Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
File:                     3230312e34392e3139322e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier:          G0K1MEVLClCgYfUcf+c6AEuXynr0YMOdp2buXbp32WI=
Subject key identifier:   F1:33:CE:FE:38:6D:FD:4B:5B:3D:5E:BE:B2:10:EB:26:92:E4:DF:1C
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       0F8573426CBC2F663F80729B114F88C6F9830FAB
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
Signing time:             Mon 20 May 2024 13:17:22 +0000
ROA not before:           Mon 20 May 2024 13:12:22 +0000
ROA not after:            Mon 19 May 2025 13:17:22 +0000
asID:                     28287
IP address blocks:        201.49.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:85:73:42:6c:bc:2f:66:3f:80:72:9b:11:4f:88:c6:f9:83:0f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:12:22 2024 GMT
            Not After : May 19 13:17:22 2025 GMT
        Subject: CN=F133CEFE386DFD4B5B3D5EBEB210EB2692E4DF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:ea:87:1f:f1:93:0f:6a:94:b9:02:4a:1e:
                    bc:12:f6:a3:44:66:0c:09:bb:73:0a:67:20:84:64:
                    95:94:33:87:5e:2f:c8:43:e5:6b:34:b0:d8:fc:a1:
                    e7:c6:7f:b7:c2:a5:ee:86:5b:71:03:42:c5:1a:cb:
                    ba:2f:25:45:3c:87:9f:ac:55:e8:24:25:07:b3:55:
                    1e:71:e4:ef:39:90:86:4a:12:6c:29:d0:d9:79:b2:
                    91:52:67:69:17:73:2c:48:3d:57:a4:83:ba:e6:3c:
                    53:f8:ef:86:4e:71:a6:33:6b:ba:f9:f5:a4:49:66:
                    cf:4e:6f:6c:87:c3:0d:e6:dc:fb:f7:11:c8:8f:81:
                    cc:72:dd:6f:a2:c0:22:cc:c6:2f:fb:38:bd:7c:84:
                    c3:fd:cd:46:45:c3:5f:89:21:b4:83:8b:63:d8:93:
                    2a:aa:fe:61:87:b2:54:46:06:4c:98:33:25:c8:55:
                    e1:4b:b5:35:62:95:4f:80:5c:57:55:cd:7f:c5:bc:
                    ed:b3:7a:db:63:1f:c4:52:01:8c:da:7c:a2:fa:d0:
                    db:5d:39:87:fe:87:9f:29:09:c9:8b:de:79:9d:5d:
                    7a:14:53:f1:64:61:a4:68:8b:4e:9c:e2:ac:a8:e4:
                    ef:17:6c:88:5e:68:1c:38:5d:51:2c:54:fe:74:05:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:CE:FE:38:6D:FD:4B:5B:3D:5E:BE:B2:10:EB:26:92:E4:DF:1C
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:65:71:0b:ec:03:7c:cd:ba:e0:dd:4e:01:ca:a3:1c:4b:
         98:c3:5e:be:72:32:fa:01:c1:79:2a:f8:fa:89:a1:07:92:9d:
         49:bd:a1:a6:de:4d:8c:59:97:37:a4:0d:13:fa:dc:45:2f:5b:
         3b:99:39:b9:36:e4:6d:83:fe:59:c7:17:0a:1d:92:0d:4a:b3:
         d7:51:c1:8a:e3:bf:1f:ba:d0:7e:81:68:58:fa:25:00:89:0d:
         36:a9:94:f4:39:96:76:d1:3b:fc:dc:44:9d:fa:e1:ca:ad:dc:
         15:d3:eb:1f:0c:48:1a:ab:6c:ae:0b:c9:57:bf:18:94:53:47:
         e8:69:db:6c:33:70:20:1d:3d:7a:49:3c:1d:0a:5f:3b:fa:55:
         d9:e8:c6:5f:2b:21:4f:0e:14:76:25:01:e5:30:8b:4d:79:f2:
         e2:d9:1e:79:3d:82:77:cd:b5:db:36:dc:ac:fa:6a:3b:a7:84:
         c2:02:9b:5c:e7:a1:3a:23:39:d9:ac:91:19:ec:20:d3:c8:a5:
         cc:74:6b:29:ee:54:2c:42:24:57:6e:ad:aa:85:55:9e:b5:fd:
         51:11:c0:db:72:d0:f4:12:b2:18:7b:d0:55:16:83:32:3e:ca:
         b4:0b:69:4c:2b:8b:ab:25:22:e1:2e:64:c2:4f:55:37:6e:7f:
         f2:13:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org