Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
File:                     3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa (raw, json)
Hash identifier:          rv5Hj3KDMTbqbxK+7yXWqSdyzEe5o7+cso4gHutYS8M=
Subject key identifier:   64:B7:92:95:28:0B:23:67:50:6B:BD:97:5E:78:02:5F:35:53:1A:DB
Certificate issuer:       /CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
Certificate serial:       7AFF71314F878CEBD28093700BFCB0E2AEA4FBBE
Authority key identifier: 5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa
Signing time:             Thu 15 Feb 2024 16:54:20 +0000
ROA not before:           Thu 15 Feb 2024 16:49:20 +0000
ROA not after:            Thu 13 Feb 2025 16:54:20 +0000
asID:                     270567
IP address blocks:        201.216.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:71:31:4f:87:8c:eb:d2:80:93:70:0b:fc:b0:e2:ae:a4:fb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E67AA0BB6A44C0BB239FEC50C971CD56CA45343
        Validity
            Not Before: Feb 15 16:49:20 2024 GMT
            Not After : Feb 13 16:54:20 2025 GMT
        Subject: CN=64B79295280B2367506BBD975E78025F35531ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:81:5d:14:f2:f2:d2:e1:58:31:ee:40:59:53:
                    84:88:a7:43:34:c8:d4:08:af:20:86:89:b3:09:b8:
                    b1:e7:ba:47:4a:0c:5a:f3:8c:74:2f:d8:74:72:06:
                    8f:c2:34:00:2c:d0:e8:ab:95:02:6e:7a:33:ee:54:
                    be:2a:49:0a:88:2b:e9:16:af:21:37:0b:12:6c:d7:
                    aa:45:e0:be:69:6d:54:ca:fc:8d:87:79:2e:7f:a8:
                    e3:78:37:da:2e:f2:34:a0:92:56:63:05:17:50:56:
                    db:73:49:16:c6:c8:83:d0:6f:91:38:43:d0:0d:9b:
                    29:b8:67:98:46:2c:8b:f7:46:ea:bc:48:a6:88:8a:
                    6d:af:13:21:70:67:ed:0d:77:ce:d1:84:18:a4:ed:
                    69:c7:4a:90:fc:2f:e0:eb:44:65:54:05:e4:56:8e:
                    95:67:d5:04:5d:4b:64:e2:33:82:1b:8f:a6:6b:b2:
                    9f:53:85:11:b4:b1:fe:ee:f0:e8:fe:39:36:bf:1f:
                    00:74:6a:26:e1:5a:ff:42:a4:20:d6:1f:1d:c9:0c:
                    fd:7d:8a:4a:99:e0:33:54:a8:03:0d:33:42:49:6d:
                    7e:20:39:2c:e0:95:d8:56:a7:8b:ca:bf:24:c5:64:
                    e9:b3:66:b7:71:01:f7:ee:df:9e:30:87:7a:83:59:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:92:95:28:0B:23:67:50:6B:BD:97:5E:78:02:5F:35:53:1A:DB
            X509v3 Authority Key Identifier:
                keyid:5E:67:AA:0B:B6:A4:4C:0B:B2:39:FE:C5:0C:97:1C:D5:6C:A4:53:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5E67AA0BB6A44C0BB239FEC50C971CD56CA45343.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32322d3234203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:29:ca:e1:85:fa:5c:b4:64:cf:b3:5c:7c:4a:bc:54:02:
         78:e6:8f:77:e6:2f:c7:1a:92:9e:a7:cf:f2:6d:d5:44:56:c0:
         6a:1a:e5:77:8d:22:d1:7d:26:c8:26:e4:14:87:02:14:29:3d:
         54:c9:cd:62:d7:c4:a3:e6:ee:34:7a:3b:af:3f:3c:2b:3d:66:
         3a:d2:66:b1:ab:e0:11:ec:5f:59:4d:27:8d:61:d0:25:a6:34:
         26:1e:b4:f9:de:8a:78:7c:8f:6d:44:d8:93:52:ba:b8:dc:5e:
         5b:a4:79:a9:f6:24:03:cf:08:d6:eb:5c:c5:dc:be:3c:01:5a:
         ee:f8:e7:d3:1c:be:4a:6d:45:6e:61:98:1b:f7:91:5f:4b:b9:
         c4:44:d3:2f:ab:1d:0a:6f:14:24:72:7d:29:01:d1:fd:07:f7:
         34:20:63:fe:cb:d8:f5:c5:21:e8:c0:d7:4b:ff:36:13:7a:7d:
         11:5a:33:8f:7c:40:08:79:64:fc:b7:eb:33:9b:64:45:ba:0b:
         35:6e:ea:fc:03:bf:66:d1:f1:0f:da:42:08:c1:fd:a5:3b:59:
         58:ed:0d:be:e2:c5:ab:d3:d7:eb:67:65:4b:19:d2:d8:bb:19:
         0e:f4:71:e9:e1:4f:dc:fb:38:b4:97:0e:23:1e:3c:b8:96:94:
         4a:b9:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org