Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa
File:                     3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          pArO92BIGxIdlUj2Prldqkf/N6F0HwOXxb/g2Ku8IEc=
Subject key identifier:   AB:42:20:15:26:58:F1:37:FA:6D:DE:77:D1:BC:B8:0C:9A:AA:BC:34
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       1CD6DAA41C3DD44693A7B599C33B10CA6A30603C
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa
Signing time:             Tue 23 Jul 2024 12:02:34 +0000
ROA not before:           Tue 23 Jul 2024 11:57:34 +0000
ROA not after:            Tue 22 Jul 2025 12:02:34 +0000
asID:                     61844
IP address blocks:        201.148.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d6:da:a4:1c:3d:d4:46:93:a7:b5:99:c3:3b:10:ca:6a:30:60:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:34 2024 GMT
            Not After : Jul 22 12:02:34 2025 GMT
        Subject: CN=AB4220152658F137FA6DDE77D1BCB80C9AAABC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bf:ab:89:fe:49:65:fe:81:13:91:67:35:9a:
                    d4:91:83:21:2a:94:20:bd:44:b0:e4:fc:88:d3:29:
                    4d:aa:68:65:bf:c8:ba:ab:7c:52:5d:f9:71:44:3b:
                    86:3f:77:6a:cb:e5:f4:2a:6b:91:23:d4:ae:36:a4:
                    ae:ad:e8:13:61:3a:72:5b:31:8a:e3:11:b3:37:95:
                    ef:5a:02:4c:40:27:76:07:53:e2:f1:80:27:12:58:
                    67:b3:50:6d:c0:db:bd:ca:4b:90:24:03:c8:36:2c:
                    aa:e6:9b:69:a1:b3:fb:a0:86:f3:f6:25:aa:ba:3d:
                    80:d8:9b:ac:9d:ea:c3:1e:f0:08:bc:36:dd:bd:65:
                    2b:df:13:59:78:d1:2f:6a:78:f7:89:10:c5:1e:63:
                    93:c4:6c:38:55:52:1d:27:5c:9a:91:ed:6a:98:20:
                    1f:16:db:a6:75:30:db:95:de:7e:81:85:0a:e4:f2:
                    a3:e1:89:b9:08:4e:4d:45:e9:1c:7f:de:e5:16:af:
                    ca:b5:58:aa:cf:67:96:e9:da:04:58:82:89:36:3a:
                    0d:a8:4d:73:bc:50:64:c5:07:38:fa:01:ca:9d:36:
                    b6:aa:fd:1a:66:f1:4c:9e:8d:ed:3e:ea:94:b9:69:
                    e2:d7:01:7d:03:6a:e9:ad:aa:12:e2:1d:ff:fc:24:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:20:15:26:58:F1:37:FA:6D:DE:77:D1:BC:B8:0C:9A:AA:BC:34
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3230312e3134382e3132342e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:4d:68:72:c5:ad:21:c0:2f:9c:a9:9e:d5:7e:2a:a7:d6:
         b2:a3:2a:13:57:90:b9:1e:43:da:71:aa:de:45:aa:09:55:8d:
         51:42:8a:4c:fe:0a:6a:52:66:06:6f:19:70:72:e9:f3:19:43:
         00:5b:3f:26:de:f9:4f:38:91:b7:ae:da:8b:f4:6c:14:c9:a6:
         27:b0:d4:76:bb:25:b7:f7:8d:e8:91:0e:7a:97:f3:a3:b1:e3:
         7e:71:bf:69:5f:c4:8d:41:be:0c:58:d5:c1:e2:d2:1b:83:40:
         99:bd:ed:39:52:e9:70:2f:cf:ad:37:39:42:8b:7b:53:3a:0a:
         14:26:65:fa:45:76:76:2d:83:e3:ea:9e:4a:92:dd:3a:18:3f:
         e9:0c:ee:07:c5:52:aa:97:c6:4a:4e:fe:0d:7c:33:9d:c6:a3:
         46:ee:33:fa:c2:5d:64:41:2f:7d:80:70:28:0b:85:22:7a:62:
         dc:3b:76:36:1b:a8:3e:5c:f6:f5:01:03:3d:23:17:e8:f9:77:
         dc:97:a1:9b:f0:4a:f9:ae:62:ef:59:b2:51:23:ad:ef:e4:c2:
         c9:01:45:a2:c0:b6:bc:cd:b7:34:75:66:af:d0:3e:a5:f5:71:
         f7:17:ba:1e:6f:bc:b9:4c:ed:27:12:81:37:eb:63:e9:eb:11:
         90:92:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org