Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3232203d3e20323730353637.roa
File:                     3230312e3231362e38302e302f32322d3232203d3e20323730353637.roa (raw, json)
Hash identifier:          X6H49O4NJ37FPCdMCr3r1cvwvmW1uld+BZ72DivjQDk=
Subject key identifier:   61:42:65:25:D6:1C:C1:6A:E5:2E:90:AF:D8:2A:F0:84:38:DD:E1:3D
Certificate issuer:       /CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
Certificate serial:       3578BF4D24B0CB475D171503594A68ECBD85C502
Authority key identifier: EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3232203d3e20323730353637.roa
Signing time:             Wed 01 Mar 2023 13:35:00 +0000
ROA not before:           Wed 01 Mar 2023 13:30:00 +0000
ROA not after:            Wed 28 Feb 2024 13:35:00 +0000
asID:                     270567
IP address blocks:        201.216.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:bf:4d:24:b0:cb:47:5d:17:15:03:59:4a:68:ec:bd:85:c5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
        Validity
            Not Before: Mar  1 13:30:00 2023 GMT
            Not After : Feb 28 13:35:00 2024 GMT
        Subject: CN=61426525D61CC16AE52E90AFD82AF08438DDE13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:7b:d1:01:16:e3:5a:04:28:eb:34:44:0a:
                    68:14:9b:7c:37:c3:0e:64:a1:14:0e:a0:26:56:df:
                    28:61:df:16:f8:69:0e:79:27:b4:2b:6a:ea:ba:79:
                    ff:46:89:34:f2:9c:8d:34:43:e0:c1:bc:e6:fa:23:
                    80:53:81:c8:f0:9d:2a:ab:74:46:48:62:bd:29:3e:
                    d8:21:50:e6:88:7a:29:41:0c:9a:9f:8d:fd:68:84:
                    cf:22:0d:bd:09:3d:db:2c:79:8d:84:04:80:68:7f:
                    ea:eb:31:60:0d:24:83:1e:9f:75:85:ee:fe:dd:9a:
                    f7:5c:65:2f:63:70:b4:89:61:67:d7:79:ea:bc:f3:
                    d5:f6:ed:5b:b7:30:dd:2a:34:fa:66:e9:c3:7e:d0:
                    b7:ed:4e:0a:2c:43:7d:27:df:ef:28:a5:a3:97:47:
                    16:06:7b:08:b2:d1:0a:1d:5a:7b:37:57:a9:7f:36:
                    47:ca:4c:f4:f3:0f:6f:1d:9e:14:07:d9:ee:54:28:
                    4d:fa:73:4d:1e:e8:2b:8e:78:d0:d3:76:aa:e2:29:
                    dd:af:82:61:92:70:3c:26:6e:1e:0f:40:08:92:ff:
                    8b:79:01:97:97:47:ae:aa:e8:98:f1:ce:b1:59:5f:
                    db:0c:cd:30:b2:0e:7f:1f:5a:66:4a:16:cb:0e:9f:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:65:25:D6:1C:C1:6A:E5:2E:90:AF:D8:2A:F0:84:38:DD:E1:3D
            X509v3 Authority Key Identifier:
                keyid:EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3232203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:e1:75:a1:d2:1f:e2:0e:1d:7c:06:da:d0:c8:69:b2:ed:94:
         c8:31:98:72:22:75:31:a2:1c:f0:f8:cb:d3:48:b9:a7:aa:ee:
         a0:be:fc:a3:dc:f5:18:82:f9:01:8d:ff:74:1e:e1:19:6f:88:
         22:3f:9d:7c:12:93:ee:46:8c:bf:5d:27:36:9c:18:3d:a3:b0:
         41:2c:10:14:ce:82:52:c8:0c:20:f7:54:7f:01:fb:2f:e2:1d:
         cf:11:6f:9d:c4:e0:cc:6b:42:d2:c6:1c:a9:7e:b0:da:de:ca:
         fd:8f:c8:9b:f8:8f:b3:ab:e6:50:a7:8d:0f:b7:9a:9e:7e:4e:
         3b:87:82:e2:da:ee:5a:61:26:7b:d3:44:67:30:88:06:78:90:
         05:17:11:d3:3d:88:6b:e7:2f:bf:4a:8c:00:f1:c5:ae:7a:c9:
         2e:dc:4b:05:25:45:b5:01:41:25:0f:39:62:54:37:c1:72:44:
         b4:f9:61:8a:3c:96:2a:b7:ee:13:9b:de:ee:55:82:81:53:52:
         0f:dd:83:c3:9f:ba:28:17:b0:a3:8c:78:da:f6:d8:ba:38:ed:
         5b:1b:2b:79:89:78:28:d6:be:a5:c7:de:44:8b:1f:fc:b8:11:
         e5:e8:82:ba:58:ac:70:49:7a:a9:76:a1:11:8b:f7:54:a4:b1:
         98:76:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org