Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa
File:                     3230312e32332e3136302e302f31392d3139203d3e203232303835.roa (raw, json)
Hash identifier:          DutKPCqVLCI45NPPWjMCEywzDFIPM7QAkk6Y5vciiKs=
Subject key identifier:   A0:E6:41:14:6E:9C:F3:53:D9:9C:F5:4D:56:F7:9F:F4:45:81:E6:B9
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       32391DA805F23C9A10987FBB688042291052E3E8
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 19:00:00 +0000
ROA not before:           Wed 14 Feb 2024 18:55:00 +0000
ROA not after:            Wed 12 Feb 2025 19:00:00 +0000
asID:                     22085
IP address blocks:        201.23.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:39:1d:a8:05:f2:3c:9a:10:98:7f:bb:68:80:42:29:10:52:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 18:55:00 2024 GMT
            Not After : Feb 12 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:78:49:fb:98:4f:be:96:a2:12:1d:32:3a:
                    8c:a2:11:40:dc:6e:fb:16:c6:38:8c:66:43:5c:1c:
                    bb:c3:c5:4b:6b:08:dc:15:41:8a:16:c7:d6:60:0d:
                    be:23:c4:f2:93:bf:c8:7c:fd:84:86:8f:72:94:f1:
                    c2:c3:09:e4:e1:7a:70:b2:f3:4d:ec:15:05:2c:19:
                    cc:bb:95:7c:b4:34:d7:29:4f:c4:ce:b3:0b:2f:9b:
                    e2:9a:ce:0a:5a:d8:e3:65:67:ac:f7:97:81:01:ae:
                    3b:62:7e:7f:e8:d6:90:9e:64:9f:51:0d:3a:0d:73:
                    33:e4:9f:06:3f:62:30:b2:20:1d:09:3f:4c:2d:18:
                    a4:0a:3b:34:62:c5:94:e5:c5:4c:d4:ad:15:5b:e7:
                    b4:c6:62:0a:0e:c8:55:72:0a:6c:88:96:2f:04:a6:
                    aa:29:e2:fe:aa:ce:54:3e:d0:bb:39:f7:1c:10:71:
                    c7:cf:bd:44:cf:74:81:39:e0:d4:60:4b:b4:41:d6:
                    7e:44:c5:cf:df:67:ff:f5:8b:52:36:de:f3:3f:81:
                    3d:6b:bf:f7:73:d8:81:73:4b:89:11:ac:2a:de:12:
                    46:f3:2c:78:99:86:3a:00:e6:7f:f7:41:f0:a2:08:
                    ca:11:e3:0b:e4:9b:a5:01:ff:e7:e6:cb:51:2c:a8:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E6:41:14:6E:9C:F3:53:D9:9C:F5:4D:56:F7:9F:F4:45:81:E6:B9
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e32332e3136302e302f31392d3139203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:69:8b:79:ee:a2:f6:41:12:70:d2:2d:60:2d:3a:6b:c2:56:
         f9:d0:46:be:47:f0:1f:82:b8:62:85:2d:4c:50:74:2b:50:00:
         78:b1:d8:ca:d3:47:a9:41:21:ad:80:b7:0c:8c:c3:b5:7d:6e:
         e4:2f:8d:8c:86:83:1a:cf:4f:57:38:0a:2f:66:ff:46:b9:dc:
         c4:44:ab:52:fb:67:26:2a:a7:cf:a2:fe:ef:ec:26:76:88:05:
         89:c4:31:3d:28:f1:ee:aa:e0:bd:f5:2a:26:f1:3a:17:cd:b8:
         e0:30:e7:3d:fc:8f:25:f6:7e:f2:15:a1:4f:12:2d:c2:72:e9:
         af:a7:6d:d8:a5:09:2e:25:e0:1e:db:aa:ed:04:f5:a0:48:64:
         9d:ef:30:ed:64:ac:44:ce:e2:45:29:7f:a8:f0:e9:ac:1d:ef:
         4d:5f:73:29:cb:ff:e9:9a:ab:4e:d4:19:2f:03:f7:4b:84:fc:
         0a:fd:e8:80:86:57:79:06:b1:ea:78:d3:65:94:c7:b5:8c:08:
         94:69:a7:10:5f:7b:81:16:84:6d:22:ef:cc:98:39:7a:28:4e:
         19:8f:14:ad:fb:d9:76:ec:15:9a:bd:b2:af:d5:9b:16:60:d2:
         23:57:82:17:a2:23:61:c5:17:62:7f:f3:53:08:b3:37:7f:51:
         d8:47:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org