Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
File:                     3230312e3232322e32342e302f32322d3234203d3e203631383233.roa (raw, json)
Hash identifier:          N65D2H0pGofWuzIJY+uJ4icX2efwG3BjUYFYFL2Ud5s=
Subject key identifier:   AC:2F:7A:28:0C:9D:EB:6C:D3:5B:B7:B4:D8:0E:41:2A:1D:86:21:02
Certificate issuer:       /CN=1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6
Certificate serial:       367B350CA73AF5BEC943E2C1A370E7AEBDDAB059
Authority key identifier: 1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
Signing time:             Thu 14 Mar 2024 21:04:39 +0000
ROA not before:           Thu 14 Mar 2024 20:59:39 +0000
ROA not after:            Thu 13 Mar 2025 21:04:39 +0000
asID:                     61823
IP address blocks:        201.222.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7b:35:0c:a7:3a:f5:be:c9:43:e2:c1:a3:70:e7:ae:bd:da:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6
        Validity
            Not Before: Mar 14 20:59:39 2024 GMT
            Not After : Mar 13 21:04:39 2025 GMT
        Subject: CN=AC2F7A280C9DEB6CD35BB7B4D80E412A1D862102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:a0:9e:c2:1f:9b:a7:f7:9c:60:95:48:6e:
                    99:94:50:8d:2e:0c:62:af:5f:9a:a5:25:42:4e:a4:
                    fe:4f:07:86:81:8e:98:0b:2f:d7:55:85:59:c8:9a:
                    2e:0f:0f:44:45:d0:58:c6:16:8e:db:e3:ae:1e:20:
                    80:9c:3a:5a:64:e3:c2:33:b4:72:26:b7:44:49:c0:
                    bd:97:18:34:f0:d4:da:35:48:e1:3f:1b:1b:8b:55:
                    e8:a0:f3:af:13:09:db:55:37:d7:c0:27:89:e8:7b:
                    03:37:9e:be:d2:32:83:2f:b4:81:7f:68:d7:64:d5:
                    21:34:d1:aa:9d:a1:b7:96:c7:f4:e9:eb:90:80:ff:
                    16:dc:d3:5c:0b:41:04:d3:b3:dc:45:57:bc:82:9a:
                    27:c9:f4:31:11:04:84:87:4e:27:b3:9f:f0:24:8e:
                    ac:c2:70:63:1a:82:0f:a5:47:c6:31:b5:75:06:b6:
                    0d:7e:c4:72:1d:de:36:21:54:af:22:8d:dc:f8:f8:
                    9e:27:95:63:61:cd:7b:5d:95:ea:88:39:4d:ca:76:
                    5f:6a:26:cb:f8:19:9d:44:ae:a4:7c:46:2d:ce:23:
                    a4:ab:be:bf:b7:aa:94:87:b2:b8:0b:8d:de:35:e6:
                    28:e2:ef:6a:87:9e:14:7a:95:e4:a5:6a:71:8a:9c:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:7A:28:0C:9D:EB:6C:D3:5B:B7:B4:D8:0E:41:2A:1D:86:21:02
            X509v3 Authority Key Identifier:
                keyid:1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:ee:27:71:cf:27:7c:53:42:27:81:4f:0d:93:b3:b2:48:
         47:93:e1:37:ed:06:d0:c5:c4:84:03:2a:62:40:02:5c:0d:10:
         46:9a:b4:f4:6a:90:61:52:17:39:ca:95:ba:d5:e6:6c:a7:5b:
         e2:4a:fe:fd:24:ae:b4:b0:01:7f:94:f0:bd:af:8d:fc:67:8f:
         42:5a:ea:c0:79:cf:15:26:a1:8f:a4:9b:23:68:99:8d:07:ff:
         8f:b9:04:23:20:f4:1a:b9:9b:99:fc:ef:ae:76:ed:3d:3e:6c:
         5d:ad:55:fe:17:33:d4:4b:8a:a3:35:95:72:20:d6:46:77:f3:
         86:b5:87:2b:8f:da:05:29:ce:52:d2:18:f3:9e:bd:89:d6:4f:
         10:e1:ed:3f:5e:03:8a:20:df:5f:b3:94:8f:06:94:15:da:63:
         00:94:7d:5b:68:39:d0:00:33:6a:b7:41:25:8b:ab:aa:99:1f:
         f4:40:0b:60:1f:5f:4c:ec:87:1f:70:38:a0:53:f5:d7:b5:b3:
         b3:ba:40:ca:30:c0:27:25:e0:87:cd:28:03:3f:b4:90:42:0b:
         ea:ff:d7:23:9e:4c:be:47:2c:39:f0:56:fb:7c:58:f5:8f:ac:
         fe:de:8a:39:38:6d:97:a6:9c:51:ea:b2:ca:ee:98:6a:b3:df:
         f2:f6:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org