Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32312d3231203d3e203631393436.roa
File:                     3230312e3133392e3138342e302f32312d3231203d3e203631393436.roa (raw, json)
Hash identifier:          00eI9cmyccg3RhCPQLq9d0QI362j08FLGCRX96tnnfc=
Subject key identifier:   D0:53:D7:B3:14:30:5E:2A:2E:DF:1A:83:21:4C:15:C2:57:28:0E:FE
Certificate issuer:       /CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
Certificate serial:       1587A51B416BD3BC2672F34236C02E80695F8F1F
Authority key identifier: D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32312d3231203d3e203631393436.roa
Signing time:             Wed 16 Nov 2022 13:30:04 +0000
ROA not before:           Wed 16 Nov 2022 13:25:04 +0000
ROA not after:            Wed 15 Nov 2023 13:30:04 +0000
asID:                     61946
IP address blocks:        201.139.184.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:a5:1b:41:6b:d3:bc:26:72:f3:42:36:c0:2e:80:69:5f:8f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71A811340ADA62CB6E690F23A52B03E9A48D407
        Validity
            Not Before: Nov 16 13:25:04 2022 GMT
            Not After : Nov 15 13:30:04 2023 GMT
        Subject: CN=D053D7B314305E2A2EDF1A83214C15C257280EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:04:c2:83:01:da:03:bc:1d:09:b7:d4:84:
                    3f:37:ad:ef:05:d0:38:89:c1:ce:5c:01:c6:63:cd:
                    d3:b1:45:ba:6b:2d:e6:6c:38:73:42:53:10:2d:4c:
                    a1:77:bb:aa:a8:d8:ae:fd:40:45:24:61:97:5d:9e:
                    0c:17:7b:de:1e:1b:ae:ec:6c:c9:50:00:fa:85:e6:
                    b8:a9:19:66:2d:4a:ae:a0:82:5d:e8:9d:f4:a9:fd:
                    23:95:67:24:d0:97:e8:2e:95:85:f9:7d:82:46:f0:
                    63:1e:4d:60:98:48:eb:e4:69:36:eb:5b:8c:de:3c:
                    08:3d:18:42:28:a1:47:bc:b7:0e:68:d4:22:fb:16:
                    7a:95:1b:e9:dd:b7:a7:54:8c:90:4e:38:bf:17:db:
                    f1:ff:fb:39:e8:2e:53:07:3a:70:18:4e:3d:65:60:
                    1c:28:cb:af:b4:b7:ba:c8:b1:72:36:21:41:8e:a6:
                    39:83:c6:f2:d9:98:a3:80:9b:12:72:0c:b5:bf:c9:
                    59:92:58:35:c8:e6:33:ac:90:b8:65:2f:97:8c:fc:
                    a0:88:fc:f6:3a:51:05:48:dd:b4:37:f7:8c:08:4e:
                    be:70:da:24:e4:64:d2:05:97:35:e3:00:a0:75:10:
                    98:cf:5f:50:13:5b:f9:08:ee:84:ea:26:fc:39:c2:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:D7:B3:14:30:5E:2A:2E:DF:1A:83:21:4C:15:C2:57:28:0E:FE
            X509v3 Authority Key Identifier:
                keyid:D7:1A:81:13:40:AD:A6:2C:B6:E6:90:F2:3A:52:B0:3E:9A:48:D4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D71A811340ADA62CB6E690F23A52B03E9A48D407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hx9y2A9y4r9isGaKPerj1WyHw3mL8hQs9GkVDCh6tngV/0/3230312e3133392e3138342e302f32312d3231203d3e203631393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:98:91:12:9a:cd:92:7a:bb:39:35:f6:b5:7f:b6:47:f4:b4:
         da:6a:f5:68:4e:79:f1:cb:cd:ce:df:f3:45:5c:6d:01:36:89:
         06:cd:4d:08:c5:54:6f:9a:a9:51:27:e9:ec:7d:cb:09:c7:2c:
         82:e4:2d:79:96:92:76:65:e5:a2:54:cb:7d:66:1e:9f:a0:53:
         68:58:28:87:08:7f:29:85:ef:90:65:e7:34:16:37:6c:2a:af:
         f2:3e:9c:c1:c3:d8:52:ef:76:e4:de:41:93:a8:d4:91:4c:1d:
         40:9c:fc:18:3c:89:ed:c8:04:7b:89:3a:93:f1:5c:6a:eb:57:
         c8:37:34:83:ee:2c:69:de:6c:fe:be:17:85:bf:c2:3c:4a:81:
         a8:e2:bb:78:37:96:e8:30:eb:f4:ea:74:14:ee:29:fa:de:be:
         3e:de:46:e0:d4:e1:36:07:5d:f4:a3:06:50:de:0d:9a:dc:f0:
         33:e2:9b:dd:a8:27:99:7e:76:fd:b6:04:f7:ba:c2:e3:1b:b7:
         87:ec:b1:b9:47:b3:0d:00:47:f0:47:13:5a:64:36:9a:91:1c:
         65:d2:55:57:95:53:b4:89:01:b4:36:90:7f:3f:ac:ed:51:fe:
         aa:5e:6a:9d:e2:d9:ab:61:41:f0:be:ea:96:c3:0f:7a:72:b6:
         2a:a3:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org