Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38322e302f32342d3234203d3e20323730353637.roa
File:                     3230312e3231362e38322e302f32342d3234203d3e20323730353637.roa (raw, json)
Hash identifier:          WDknOvCdDT4FfcDnxFIA/h+1c/MYGEnY01U7XsxcpGU=
Subject key identifier:   A9:93:DF:A3:9B:02:F6:EB:FF:E3:1D:30:D4:4F:DE:C2:68:34:30:6E
Certificate issuer:       /CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
Certificate serial:       46FDAE7CD9EDC7D74D63440A326B8D4309D26304
Authority key identifier: EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38322e302f32342d3234203d3e20323730353637.roa
Signing time:             Wed 01 Mar 2023 13:35:00 +0000
ROA not before:           Wed 01 Mar 2023 13:30:00 +0000
ROA not after:            Wed 28 Feb 2024 13:35:00 +0000
asID:                     270567
IP address blocks:        201.216.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:ae:7c:d9:ed:c7:d7:4d:63:44:0a:32:6b:8d:43:09:d2:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0
        Validity
            Not Before: Mar  1 13:30:00 2023 GMT
            Not After : Feb 28 13:35:00 2024 GMT
        Subject: CN=A993DFA39B02F6EBFFE31D30D44FDEC26834306E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:98:63:d6:0f:c7:f6:dc:c3:27:90:e3:53:
                    98:b4:59:b8:0f:69:2c:89:06:03:9c:6e:a8:99:32:
                    9e:6c:29:2a:fd:4b:7e:cb:b7:d7:f3:93:b8:77:9d:
                    9b:be:09:06:b1:f0:d7:92:c4:1e:d7:81:ed:0b:3f:
                    4b:59:9a:d8:2f:09:66:52:b6:47:3f:a0:bd:b1:54:
                    08:18:d5:df:cf:65:ff:eb:dc:17:b1:37:03:06:aa:
                    5c:d1:50:bf:83:82:56:0e:de:11:a1:89:ad:32:70:
                    cd:40:ec:6e:a3:58:ae:46:ce:9b:70:c1:3a:45:4d:
                    8c:b2:4e:50:9d:bd:12:99:12:39:83:4f:b9:39:52:
                    4d:dc:09:d8:2a:82:f7:ad:9d:f4:60:61:72:2e:b9:
                    f8:d3:28:e6:ca:3a:f1:34:43:cc:c6:de:b7:34:88:
                    1b:f0:30:ab:6d:b5:b4:fd:9c:25:06:b5:26:1d:e9:
                    62:6c:08:9e:69:62:37:7d:e0:b5:a4:ef:aa:fe:06:
                    d3:1d:1f:74:38:5b:9b:cf:66:5d:a1:6b:4a:c4:20:
                    0f:47:fb:51:d9:f6:9e:a1:35:61:77:f3:b0:0f:60:
                    97:1c:08:46:4d:b1:87:2f:7c:ac:91:08:6c:62:20:
                    4f:65:1a:94:48:51:a2:9e:e1:23:2c:cd:0f:10:32:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:93:DF:A3:9B:02:F6:EB:FF:E3:1D:30:D4:4F:DE:C2:68:34:30:6E
            X509v3 Authority Key Identifier:
                keyid:EA:64:C4:EE:C6:F8:C8:E3:E1:14:6F:D5:E5:60:84:88:68:3D:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA64C4EEC6F8C8E3E1146FD5E5608488683D67D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/0/3230312e3231362e38322e302f32342d3234203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:c8:b0:25:45:8d:69:09:99:f7:7c:a5:47:b4:0a:33:49:
         b5:9a:49:22:ba:32:31:f0:c4:b3:d5:78:5a:94:50:79:01:7b:
         6f:53:fc:d7:f9:49:61:cb:6c:ac:fc:75:db:64:db:10:2b:12:
         b9:75:56:72:c6:90:b0:a2:e3:e5:63:02:22:4b:f5:53:6e:70:
         8d:46:57:9d:84:98:5b:f0:63:53:42:1a:02:0f:bc:46:6c:f7:
         ea:91:17:77:24:e5:c9:77:af:6a:90:54:97:b7:fb:05:a1:35:
         56:db:0e:d6:c0:a2:99:99:e4:14:02:2f:63:3a:96:8f:01:d8:
         7e:9b:96:e1:b9:02:8f:b6:73:3e:bd:d4:92:f9:7e:73:d5:fd:
         e0:d5:d9:90:53:ad:e0:e3:21:f7:67:3c:d9:8c:a0:b2:34:9d:
         31:fb:a8:49:7f:ae:8e:f1:d0:a9:0b:73:66:12:dd:2b:e7:a0:
         2d:9a:1f:79:29:d9:55:61:1b:a0:f6:c7:61:01:99:a6:42:c4:
         3f:a4:28:68:bc:2d:f2:eb:ce:27:f5:14:60:ab:97:85:6a:33:
         b9:7b:01:b6:bc:dc:1a:e2:c1:97:fe:6f:07:75:67:94:e4:1f:
         35:4d:7f:a8:54:24:88:48:2b:0d:8e:cf:8a:28:53:cf:20:8f:
         d9:c6:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org