Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
File:                     3230312e37312e36342e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          bucYfVMwxN8X4fKToGS/9hVEIt9FHi8sYMn2ArfWroc=
Subject key identifier:   3A:70:F8:F5:0C:42:73:33:4F:57:B8:6C:F7:78:51:92:AC:7D:BF:ED
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       6CB90A01A6C40275A831E878FDE36FE4EA6BC081
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
Signing time:             Thu 20 Jul 2023 20:00:00 +0000
ROA not before:           Thu 20 Jul 2023 19:55:00 +0000
ROA not after:            Thu 18 Jul 2024 20:00:00 +0000
asID:                     27652
IP address blocks:        201.71.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b9:0a:01:a6:c4:02:75:a8:31:e8:78:fd:e3:6f:e4:ea:6b:c0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Jul 20 19:55:00 2023 GMT
            Not After : Jul 18 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:f7:17:6e:b2:c6:f9:a1:e7:ac:3f:c0:d9:
                    d7:46:31:b9:6f:ca:b5:51:84:19:0e:a1:e4:f9:c6:
                    1d:5d:f2:76:7d:41:9a:e2:34:c1:a8:bb:95:7c:5f:
                    eb:69:d1:64:7d:8f:3c:e2:e9:22:65:2b:48:04:0d:
                    9d:d0:48:04:2d:74:e0:28:d6:59:78:f8:4f:42:7d:
                    2e:07:69:60:e0:d9:38:48:03:98:1a:c9:a8:fb:ef:
                    05:f7:d8:36:be:63:25:b9:da:8b:28:4a:48:5b:25:
                    8c:9b:ff:28:23:fa:f2:79:89:da:31:8f:5d:b5:19:
                    72:71:46:82:4a:7f:d7:4d:30:a3:77:ae:1c:ce:99:
                    d1:d7:06:77:b8:56:cd:19:8a:a9:be:f1:3e:cc:8a:
                    ce:31:76:68:8f:00:0f:c8:41:47:ad:27:2b:82:a9:
                    df:2f:67:25:6c:c2:64:8f:9a:84:45:62:8d:b7:6b:
                    4c:79:9c:4b:f7:61:7b:30:45:f1:13:7f:3c:ec:1a:
                    d0:fd:ad:c7:e1:26:10:b6:42:c3:93:67:03:c6:fd:
                    f2:db:ff:95:06:bf:ba:06:16:5e:37:6b:72:38:84:
                    d1:7d:ba:f4:b5:9e:e7:2f:ad:c9:aa:c0:e4:a2:10:
                    d0:91:ed:a5:db:ac:9e:64:64:9a:87:f4:fd:69:e8:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:F8:F5:0C:42:73:33:4F:57:B8:6C:F7:78:51:92:AC:7D:BF:ED
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3230312e37312e36342e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:30:0c:89:7b:80:4f:d7:46:3c:8a:49:67:e8:60:3b:5a:
         39:a2:11:cb:99:a4:d0:9c:17:7b:96:33:58:fc:c2:85:44:49:
         7a:1f:92:73:ee:f7:4a:8b:ee:83:25:e6:23:82:08:4c:8f:1f:
         69:49:64:4f:44:c6:72:9e:31:7d:78:bf:63:f6:8f:43:50:d6:
         4f:d0:01:b9:4a:6c:dc:b7:80:b3:ff:3d:08:46:14:c2:6a:cb:
         f1:1d:98:99:86:fb:85:89:ea:c7:8d:5c:3e:39:cd:db:47:15:
         42:e8:8f:72:45:1d:44:0f:18:f7:65:10:c0:60:72:8c:cd:21:
         82:89:17:c4:b9:53:0e:3c:2b:c4:fa:5d:23:0b:fe:11:c3:d5:
         8b:bc:bc:c4:bb:b8:30:bf:82:46:ab:f9:ac:79:86:3f:f9:5c:
         e1:4c:5d:fa:ed:e3:14:b0:10:a6:29:2d:45:01:70:19:ab:d6:
         37:5f:be:29:5d:5c:37:b5:05:82:43:fc:76:78:06:dc:73:11:
         2c:bb:85:2a:fb:bb:64:2c:c6:2a:f4:05:90:f5:c7:a6:6a:46:
         5b:2f:de:06:21:b4:88:6b:ad:b8:fb:eb:07:6f:de:da:e2:b5:
         0d:26:b1:ad:2a:25:df:e6:16:ba:cd:a0:10:ae:ed:27:84:46:
         74:6e:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org