Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32332d3233203d3e20323730353637.roa
File:                     3230312e3231362e38302e302f32332d3233203d3e20323730353637.roa (raw, json)
Hash identifier:          N9LO/OEMoijfMqXpurLsdfycYEHnZTW5kFqShxcrJEo=
Subject key identifier:   1C:59:3E:98:38:07:AE:B6:D3:1C:7B:F4:0D:12:9F:35:DB:56:4D:39
Certificate issuer:       /CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
Certificate serial:       5703444330D73F0DC0273BBA74AE69272E6B8436
Authority key identifier: EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32332d3233203d3e20323730353637.roa
Signing time:             Wed 01 Mar 2023 13:35:00 +0000
ROA not before:           Wed 01 Mar 2023 13:30:00 +0000
ROA not after:            Wed 28 Feb 2024 13:35:00 +0000
asID:                     270567
IP address blocks:        201.216.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:03:44:43:30:d7:3f:0d:c0:27:3b:ba:74:ae:69:27:2e:6b:84:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
        Validity
            Not Before: Mar  1 13:30:00 2023 GMT
            Not After : Feb 28 13:35:00 2024 GMT
        Subject: CN=1C593E983807AEB6D31C7BF40D129F35DB564D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:64:7e:7f:8c:be:68:60:0a:a9:e6:35:c1:
                    b3:0e:8e:98:b7:4d:d7:89:f2:0c:be:81:94:05:52:
                    57:d4:c8:39:43:72:f4:61:31:22:ff:4a:ec:63:21:
                    27:fd:21:49:36:71:74:41:5e:86:3b:88:37:20:72:
                    99:7f:15:82:ac:c0:57:c8:c6:35:d9:51:88:fe:e4:
                    7a:bc:c5:a1:cd:8f:ac:d4:11:38:2c:2d:8e:9c:ed:
                    21:e0:30:95:16:f2:75:70:b8:4c:3d:78:f0:92:22:
                    b8:aa:6b:8a:11:7b:9d:08:8d:89:0a:38:44:e3:5f:
                    82:a1:96:4f:fa:f9:f7:fd:43:f9:8f:70:77:a7:70:
                    46:12:cd:12:2a:48:9d:0f:b5:cc:dd:a0:84:da:70:
                    61:b1:bb:d9:0f:32:4a:2e:b0:5c:07:cd:38:af:e7:
                    4a:b8:59:d6:e8:a3:d6:12:74:15:fa:9f:77:d7:ce:
                    a9:d2:a5:94:41:6c:14:24:c4:58:2d:96:9e:6b:f1:
                    2d:ea:25:c4:22:70:cd:a9:ed:d9:9c:0e:32:70:cf:
                    c1:be:8d:fb:71:4e:54:e0:c9:c8:dc:86:28:f2:49:
                    71:ca:61:2e:df:e3:03:64:37:20:f8:de:e4:35:4c:
                    91:82:d8:f6:a7:a2:2b:c3:ed:68:00:5e:63:eb:f8:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:59:3E:98:38:07:AE:B6:D3:1C:7B:F4:0D:12:9F:35:DB:56:4D:39
            X509v3 Authority Key Identifier:
                keyid:EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38302e302f32332d3233203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:f3:43:85:9b:31:22:be:2a:bb:c7:83:fd:0d:b2:22:0a:
         d5:21:1b:b1:49:59:ad:ea:5f:f3:86:e2:ce:66:17:bf:b8:96:
         77:5e:c7:35:09:02:2d:ba:91:e7:db:8f:88:60:90:d0:68:ce:
         88:47:35:91:82:b7:a5:73:6f:4e:25:30:4d:dd:65:3b:ae:cd:
         50:ce:bc:1d:9d:5a:af:b1:b2:f1:19:75:b1:54:a4:ca:2b:d4:
         8f:1a:0f:e4:85:60:81:92:84:0f:70:b9:7d:e8:56:c8:87:2c:
         c0:83:bc:84:ee:45:d9:68:32:3c:f5:86:44:15:a0:a0:e5:bc:
         de:b6:04:53:3d:12:5c:e1:c8:69:70:2f:13:67:09:52:5c:d2:
         88:d9:af:cd:51:5e:1c:95:0c:30:8a:8f:96:d7:c6:b1:af:c4:
         bf:76:48:b9:2b:c8:7b:64:aa:96:94:03:e6:95:aa:a2:4d:16:
         84:92:2e:d0:79:74:07:b1:c6:55:60:4b:2a:d0:4e:27:4e:e0:
         40:ee:64:ea:c2:73:74:34:fb:96:f2:3d:34:d6:88:63:21:12:
         38:7c:e7:be:f3:31:05:37:91:ac:cb:ca:4e:f7:89:c1:08:e1:
         e6:ac:a6:3a:68:15:96:32:62:b9:86:97:79:12:7c:01:b1:7b:
         76:7c:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org