Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e302e302f32332d3233203d3e20323730343830.roa
File:                     32342e3135322e302e302f32332d3233203d3e20323730343830.roa (raw, json)
Hash identifier:          /Hk7S+6IgelFKDumbPVE9/4AjE0v4kqrdV1Fg6ylgyw=
Subject key identifier:   02:65:0C:84:60:93:A2:BD:0E:81:47:45:37:AA:15:76:5F:12:C2:F8
Certificate issuer:       /CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
Certificate serial:       7CEC54BCA8AB7E845FE7363B5BCE6A2BFA935654
Authority key identifier: AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e302e302f32332d3233203d3e20323730343830.roa
Signing time:             Wed 24 Nov 2021 03:47:34 +0000
ROA not before:           Wed 24 Nov 2021 03:42:34 +0000
ROA not after:            Wed 23 Nov 2022 03:47:34 +0000
asID:                     270480
IP address blocks:        24.152.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ec:54:bc:a8:ab:7e:84:5f:e7:36:3b:5b:ce:6a:2b:fa:93:56:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E
        Validity
            Not Before: Nov 24 03:42:34 2021 GMT
            Not After : Nov 23 03:47:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:a9:3d:17:e7:1e:96:46:d8:86:99:14:c6:
                    8e:a1:bf:5f:b7:8b:d8:1f:95:f3:bd:f3:53:a6:59:
                    20:f1:71:c6:c3:b8:ac:72:f0:b3:39:e9:c3:f3:16:
                    2b:70:ea:83:8f:88:bf:ac:b5:7c:76:14:3f:b3:38:
                    85:6a:0a:7a:3d:4e:f1:22:56:eb:9b:c3:21:eb:1c:
                    cf:14:9e:d0:5c:1c:ca:e1:28:6a:79:52:f4:d3:c7:
                    77:90:f5:40:0e:3c:54:c4:ff:f9:e6:8c:7c:f3:5c:
                    fa:b9:ad:a1:14:29:c8:80:20:10:56:c4:d7:10:3f:
                    ef:22:82:97:6d:16:f7:57:a4:eb:85:44:4b:b5:3d:
                    51:e7:e4:61:11:1a:d7:0f:0e:92:e3:49:9d:af:26:
                    45:81:dc:99:60:82:5f:d8:a2:e7:84:da:c1:91:07:
                    45:07:b3:87:16:32:cb:c2:9c:36:56:36:8d:08:14:
                    6b:33:bf:57:42:c3:a5:ca:7a:e9:02:8e:56:a3:1a:
                    dd:3d:16:d6:15:80:b5:4d:18:f8:71:1d:74:6c:92:
                    c0:ce:6e:0d:8f:1d:96:e1:83:3b:84:f1:88:41:28:
                    8e:c3:28:7a:78:bc:34:db:2d:72:a5:95:dc:86:2c:
                    68:4d:43:08:e1:f6:55:4e:be:b0:c0:24:9e:3a:38:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:0C:84:60:93:A2:BD:0E:81:47:45:37:AA:15:76:5F:12:C2:F8
            X509v3 Authority Key Identifier:
                keyid:AF:FD:1A:00:01:4B:E8:25:E2:7B:1D:BE:87:E9:73:BA:D5:D8:1A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFFD1A00014BE825E27B1DBE87E973BAD5D81A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FmzVot6dWRLx9f5e9zJWThN1vnEQabMvpurWd6WHyxK3/0/32342e3135322e302e302f32332d3233203d3e20323730343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:34:51:04:da:82:48:63:23:fc:bd:e3:23:7c:ca:2d:d9:c2:
         b0:dd:36:c9:03:d6:e2:a9:5f:e3:0c:33:63:17:ca:9a:ee:b7:
         95:02:1a:52:62:9d:1e:b7:d3:80:a8:bd:36:01:e9:17:04:1f:
         00:73:a6:c3:c5:2a:e8:aa:b9:55:e6:56:97:f4:78:1b:f6:0b:
         c7:e8:40:ee:ba:c1:2c:bd:4e:71:a9:48:7a:86:3e:42:05:2b:
         a2:1c:c9:ef:3d:ee:b6:ab:4a:eb:83:06:4e:d8:4c:4b:d7:1a:
         0e:ea:1a:53:1a:ca:db:26:85:e0:61:84:8b:8f:dd:18:af:c2:
         2f:68:96:90:69:15:81:b7:25:39:c7:e8:31:29:3e:f9:ff:66:
         e4:96:94:c6:eb:24:92:ae:66:2f:8a:2b:65:50:d8:c9:9e:72:
         88:4d:f5:a4:3a:ee:b0:69:7c:bf:70:f3:4e:57:3a:f4:7c:91:
         37:ae:91:5a:da:ba:83:88:53:07:be:64:03:05:5b:c1:eb:de:
         32:22:2d:c3:59:a7:d2:01:12:24:0f:00:f9:1b:c8:c3:82:04:
         91:4a:d0:87:bb:56:2a:01:1a:cf:d6:7e:ea:28:43:c4:79:b7:
         a3:be:a0:99:a0:74:2f:41:92:64:de:24:73:28:0e:31:4c:62:
         a3:6a:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org