Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa (raw, json)
Hash identifier:          kOunCZuAbqoB6Nrqpu9bpPJfPd+UPkJbuwtmbZqYnrw=
Subject key identifier:   A3:09:3C:16:61:58:12:1D:AA:E5:3E:C4:A4:65:48:41:7E:C3:6F:72
Certificate issuer:       /CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
Certificate serial:       177C0693C1F6DF34F8D83164AD26680DFF4E020B
Authority key identifier: B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa
Signing time:             Fri 13 Oct 2023 14:44:11 +0000
ROA not before:           Fri 13 Oct 2023 14:39:11 +0000
ROA not after:            Fri 11 Oct 2024 14:44:11 +0000
asID:                     61796
IP address blocks:        201.159.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:06:93:c1:f6:df:34:f8:d8:31:64:ad:26:68:0d:ff:4e:02:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Validity
            Not Before: Oct 13 14:39:11 2023 GMT
            Not After : Oct 11 14:44:11 2024 GMT
        Subject: CN=A3093C166158121DAAE53EC4A46548417EC36F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:1a:84:33:c4:5c:68:7e:16:ba:de:56:fb:
                    1f:22:c3:2c:10:86:4e:dc:16:39:50:8d:7b:48:8d:
                    aa:0c:af:63:44:cb:f0:37:9d:c8:a5:76:90:c4:72:
                    41:c4:2d:86:ea:19:1f:63:84:c0:d1:7f:36:95:26:
                    4d:b5:de:8a:00:c0:e9:aa:40:fa:b6:bb:9d:e9:c7:
                    1b:67:06:56:04:13:42:a5:d6:20:3c:a6:78:b8:17:
                    51:b2:cb:66:02:20:eb:73:d0:65:d9:82:ce:82:07:
                    9e:18:b2:68:5b:f8:f5:7c:72:98:51:ad:4c:ff:9b:
                    ea:6f:6a:6e:8f:c7:e0:f6:14:fc:94:b8:9e:88:c4:
                    87:88:48:9c:9a:71:a2:ac:16:dc:87:e4:9e:a8:6f:
                    b6:09:5c:b4:ba:07:70:d1:1d:35:0a:90:ff:bc:83:
                    04:b1:d6:77:5e:28:a7:bf:08:53:b6:0c:5f:48:3a:
                    04:3a:b6:24:ab:df:5b:93:13:ff:76:df:98:44:2f:
                    1a:0a:14:8f:ed:83:8c:c5:b6:80:82:b7:7f:ce:23:
                    68:c2:ba:88:a9:f9:9f:6e:e9:f7:92:6f:25:bb:a7:
                    d4:ba:a7:26:26:65:81:d1:fb:10:9a:92:e4:21:a7:
                    79:8b:60:19:89:37:0f:1d:9e:35:ec:95:fc:f4:ca:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:3C:16:61:58:12:1D:AA:E5:3E:C4:A4:65:48:41:7E:C3:6F:72
            X509v3 Authority Key Identifier:
                keyid:B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3232203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:38:5c:5a:2c:b1:d9:7d:8a:c1:15:f8:dd:41:49:3a:98:a9:
         43:52:53:87:fb:94:76:e7:77:d2:bc:3c:3c:c2:d3:8a:39:88:
         1f:65:93:42:5a:0d:9a:62:65:fa:e5:a4:9d:ee:4c:23:b7:6a:
         f9:2f:05:eb:b9:e4:5f:c1:c0:b7:1f:cb:56:d3:69:90:bd:a3:
         72:b5:bb:b4:25:42:d6:3a:e7:11:61:28:3d:0d:9f:5a:cc:1c:
         22:ae:d7:ff:68:3c:cb:31:87:b1:57:b8:ad:59:59:99:ae:81:
         bb:d8:df:64:d3:5b:f6:61:50:22:a4:64:ca:c3:eb:61:28:8b:
         27:09:11:33:9d:e6:99:97:81:1e:fd:8e:4f:b6:fc:c6:fc:19:
         05:a5:a6:ee:d0:04:62:52:87:73:97:32:62:9b:8b:8a:9c:32:
         f1:7c:ac:34:81:98:43:be:b6:9c:15:87:eb:c7:fb:f8:85:66:
         91:a8:f8:39:60:53:56:31:f0:96:91:2a:2e:fe:1b:82:42:e6:
         fc:e7:50:f3:be:c6:3e:38:cc:8a:86:ba:bc:b1:0d:64:55:f0:
         0d:d6:ca:c3:8a:b5:d5:28:72:09:9e:9b:5e:b4:8e:da:e6:99:
         b6:ec:16:35:bf:8b:5f:f0:b9:ca:88:fc:71:37:f2:95:22:39:
         58:2b:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org