Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
File:                     3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa (raw, json)
Hash identifier:          cpFXuzeRKjWcS5lw4kT87bInhVjvwE1ryizPlRmGkxk=
Subject key identifier:   27:6F:76:86:33:18:E6:5D:6A:27:C0:F5:64:23:0B:7C:20:F4:05:57
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       7E1E5D25BFD9B7364092E73719442427DDEBDDE8
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
Signing time:             Thu 04 Apr 2024 07:35:01 +0000
ROA not before:           Thu 04 Apr 2024 07:30:01 +0000
ROA not after:            Thu 03 Apr 2025 07:35:01 +0000
asID:                     273681
IP address blocks:        201.159.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1e:5d:25:bf:d9:b7:36:40:92:e7:37:19:44:24:27:dd:eb:dd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:01 2024 GMT
            Not After : Apr  3 07:35:01 2025 GMT
        Subject: CN=276F76863318E65D6A27C0F564230B7C20F40557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:2b:f6:8e:1a:c1:6e:90:f5:b8:ad:84:ad:
                    09:70:ad:28:28:35:a1:8f:8f:b1:55:eb:fc:33:80:
                    cf:7a:7c:6b:d0:9d:30:75:7d:96:8c:7d:30:87:99:
                    a0:3b:ab:cb:61:0a:e0:8c:4a:df:65:aa:33:90:6c:
                    36:de:15:84:29:c0:44:96:a3:21:14:a5:84:4d:de:
                    e6:1c:d8:c8:96:1d:2f:9d:1d:b5:7a:20:bb:9b:68:
                    3e:2b:40:d0:9d:f5:b4:4a:e7:0c:92:28:ca:5f:86:
                    1e:96:d9:c0:bd:72:46:cf:24:15:d2:2e:0a:41:a7:
                    87:30:a5:10:e6:eb:fc:13:58:2b:3a:6f:b3:3e:e7:
                    b3:57:e4:d5:d5:19:8f:d5:21:89:0c:ef:82:8b:8e:
                    13:1a:58:bd:c6:d8:02:3b:e3:d2:c6:39:ff:d1:c2:
                    5f:9d:93:1d:3d:30:68:7e:23:79:b9:b8:76:4d:bf:
                    14:c6:7e:de:c8:dd:57:0c:6d:d6:2e:5a:59:6d:5f:
                    3b:b5:43:48:79:92:1a:e1:c3:d6:82:ca:63:13:f0:
                    a6:bf:e5:63:4d:df:fc:73:33:8b:77:dd:1b:dd:1c:
                    50:fa:4e:ce:7a:7d:e2:7d:4d:90:57:6a:10:eb:0e:
                    a1:a2:06:b0:d4:36:a3:04:14:ca:5e:63:11:86:b6:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6F:76:86:33:18:E6:5D:6A:27:C0:F5:64:23:0B:7C:20:F4:05:57
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:da:9f:2d:12:ec:7d:e1:b4:2d:4b:31:23:a6:00:6a:2c:
         78:c2:95:6c:aa:7b:90:d9:fa:e4:d1:8c:23:bd:8d:94:66:4c:
         29:8b:b4:30:60:75:cd:ee:17:f1:71:2d:53:d3:27:87:28:55:
         36:f6:60:3b:67:69:99:77:fc:4e:30:2b:e7:9c:1f:e3:e0:d1:
         47:cd:0b:23:2e:f1:6a:17:6f:38:79:78:b1:69:db:8b:f1:b8:
         7e:59:fc:1b:ba:5c:d0:91:5a:f4:18:49:c1:ff:3c:dc:60:fb:
         36:38:42:61:dd:66:69:01:4c:19:62:e7:fa:b6:43:f9:8a:86:
         d2:64:ab:35:24:23:27:36:d1:f3:3d:58:88:00:f0:65:04:30:
         70:a1:ec:32:68:95:53:1a:4e:ad:2d:44:1c:61:23:a9:45:aa:
         49:1e:b1:90:9c:ca:27:46:53:4b:0f:24:f1:5f:5c:70:08:fc:
         da:4b:ef:4e:a7:d2:80:0e:36:4f:e6:47:22:c4:a0:2c:10:05:
         12:4d:6b:79:63:73:da:27:c4:eb:ff:45:ff:6c:4d:f4:9f:28:
         64:16:dc:78:34:bc:74:64:68:a9:07:7e:d6:34:e1:47:9a:d5:
         44:a3:32:78:7b:bb:f8:38:77:f6:be:e5:8c:89:dd:66:04:32:
         f1:4f:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org