Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa
File:                     3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa (raw, json)
Hash identifier:          KZKzNySeNo1G2OK/X9W86l1WLRqnkxYfxeFb8SwTn5I=
Subject key identifier:   6D:C6:CA:34:F5:33:09:8D:DB:6D:59:90:21:4F:63:15:84:37:06:B6
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       43DE7D1F6AEC859D82E61D2A6B8B0338B6638E30
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa
Signing time:             Thu 04 Apr 2024 07:35:02 +0000
ROA not before:           Thu 04 Apr 2024 07:30:02 +0000
ROA not after:            Thu 03 Apr 2025 07:35:02 +0000
asID:                     273681
IP address blocks:        201.159.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:de:7d:1f:6a:ec:85:9d:82:e6:1d:2a:6b:8b:03:38:b6:63:8e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:02 2024 GMT
            Not After : Apr  3 07:35:02 2025 GMT
        Subject: CN=6DC6CA34F533098DDB6D5990214F6315843706B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:fd:f6:81:b5:b3:f6:6e:bf:24:f9:39:10:
                    bb:9a:07:ec:cf:7c:ce:c2:0b:63:09:93:e4:7c:b9:
                    54:69:8e:4c:eb:dc:5d:42:3c:2f:17:72:c7:13:38:
                    fa:18:1c:79:d7:8f:7a:02:af:21:4d:fc:59:af:c2:
                    12:e4:fb:dd:13:e8:d8:8a:6e:7e:12:15:40:e1:4b:
                    81:75:c3:11:7f:b1:f8:cb:df:32:78:5c:a0:ae:b1:
                    d0:97:80:d3:99:90:c7:85:ff:61:04:0a:23:3a:ce:
                    74:70:05:52:62:11:2e:82:45:db:32:2e:c1:72:9e:
                    36:0b:77:4d:3e:04:11:df:a6:04:c0:36:64:df:ce:
                    6e:6c:6c:82:d4:62:53:5e:c0:4f:bb:1f:92:6a:cf:
                    cc:77:24:d3:07:8d:3c:f2:47:c1:fa:e5:26:e4:be:
                    e9:5d:20:a8:8b:48:67:bc:e4:db:6a:ae:56:51:09:
                    49:3a:96:4f:34:10:ba:e7:f2:c6:d9:ba:ee:e5:1f:
                    e9:7b:cd:df:5d:c2:e6:65:0e:fa:05:98:d1:69:ed:
                    b4:a8:58:fa:36:8d:2c:03:ef:f7:f7:cc:7e:3c:a7:
                    28:56:41:60:89:d7:14:7f:6d:97:6d:11:d1:97:c2:
                    a7:5f:8f:d0:3d:00:92:65:b8:68:37:cf:13:0d:0a:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C6:CA:34:F5:33:09:8D:DB:6D:59:90:21:4F:63:15:84:37:06:B6
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131372e302f32342d3234203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:58:7a:69:27:a6:a5:7c:33:5d:39:62:45:bc:96:5e:f9:95:
         c5:39:e8:13:f3:3e:42:04:d4:d5:98:a9:88:05:b6:d6:28:cc:
         0e:be:d7:b7:03:0e:5a:04:79:38:a8:68:6e:2f:ad:b3:ba:14:
         e8:f7:7a:21:89:7a:8b:7d:b5:2b:ad:45:01:9f:65:32:bb:ae:
         8d:0f:b9:71:f8:eb:63:e8:bc:d5:d8:39:49:9c:aa:ee:b6:3e:
         63:88:cb:62:ee:c5:1b:73:19:6f:14:50:a0:10:df:39:71:8f:
         c7:73:ad:66:02:1f:dd:fc:53:0c:bb:fc:22:39:62:37:0f:9c:
         a9:4f:23:31:e6:0e:3e:8b:45:b6:cc:64:6e:f9:54:b4:32:01:
         82:b3:6a:a1:0f:7b:95:97:91:9d:64:86:dd:2e:11:60:37:bf:
         54:3d:f1:d4:43:59:5c:ff:41:d5:c9:14:b7:72:85:9d:d2:6a:
         f3:90:e5:2e:94:92:f0:9f:3f:f3:c8:4a:e9:70:3f:98:37:0b:
         a2:41:27:bf:7a:8a:87:2d:b7:35:be:25:89:78:a0:c2:f1:41:
         3f:12:5a:7c:57:81:0f:ab:bc:88:c4:10:f2:46:b3:2b:3c:94:
         8b:bf:91:b1:74:4b:f2:e4:c9:69:59:b0:6d:d0:c4:44:ce:73:
         69:23:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org