Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
File:                     3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          JdHNjz50XyD1tOaGG9ClPcCNzOuBS7igqc+7nr1eYus=
Subject key identifier:   C7:7D:64:71:61:D1:C9:2B:88:01:01:58:50:C4:96:98:A7:08:10:31
Certificate issuer:       /CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
Certificate serial:       7E2FB7ABF047C6011D47F7788B58C572013469CD
Authority key identifier: CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
Signing time:             Wed 03 Apr 2024 18:31:40 +0000
ROA not before:           Wed 03 Apr 2024 18:26:40 +0000
ROA not after:            Wed 02 Apr 2025 18:31:40 +0000
asID:                     22356
IP address blocks:        201.76.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2f:b7:ab:f0:47:c6:01:1d:47:f7:78:8b:58:c5:72:01:34:69:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5DDC6846F108B3778C38774DB09DDC03C92903
        Validity
            Not Before: Apr  3 18:26:40 2024 GMT
            Not After : Apr  2 18:31:40 2025 GMT
        Subject: CN=C77D647161D1C92B8801015850C49698A7081031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:4a:71:c3:b0:05:e5:8b:8f:0e:8c:b1:de:
                    d0:54:92:7f:fa:9b:79:44:a0:0d:fe:ac:c8:a5:d1:
                    43:db:d8:63:e2:f7:79:7a:f0:b4:9b:eb:e0:a2:c5:
                    46:11:9d:a7:c6:97:b7:94:ad:29:e3:ce:e6:59:1c:
                    d7:0e:c1:6b:b0:af:f5:06:d1:f2:b5:41:c0:37:2a:
                    8e:cf:a8:fe:0d:c7:c0:7c:21:d6:7a:4e:8c:15:5f:
                    4e:74:53:30:3f:56:ea:ec:83:c5:1f:33:33:50:65:
                    44:d7:e8:d9:e0:bd:cb:60:60:1d:87:f7:8b:15:ec:
                    47:cf:48:c7:6c:f3:66:b6:37:b9:76:d9:f7:db:07:
                    74:1a:51:32:e7:99:a2:e4:e3:9a:0a:2d:d3:bb:52:
                    f3:24:92:76:29:0a:5b:c0:d1:82:2b:2c:29:82:34:
                    73:36:be:98:1c:6c:96:b4:11:3d:c9:bd:7c:4f:02:
                    bd:56:c3:f5:48:67:76:41:a6:6d:a7:23:0d:fd:e7:
                    ad:c6:c4:14:c7:d0:28:18:ca:7b:58:2c:ec:e2:5f:
                    45:78:ff:6c:d5:5d:ad:c8:c9:e0:38:d6:4a:03:be:
                    91:78:a3:10:d5:04:29:88:7c:70:3f:c2:8b:75:56:
                    85:37:c8:4d:64:30:3f:00:1e:1c:cf:5b:78:a0:7a:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:64:71:61:D1:C9:2B:88:01:01:58:50:C4:96:98:A7:08:10:31
            X509v3 Authority Key Identifier:
                keyid:CF:5D:DC:68:46:F1:08:B3:77:8C:38:77:4D:B0:9D:DC:03:C9:29:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF5DDC6846F108B3778C38774DB09DDC03C92903.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/1/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:e9:21:b4:b9:d6:c7:62:98:d7:45:ec:a4:7d:07:46:c1:
         8a:4b:af:56:fd:c7:39:d7:08:3b:eb:17:3c:15:a2:3e:8c:93:
         26:cd:8d:56:9a:c1:fc:c6:06:b5:e9:12:15:cb:77:3a:01:ed:
         1f:ed:e8:44:64:ec:3b:5e:0d:28:1d:b9:8d:34:2c:ad:be:8d:
         26:1c:d4:44:49:32:12:10:89:4a:82:66:c7:55:2f:b1:a1:b5:
         2a:c5:6b:3c:d4:21:ee:e9:08:9b:4c:b2:b0:2b:c4:bb:d8:9d:
         25:4d:32:6b:b7:f6:c0:96:8a:65:db:30:e3:50:76:5f:8a:cb:
         00:7f:47:ad:07:7f:12:08:bc:ce:81:a2:f7:2f:4d:01:67:6a:
         1d:0f:86:46:7f:16:7a:f9:f4:04:4d:4e:b8:61:b4:17:9b:5c:
         ee:11:06:26:9f:15:1b:77:2d:3f:73:c3:83:10:88:fb:34:3d:
         51:f4:f6:2e:ea:0b:d2:3d:3e:cb:47:9e:9e:5a:8d:66:82:3c:
         8d:b0:1e:35:ff:00:c6:99:51:7d:2c:67:16:07:e5:3a:8e:39:
         3e:8b:c2:c7:67:16:ef:a9:ed:fd:2f:85:09:75:01:77:64:cb:
         ff:ba:ee:7f:00:66:b5:c3:bb:d1:db:68:31:48:08:8b:8e:d9:
         6a:67:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:30:38 2024 by rpki-client on console-fra.rpki-client.org