Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa
File:                     3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa (raw, json)
Hash identifier:          n68XHGfJ1zaWFLVY9yV7xzxFEe/4wVCmGw3yDnjAwxg=
Subject key identifier:   04:31:27:6A:7F:21:8C:30:33:C8:74:85:42:66:5E:2E:4D:B3:8F:5E
Certificate issuer:       /CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
Certificate serial:       4CBFD3CAEBAC7A1CD50CF9548F6F5ED879EB3E65
Authority key identifier: 18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa
Signing time:             Fri 20 Oct 2023 11:19:04 +0000
ROA not before:           Fri 20 Oct 2023 11:14:04 +0000
ROA not after:            Fri 18 Oct 2024 11:19:04 +0000
asID:                     271335
IP address blocks:        207.248.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bf:d3:ca:eb:ac:7a:1c:d5:0c:f9:54:8f:6f:5e:d8:79:eb:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
        Validity
            Not Before: Oct 20 11:14:04 2023 GMT
            Not After : Oct 18 11:19:04 2024 GMT
        Subject: CN=0431276A7F218C3033C8748542665E2E4DB38F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:66:3c:47:c4:dc:98:38:ab:17:d1:40:73:
                    ec:ad:84:27:47:4c:3f:58:f3:30:a9:cd:f9:02:7e:
                    22:93:d4:81:a0:ec:69:8d:b3:d6:a9:62:9c:64:0a:
                    f4:78:65:5b:cc:6f:05:2d:33:4c:77:18:49:6d:0d:
                    61:6b:05:10:a2:ee:fa:11:0a:82:f1:65:21:85:86:
                    72:3d:32:40:4d:0a:2a:c8:f1:97:6e:8e:5d:cc:0d:
                    66:01:06:20:8c:d6:77:9e:34:07:1c:80:45:c2:27:
                    46:d2:6c:1b:42:00:fe:28:e8:21:c1:93:03:1b:d3:
                    55:4d:31:f7:88:c5:90:0b:53:21:85:a1:24:1b:2b:
                    5f:be:7f:0f:04:c1:14:86:0b:25:1f:40:dd:92:18:
                    de:ee:5f:89:47:74:12:b5:24:02:13:d6:da:43:8b:
                    95:07:86:30:68:fa:93:e7:36:2d:41:6c:68:e7:8b:
                    fc:48:62:e0:69:7a:a0:7e:77:f5:32:8f:df:b7:a7:
                    83:67:20:01:85:c9:5b:16:42:21:4d:0c:8e:ce:3b:
                    cf:2d:13:fb:1a:79:9a:87:0b:7c:45:24:ae:9c:23:
                    9e:00:5e:28:c9:b9:6f:78:ee:bb:c3:28:f1:29:7b:
                    fc:2f:18:db:25:d8:f5:aa:b0:f2:dd:32:17:3d:98:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:31:27:6A:7F:21:8C:30:33:C8:74:85:42:66:5E:2E:4D:B3:8F:5E
            X509v3 Authority Key Identifier:
                keyid:18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32302e302f32332d3233203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:d5:ea:e0:2b:3d:ea:ed:e3:a4:3e:d5:59:3d:5e:90:83:
         3a:61:3a:95:9d:17:8e:72:4c:3d:d9:b5:95:26:c4:30:4d:32:
         fa:87:c0:7c:14:20:7b:b8:cc:41:b5:fc:69:ee:28:01:4b:82:
         f2:fe:1c:a7:ce:ff:7c:bb:a2:92:c8:f4:95:39:32:29:3b:c7:
         ce:cf:c6:fb:cd:a6:9e:19:fc:49:97:7c:bc:33:d6:89:38:d1:
         5b:8f:c7:fd:02:af:ee:9e:fe:b4:92:74:6d:e9:04:0c:d4:09:
         d2:c4:b5:60:01:8e:df:d6:91:95:be:a3:7e:c3:fe:13:1f:d9:
         7e:c9:b6:a4:7c:49:cb:d1:b4:88:ea:fe:ea:fb:23:59:31:60:
         2c:92:1c:eb:da:a2:cf:8a:1f:91:6c:3e:53:79:30:cc:ed:a3:
         b6:60:71:aa:6a:5b:a1:0b:cf:00:f6:63:ea:12:f1:2f:3f:80:
         0e:34:f1:b2:74:1f:8a:54:b9:63:28:9d:44:d5:60:fc:4e:fd:
         32:b8:47:7c:9c:ce:4e:11:40:c0:4e:c1:32:b0:3c:6a:dd:84:
         1f:2a:df:8f:56:f8:c8:ef:7f:61:dd:1a:15:1d:d2:a8:d4:96:
         25:67:2b:fb:16:d6:94:ab:b3:bc:a4:00:10:03:eb:7b:03:e1:
         b5:96:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org