Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa (raw, json)
Hash identifier:          Fe0g23tCjg44Zzjmg9n5hwd/WzztOZOLo9JBqBbZ2OQ=
Subject key identifier:   8C:84:F3:63:B5:E5:4D:AD:54:9B:63:99:E0:F7:3E:2B:09:40:48:6E
Certificate issuer:       /CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
Certificate serial:       163ED76FD7C0807EB30C18518F2A0A7D708DB108
Authority key identifier: B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa
Signing time:             Mon 12 Feb 2024 13:31:09 +0000
ROA not before:           Mon 12 Feb 2024 13:26:09 +0000
ROA not after:            Mon 10 Feb 2025 13:31:09 +0000
asID:                     61796
IP address blocks:        201.159.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3e:d7:6f:d7:c0:80:7e:b3:0c:18:51:8f:2a:0a:7d:70:8d:b1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7004D27A6B66FBF932F73DA991E7900ED6732FC
        Validity
            Not Before: Feb 12 13:26:09 2024 GMT
            Not After : Feb 10 13:31:09 2025 GMT
        Subject: CN=8C84F363B5E54DAD549B6399E0F73E2B0940486E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:24:8e:e5:6b:51:2c:c6:12:93:e3:a0:94:
                    d1:12:f3:d0:52:78:4f:2f:0d:75:e8:4e:30:7b:3a:
                    0a:95:bc:cc:a8:ef:37:2b:08:89:76:3d:03:89:a4:
                    8e:99:20:b9:65:59:56:2c:e5:81:12:50:1d:98:70:
                    75:d4:79:d1:e3:5d:c7:4e:89:b4:26:c9:cf:6b:13:
                    52:ac:91:da:f7:72:80:70:94:de:47:32:9e:7b:29:
                    cc:c5:29:1c:38:fd:ce:5a:72:65:43:2e:79:50:8f:
                    70:7b:58:f3:66:d6:70:b7:9f:08:95:b2:9b:7d:7d:
                    21:da:f5:9c:08:28:6d:b2:91:42:be:0a:36:8a:d0:
                    58:49:67:df:77:b5:01:b7:ff:22:24:cf:04:9c:0d:
                    5e:1a:d8:90:eb:65:3b:05:ac:1e:55:d1:28:d2:76:
                    c4:d5:f4:c1:f6:bb:d8:70:ee:59:bc:03:b3:55:f5:
                    da:f8:aa:44:89:f1:b2:e2:b1:88:98:e5:e0:e5:5d:
                    75:8e:f0:19:b8:34:25:8a:f7:6b:6e:6f:16:3d:b3:
                    82:c0:6e:84:e6:1f:e1:3a:db:ba:3d:71:98:bb:89:
                    74:f6:b2:e0:20:f1:df:84:37:90:b3:f2:4b:6f:cd:
                    45:f8:7f:a8:3e:68:e0:e3:1b:5d:18:07:ba:6b:f1:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:F3:63:B5:E5:4D:AD:54:9B:63:99:E0:F7:3E:2B:09:40:48:6E
            X509v3 Authority Key Identifier:
                keyid:B7:00:4D:27:A6:B6:6F:BF:93:2F:73:DA:99:1E:79:00:ED:67:32:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7004D27A6B66FBF932F73DA991E7900ED6732FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32342d3234203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:12:89:2e:90:de:a5:a3:36:55:e9:bf:12:dc:32:a5:29:
         fd:56:d8:5c:7f:88:1a:5f:3b:8c:2c:d9:d9:ac:e0:ec:aa:58:
         4b:b2:2b:0e:64:e8:41:2f:fe:4a:f0:2a:36:d0:29:6c:2d:42:
         fd:61:8e:96:81:c7:34:89:f9:25:91:69:80:0d:ec:47:73:95:
         61:11:ce:e7:5c:a2:00:28:03:c6:c2:e1:6a:f2:1a:c5:c7:19:
         db:18:d0:4f:b0:15:38:c9:06:48:fb:41:a6:84:f5:3a:d8:11:
         e4:78:03:20:a9:c0:26:43:dd:f5:71:27:12:2d:12:63:1b:e4:
         c9:f7:9c:6d:e5:53:1c:ec:f9:f4:59:46:15:81:eb:00:1f:86:
         8c:46:b5:52:b2:71:49:54:b0:45:01:e6:81:67:51:19:ac:25:
         2b:bb:34:80:1a:6c:49:7d:fc:7b:34:b5:12:72:7c:ea:ef:ea:
         0f:f9:7f:b6:ae:23:b0:c0:41:05:7b:19:95:3c:3f:e0:9d:fa:
         d0:d7:19:35:44:a6:6b:99:ca:da:a5:e0:4a:ca:88:85:c6:2a:
         02:13:51:42:5e:47:f1:a3:c4:f9:37:7b:bf:c3:6f:35:ed:a6:
         18:6b:45:c1:a0:73:18:87:6c:72:ec:da:45:b1:62:d1:51:9c:
         d7:56:82:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org