Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32342d3234203d3e20323632353335.roa
File:                     3230312e3135392e3131362e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          t3PoQB7NrbvBcajQKX9vdcvWYSUccLnF1nSzQj+MmTs=
Subject key identifier:   BD:B6:C1:3C:37:67:58:C2:64:30:29:A3:EF:E7:1A:30:B5:7A:53:FC
Certificate issuer:       /CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
Certificate serial:       40FCA39D1CF4DE734DB828830209F3D8089B8E59
Authority key identifier: 0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32342d3234203d3e20323632353335.roa
Signing time:             Fri 10 Mar 2023 14:57:10 +0000
ROA not before:           Fri 10 Mar 2023 14:52:10 +0000
ROA not after:            Fri 08 Mar 2024 14:57:10 +0000
asID:                     262535
IP address blocks:        201.159.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fc:a3:9d:1c:f4:de:73:4d:b8:28:83:02:09:f3:d8:08:9b:8e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE
        Validity
            Not Before: Mar 10 14:52:10 2023 GMT
            Not After : Mar  8 14:57:10 2024 GMT
        Subject: CN=BDB6C13C376758C2643029A3EFE71A30B57A53FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ef:f3:cb:73:70:03:be:47:07:77:36:7f:e1:
                    96:61:00:aa:c6:11:c4:35:8e:f4:c2:18:ae:12:73:
                    4c:91:81:d3:72:73:d0:84:f9:f8:9c:8d:d4:c0:26:
                    be:62:e3:de:2d:fc:55:84:ac:5c:17:75:16:f8:dd:
                    3a:2e:7a:f1:ad:c7:8d:1a:1f:bc:0e:e0:38:ce:eb:
                    ec:2a:81:99:7f:fd:97:4a:32:51:ed:7a:83:12:ff:
                    43:93:59:3d:9f:9e:7b:4e:65:93:cf:5e:2d:5c:4f:
                    03:d3:82:a6:cb:ba:40:7c:e9:79:e7:5e:6a:42:2b:
                    90:8c:36:5a:5b:3c:3d:f8:f1:a1:05:c5:61:00:d9:
                    0a:ef:2b:ed:ac:fb:29:81:ea:0a:0a:8a:a5:81:2b:
                    d6:00:1b:cf:f5:fc:30:ab:54:a8:a8:52:0a:70:a2:
                    0b:41:a5:06:52:2b:f7:15:5c:5c:47:41:ff:ea:fa:
                    d9:94:dc:01:6e:60:6a:82:e7:a6:65:c6:75:e1:d3:
                    ae:87:ca:0e:f9:71:c5:55:8f:09:e4:39:66:78:67:
                    ab:ac:b2:09:64:7a:8b:2a:2d:77:60:21:f9:4d:55:
                    7d:e6:7c:06:26:94:17:57:9a:3b:42:a3:b5:a1:3d:
                    d3:26:fd:76:66:b0:0a:9a:eb:33:45:07:dc:d0:84:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B6:C1:3C:37:67:58:C2:64:30:29:A3:EF:E7:1A:30:B5:7A:53:FC
            X509v3 Authority Key Identifier:
                keyid:0F:94:46:CA:77:7E:0C:EA:27:C3:2F:B1:51:99:BB:BB:EB:2B:BF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9446CA777E0CEA27C32FB15199BBBBEB2BBFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:78:fa:d8:c3:5b:2b:f3:62:ab:ea:e0:8e:44:7a:e6:65:9f:
         bd:6e:ed:37:e9:e1:07:f7:da:3c:4b:59:60:b7:ac:1a:bf:82:
         7b:ec:24:6b:b9:9a:bf:78:95:29:a8:5c:32:0a:d9:94:1c:11:
         56:f5:27:bc:9a:a6:11:84:c9:69:85:16:bc:e3:e4:76:13:3b:
         c2:f6:9e:24:b9:06:6f:4d:1d:f0:9e:a4:3d:de:f1:bb:72:84:
         15:d5:01:92:eb:4d:79:cd:eb:1c:a8:54:08:eb:2a:3e:3e:50:
         f5:47:c5:95:8e:ba:4e:85:e8:d2:20:fe:00:b6:80:e4:bc:4e:
         6b:c1:af:25:52:4f:e0:cd:29:72:56:cf:6a:5d:24:ec:65:c5:
         04:c3:2d:ae:84:17:bd:f1:58:f2:5e:a3:24:42:ef:11:05:02:
         26:6b:68:93:27:a1:a7:06:cf:5c:58:d1:16:fd:56:7e:1c:9f:
         75:14:ce:79:b2:fe:9e:41:68:56:fe:c7:f5:45:40:7d:87:48:
         d2:16:fd:f3:79:bd:4c:2c:09:31:23:4f:a5:d8:fa:2c:c1:5f:
         67:0d:8a:4d:54:ff:71:8b:e5:fc:68:10:a5:47:18:9a:ca:76:
         7a:db:0f:27:e6:f9:ac:a6:40:14:b3:27:49:11:f7:f4:d2:68:
         ac:ef:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org