Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32332d3233203d3e20323733363831.roa
File:                     3230312e3135392e3131382e302f32332d3233203d3e20323733363831.roa (raw, json)
Hash identifier:          7yf6qo+t04k9QsdlIsy9KzdCEH0lQxXhTb6iRccU5xU=
Subject key identifier:   54:EE:AE:C0:64:36:54:90:DA:8F:93:9C:2C:CF:CA:2A:3B:FD:03:02
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       6E02EBF7C7E9875ED2FFB309E101B2EB20EBF9F9
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32332d3233203d3e20323733363831.roa
Signing time:             Thu 04 Apr 2024 07:35:02 +0000
ROA not before:           Thu 04 Apr 2024 07:30:02 +0000
ROA not after:            Thu 03 Apr 2025 07:35:02 +0000
asID:                     273681
IP address blocks:        201.159.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:eb:f7:c7:e9:87:5e:d2:ff:b3:09:e1:01:b2:eb:20:eb:f9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:02 2024 GMT
            Not After : Apr  3 07:35:02 2025 GMT
        Subject: CN=54EEAEC064365490DA8F939C2CCFCA2A3BFD0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:25:41:7e:b0:f1:99:f7:c4:ee:d6:31:ce:
                    76:e5:5c:de:1c:1d:47:d3:f1:a3:08:24:c7:fd:8b:
                    4a:04:90:5b:d2:5d:bc:76:9d:bc:67:13:60:c5:43:
                    a4:ed:21:92:5c:4e:66:94:16:35:88:1c:cf:3a:a6:
                    27:b4:02:07:bf:3a:27:a9:40:11:89:dc:b7:cf:ec:
                    07:9e:24:ae:76:92:9d:f3:f0:32:c1:eb:40:60:2b:
                    ea:47:39:eb:06:59:21:33:08:fa:2a:35:99:06:a7:
                    74:41:8a:8a:42:d8:6f:53:e2:da:4c:72:68:30:c9:
                    46:98:e0:db:e8:0b:d0:28:e0:04:96:1d:88:91:fc:
                    47:22:e5:75:5a:95:52:f0:cf:44:f5:dd:2f:b8:25:
                    0a:69:b0:83:51:20:0b:c2:07:ba:8e:f9:55:bf:7b:
                    96:c7:3d:54:ac:a4:07:cb:97:c2:06:ce:3a:d2:b7:
                    4b:64:77:70:40:0e:4d:19:63:ad:c5:9d:a5:44:7a:
                    90:de:75:60:bd:d0:75:15:cb:d2:4e:a4:26:e2:37:
                    e1:14:a9:a2:60:d6:48:92:fe:dc:43:b4:8e:40:fc:
                    44:36:e0:a2:53:ce:0e:e9:1c:0d:78:9d:d9:d7:f0:
                    0e:4f:c8:63:77:dc:13:d1:af:a8:e1:34:60:19:24:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EE:AE:C0:64:36:54:90:DA:8F:93:9C:2C:CF:CA:2A:3B:FD:03:02
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32332d3233203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:e7:93:e6:dc:84:f9:7a:da:4a:5f:6c:47:8f:fc:7b:79:
         a0:24:de:15:27:5f:76:9f:b4:6e:a0:97:7a:89:8c:d3:7c:7f:
         36:61:fc:a6:70:1a:55:80:9a:a2:0f:11:36:13:91:f8:4d:9c:
         d7:06:ab:82:c1:47:f7:5e:56:7b:68:b9:d7:cc:ab:16:34:26:
         1f:d9:9e:22:1b:5d:21:58:6a:89:af:81:71:33:37:12:c5:65:
         ac:32:b9:46:bd:4f:c4:83:8b:f8:62:b9:e9:4e:fb:d7:52:c1:
         8d:71:f8:3b:8b:84:d4:f8:05:6f:a6:0c:26:20:23:96:8f:13:
         3c:9b:39:e0:34:50:77:38:61:0d:4a:aa:8e:b0:a6:8c:a8:74:
         29:52:fb:84:a2:bb:40:ca:6c:2d:dd:7a:f0:30:f1:68:f8:6c:
         e2:cb:9a:18:57:12:da:6d:82:8a:0f:18:9d:14:da:ac:7c:05:
         00:2c:b3:2a:95:d3:16:64:db:a7:4c:59:5f:48:a1:0c:5b:73:
         b3:3c:e1:20:53:e8:30:3e:b3:89:88:90:1c:29:96:70:89:a2:
         47:bf:a3:ba:94:0b:52:83:94:97:87:7f:cf:4b:0f:dd:ed:f4:
         51:d7:fc:a4:ab:c1:f9:c3:c1:72:d2:c3:0c:f9:08:4a:5b:3e:
         fe:f5:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org