Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e20323032.roa
File:                     3230312e33332e3136302e302f32302d3332203d3e20323032.roa (raw, json)
Hash identifier:          ZtHXXck9OS7HbHbVdMqRRjgZDCQVr03/2Q3uGoV3rQM=
Subject key identifier:   C3:48:EC:8D:A6:31:CB:75:57:3D:DE:FD:0C:13:C1:F3:3D:E1:C8:F8
Certificate issuer:       /CN=0C1C6ED65AC27E32959512A2404C0C967A731CD8
Certificate serial:       37E56E212947F8E13177C4E277855005ACB86F59
Authority key identifier: 0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e20323032.roa
Signing time:             Tue 28 Feb 2023 18:01:01 +0000
ROA not before:           Tue 28 Feb 2023 17:56:01 +0000
ROA not after:            Tue 27 Feb 2024 18:01:01 +0000
asID:                     202
IP address blocks:        201.33.160.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e5:6e:21:29:47:f8:e1:31:77:c4:e2:77:85:50:05:ac:b8:6f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C1C6ED65AC27E32959512A2404C0C967A731CD8
        Validity
            Not Before: Feb 28 17:56:01 2023 GMT
            Not After : Feb 27 18:01:01 2024 GMT
        Subject: CN=C348EC8DA631CB75573DDEFD0C13C1F33DE1C8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:d5:09:29:91:0a:eb:fc:90:03:15:c1:cc:
                    6e:13:d6:22:10:49:c7:be:cc:7c:9a:e8:0a:fe:8c:
                    ac:c7:3e:64:1c:78:b4:5c:8b:4d:18:f9:ff:b3:93:
                    a8:90:ea:a2:4c:1d:49:21:33:8c:20:2f:aa:d7:ae:
                    9e:8a:4c:6f:55:08:0f:51:f9:5b:b4:82:98:0d:59:
                    b4:16:e7:6f:13:18:a7:23:a4:55:e4:46:8d:c8:13:
                    a0:79:0c:14:90:40:e2:27:0a:34:2e:cd:27:73:b8:
                    01:c8:73:2b:38:79:e7:30:be:57:3c:8c:2e:c7:da:
                    53:d1:34:6d:2f:7b:0c:e1:f8:66:c3:28:bf:88:60:
                    87:1e:ba:3e:58:cd:6a:f8:08:b2:6a:a4:14:09:db:
                    c6:4e:4c:c3:5a:ef:86:53:55:28:79:dd:d9:0e:55:
                    80:9c:9c:e2:a3:f8:2e:e2:06:32:1e:93:c6:fc:fb:
                    f7:c6:66:48:da:72:97:d5:ea:73:83:7f:4a:dc:2d:
                    04:0b:cf:f0:eb:fb:90:fe:ba:b8:17:90:3c:21:f6:
                    18:e7:f3:cb:e5:d9:78:cb:46:dd:20:72:1c:ce:bb:
                    8d:7f:f2:2e:5c:a1:1a:42:37:3f:59:ca:5b:0a:04:
                    bc:5c:99:be:89:15:86:9c:db:d0:08:77:fa:8d:17:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:EC:8D:A6:31:CB:75:57:3D:DE:FD:0C:13:C1:F3:3D:E1:C8:F8
            X509v3 Authority Key Identifier:
                keyid:0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/0C1C6ED65AC27E32959512A2404C0C967A731CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:3f:a4:2d:4f:eb:82:2d:dd:57:2f:d4:61:48:42:19:04:0c:
         cf:6d:f7:38:97:1d:11:02:5e:1d:57:c7:e1:8a:e0:0a:5d:99:
         36:b1:12:2b:ce:18:a5:83:e5:e2:1a:b8:1e:cd:0f:43:a4:bb:
         d3:8e:b3:f3:bc:27:2f:98:81:db:a6:c8:12:12:68:41:57:2e:
         2d:52:9c:aa:60:87:5d:19:0b:f2:88:00:3c:d4:2b:a2:45:dc:
         44:3f:23:96:71:a6:47:0b:36:02:fc:28:78:e8:ec:64:fe:51:
         9c:7c:b3:a2:be:f5:a6:18:2e:23:71:d3:84:55:1b:7d:b9:21:
         de:e6:e9:e6:09:db:6a:dc:77:cf:47:40:73:98:d9:93:0f:79:
         8d:bf:bd:c7:f6:f8:7d:a7:a9:51:ce:6c:cf:69:a9:8b:98:0a:
         df:25:af:bb:d2:7c:a3:4e:2f:a2:45:0f:76:7d:07:a0:ac:1f:
         38:6a:a2:c7:c9:fb:b2:29:89:3f:c1:22:58:26:e9:b1:01:25:
         5d:71:8b:ba:cb:0d:64:e0:6d:3a:3e:d7:18:bb:6c:7c:99:5c:
         61:af:21:fb:f5:c2:6e:73:93:83:92:19:bd:88:f9:3e:b2:40:
         39:de:4d:9e:3c:9a:fc:1a:db:91:cc:62:9a:8f:42:d9:3a:0c:
         98:76:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org