Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3332203d3e20323632353335.roa
File:                     3230312e3135392e3131362e302f32322d3332203d3e20323632353335.roa (raw, json)
Hash identifier:          H8Sf18Auk+7DhMIopzmTCvvz5odie4EgUSRVRhSaqFQ=
Subject key identifier:   6F:C5:51:7C:BE:2B:3C:DB:15:BF:80:80:3F:C9:B2:9D:93:6C:20:A9
Certificate issuer:       /CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
Certificate serial:       619BACAA8E69778CF1A72097FA1E29E5ACE22374
Authority key identifier: 2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3332203d3e20323632353335.roa
Signing time:             Mon 13 Mar 2023 15:30:40 +0000
ROA not before:           Mon 13 Mar 2023 15:25:40 +0000
ROA not after:            Mon 11 Mar 2024 15:30:40 +0000
asID:                     262535
IP address blocks:        201.159.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:ac:aa:8e:69:77:8c:f1:a7:20:97:fa:1e:29:e5:ac:e2:23:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA1791D91BFFF6ECDE295F6F522FB764A332153
        Validity
            Not Before: Mar 13 15:25:40 2023 GMT
            Not After : Mar 11 15:30:40 2024 GMT
        Subject: CN=6FC5517CBE2B3CDB15BF80803FC9B29D936C20A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:23:f8:44:76:d0:13:d1:fe:4f:f5:87:b7:
                    f3:0d:b2:a2:f2:82:23:74:a1:40:20:5f:c0:4c:ac:
                    12:b4:a8:68:d1:ee:67:96:66:de:44:5b:4d:6d:86:
                    49:6e:a3:6c:34:1c:08:e4:d6:24:cf:cd:54:d0:b6:
                    2a:46:1b:8a:b5:37:9a:2c:9a:e5:cd:b7:4f:b3:e6:
                    05:1f:57:d6:b6:e3:9e:81:e1:44:51:5b:bc:25:46:
                    f1:d9:ec:26:d1:cd:88:13:46:6f:2c:6c:29:41:80:
                    9e:9e:12:27:b2:c7:ef:dc:de:b1:f6:01:7b:52:f2:
                    68:46:ae:e1:aa:84:26:d3:a0:a7:30:28:f1:89:a6:
                    ad:21:08:c9:cd:da:e2:99:d4:c9:a5:cc:ed:b9:3d:
                    e1:f1:48:73:11:a6:ca:c1:de:1b:54:02:ed:56:94:
                    94:98:3c:e6:37:55:4e:1a:f9:5b:41:f2:1f:99:d0:
                    2a:c6:7b:cd:2f:56:a9:1f:17:4c:e3:d5:7e:1d:61:
                    17:ae:44:ae:3d:00:e1:86:45:9b:39:fd:1c:83:d1:
                    e2:a2:3a:b5:c5:a7:11:49:2f:55:01:6e:0d:56:a9:
                    16:3b:25:47:9f:1f:54:fb:5e:43:57:aa:ab:99:92:
                    a8:e7:c6:45:e6:82:b1:c4:b2:34:2e:90:00:48:53:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:51:7C:BE:2B:3C:DB:15:BF:80:80:3F:C9:B2:9D:93:6C:20:A9
            X509v3 Authority Key Identifier:
                keyid:2A:A1:79:1D:91:BF:FF:6E:CD:E2:95:F6:F5:22:FB:76:4A:33:21:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AA1791D91BFFF6ECDE295F6F522FB764A332153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3332203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:33:f1:56:43:a2:4e:2b:c2:1d:43:22:00:10:61:02:c0:
         49:0a:f9:f9:2a:37:f1:f9:3c:26:d2:51:89:15:f3:76:71:63:
         a1:6d:c3:39:64:02:9d:28:37:94:9a:6d:33:ff:1e:d4:51:ff:
         8f:1e:6c:07:d3:43:66:47:43:df:45:2c:2e:06:13:3c:ff:24:
         ca:9d:1e:07:9d:2d:05:96:d2:59:ca:e3:70:49:86:cf:37:27:
         9f:14:8b:db:54:88:d5:8c:3c:b6:a3:a5:0c:fc:7e:eb:a5:cc:
         a7:bc:37:c7:95:7e:6f:c9:5b:e1:4b:22:b5:1a:c1:8e:a8:33:
         85:80:45:1e:80:c7:e6:ec:89:75:b8:f2:81:7a:50:66:5c:80:
         a7:68:13:21:c3:fe:f9:c2:cc:08:97:0f:ce:20:42:ac:45:66:
         e9:64:5d:14:a2:be:12:35:f9:30:ad:f5:e7:e6:63:05:fe:69:
         5d:80:26:54:cb:0d:9b:73:20:6a:b0:20:1d:6a:f8:fa:d5:7e:
         e6:37:16:c7:80:9d:84:c6:30:09:4a:9a:fc:13:77:3e:ed:ef:
         53:2f:7c:35:04:76:0a:b5:11:35:21:12:63:66:0f:ff:a5:2d:
         74:22:69:c1:b0:e7:88:2f:bb:f4:13:36:d0:c7:f6:43:a5:0b:
         0c:0e:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org