f:a7:0d:f7:62:52:df:d0:8b:a8:
         9e:32:ca:e2:f5:af:57:55:50:22:3a:de:90:0b:c0:08:b1:b2:
         59:73:84:b0:df:67:fd:06:6d:00:2c:69:87:cf:0a:7b:a0:6a:
         51:c3:ca:a1:0e:f5:e6:87:c3:3e:39:69:a6:12:ca:e3:06:71:
         b7:1c:90:21:19:3f:85:93:2d:64:ae:24:7b:a4:69:56:1f:87:
         fe:85:f2:ce:bc:53:b1:84:28:d2:cc:2f:bf:d4:87:8f:03:99:
         43:3b:82:f7:e1:a7:50:73:b0:fe:38:8a:90:27:80:b7:e5:17:
         5b:23:75:ee:21:6b:18:ba:71:dc:57:28:68:8d:08:83:3e:44:
         fe:88:65:e6:31:79:cb:95:86:86:60:b9:aa:14:7c:8f:0a:7b:
         42:22:a1:68:1d:c8:a1:32:39:94:41:b1:2f:6c:b9:69:96:2b:
         5f:7f:05:d4:29:1f:23:57:cb:2f:02:7b:90:f5:84:34:d9:bf:
         ab:11:12:71:ec:60:84:27:3a:fc:49:60:42:e5:ac:77:9f:85:
         c6:1d:89:47:50:e3:1a:7c:3d:78:9a:ab:96:e7:a6:de:e6:e2:
         1d:4f:f9:4a:e3:a3:b4:5e:73:05:d8:02:98:70:f6:c7:84:bd:
         62:be:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org