Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32342d3234203d3e20323733363831.roa
File:                     3230312e3135392e3131382e302f32342d3234203d3e20323733363831.roa (raw, json)
Hash identifier:          4+RKLWxNxAvKV7yX1UhxWNfXOdYxsIyYb5gWNg1753Q=
Subject key identifier:   17:9A:FB:5D:84:66:11:E8:EA:A4:09:08:BF:83:4C:E4:32:EE:F5:1C
Certificate issuer:       /CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
Certificate serial:       5F9172FD0A3830874FF775CC1CCD67985B9BB0F4
Authority key identifier: 82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32342d3234203d3e20323733363831.roa
Signing time:             Thu 04 Apr 2024 07:35:02 +0000
ROA not before:           Thu 04 Apr 2024 07:30:02 +0000
ROA not after:            Thu 03 Apr 2025 07:35:02 +0000
asID:                     273681
IP address blocks:        201.159.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:91:72:fd:0a:38:30:87:4f:f7:75:cc:1c:cd:67:98:5b:9b:b0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827016AA253A761A753DAC17D1C78F5A7DBD2FE9
        Validity
            Not Before: Apr  4 07:30:02 2024 GMT
            Not After : Apr  3 07:35:02 2025 GMT
        Subject: CN=179AFB5D846611E8EAA40908BF834CE432EEF51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:8f:d6:b5:00:6d:7a:ac:72:20:d7:dc:bb:
                    60:5f:7a:18:1a:a2:99:ee:2f:16:e2:6e:8a:0c:d0:
                    f5:ff:d9:a6:e8:01:72:14:e0:2f:47:ca:6f:2f:37:
                    e3:36:8f:27:0e:f7:69:59:96:06:6e:a7:ee:f0:12:
                    f7:e9:c9:31:de:23:2d:ed:4f:3f:52:1b:46:aa:36:
                    95:5d:5c:77:8e:03:6d:95:e9:93:c6:92:56:5b:0e:
                    fa:10:db:b9:e0:1a:b4:e9:5e:08:39:9d:fe:3d:87:
                    55:c8:43:32:84:e8:1c:55:f9:ca:75:be:5c:7d:71:
                    d8:f9:8e:44:32:d1:48:b4:f0:5b:4b:c9:5c:5e:d2:
                    4a:73:15:86:8c:06:bc:45:49:58:14:8e:a0:7c:a9:
                    21:33:2f:c6:ba:8b:14:a2:38:d1:95:25:f2:9c:38:
                    57:1c:67:d7:00:f9:87:cb:02:9e:ed:05:ef:47:f4:
                    85:10:b4:9d:ac:a4:fa:ca:66:33:b7:f4:da:65:22:
                    91:ac:be:4d:1f:54:83:22:20:33:e7:66:a9:03:fa:
                    31:15:29:ce:21:ec:9d:c8:c8:c6:8d:c4:19:3c:aa:
                    de:ac:13:96:7e:ff:50:c0:0e:c4:87:a7:fe:d6:75:
                    51:f4:c7:fd:b8:45:5a:c3:d8:0f:ce:52:e8:62:30:
                    89:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:FB:5D:84:66:11:E8:EA:A4:09:08:BF:83:4C:E4:32:EE:F5:1C
            X509v3 Authority Key Identifier:
                keyid:82:70:16:AA:25:3A:76:1A:75:3D:AC:17:D1:C7:8F:5A:7D:BD:2F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827016AA253A761A753DAC17D1C78F5A7DBD2FE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/1/3230312e3135392e3131382e302f32342d3234203d3e20323733363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:33:97:90:8f:bb:6c:92:98:80:7e:41:6a:02:db:93:25:
         8d:bc:40:92:d1:5c:a5:5b:e3:37:d1:56:ef:f8:b7:50:3f:e4:
         4b:1d:73:a4:d1:33:00:3e:d4:f4:89:39:ca:7a:49:a7:94:6a:
         c4:90:79:a7:79:a8:4c:1b:ad:7a:c7:8a:58:94:d2:d5:69:74:
         90:57:b0:27:fe:f0:63:f9:56:f3:41:7c:3b:6a:54:e5:b1:8e:
         2c:7a:58:1d:0b:ac:ce:e8:8b:8b:ad:b0:14:87:a1:ab:52:bc:
         25:38:7c:a7:f4:99:41:fb:ff:75:1b:a1:43:7c:a0:b7:2a:07:
         d8:e5:ab:57:f0:0f:8e:c1:e0:a0:ef:11:ea:f0:6a:0b:44:f0:
         ad:07:9f:45:e1:87:d2:12:33:2a:23:92:ca:4b:37:e8:9f:d1:
         d0:9e:89:f5:21:32:ef:0e:b5:e3:0f:1e:68:5c:d4:88:ab:4f:
         59:ed:6b:6c:26:93:a9:8b:d5:c8:eb:fe:33:6b:3a:22:65:b2:
         c1:6c:e7:3d:2f:db:85:5f:61:ae:b5:d6:51:88:1c:ac:f9:54:
         65:4b:20:51:11:db:bb:1a:2a:17:92:a0:ed:16:0c:fd:c1:df:
         4f:7b:01:49:54:f3:77:d8:69:0b:cd:87:92:77:36:ce:28:85:
         09:d4:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org