Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          2JyN5XWrhFtNqSIiGOpZlYaXY3+DLyh9FkZuG0dIeyg=
Subject key identifier:   07:0B:E1:E8:92:5B:39:01:A4:4F:7C:A4:64:90:1F:01:71:1A:B1:24
Certificate issuer:       /CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
Certificate serial:       3A291F4873CD11A660807C3A64F77290FF195574
Authority key identifier: 84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
Signing time:             Wed 08 Feb 2023 10:33:08 +0000
ROA not before:           Wed 08 Feb 2023 10:28:08 +0000
ROA not after:            Wed 07 Feb 2024 10:33:08 +0000
asID:                     267540
IP address blocks:        201.182.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:29:1f:48:73:cd:11:a6:60:80:7c:3a:64:f7:72:90:ff:19:55:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
        Validity
            Not Before: Feb  8 10:28:08 2023 GMT
            Not After : Feb  7 10:33:08 2024 GMT
        Subject: CN=070BE1E8925B3901A44F7CA464901F01711AB124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:22:27:d6:57:f4:ea:8d:7b:44:95:10:21:
                    a0:20:23:2a:11:f9:00:10:60:e5:91:0c:44:86:d5:
                    54:cb:73:a5:3d:65:3f:9a:f0:c8:62:3e:11:9e:32:
                    1a:b7:6a:99:de:23:29:38:02:46:4d:c7:3a:c1:4f:
                    f9:6d:4c:fe:ca:6a:5f:d6:9b:07:94:eb:5a:2f:43:
                    f5:62:c8:1c:d6:4a:06:54:3c:83:92:93:d7:88:47:
                    41:00:e3:d2:9d:77:00:ce:c4:54:02:cc:3c:cb:17:
                    4c:4d:cf:98:c2:e0:60:c3:7b:40:fd:ab:59:f4:8a:
                    41:35:48:6d:1b:6e:5a:f5:54:ec:d5:43:cd:8c:bb:
                    14:7f:61:60:79:81:d5:50:f6:1a:70:1e:fd:e3:1e:
                    c4:57:f9:52:28:5b:80:52:f7:45:1e:3d:6c:8a:38:
                    1b:e2:ea:2f:f0:c5:98:70:05:0a:e6:e3:0e:9d:f7:
                    5f:c5:4e:8b:e8:dd:c6:d5:85:1c:78:14:6c:56:89:
                    20:55:c0:21:d4:3f:8e:1c:ee:3e:e4:e0:63:bb:b9:
                    4e:1f:0b:65:78:7f:50:66:8c:50:42:80:4d:5b:fa:
                    13:11:72:66:df:3a:30:f4:79:b3:1e:f6:c9:72:d8:
                    da:2e:2d:e8:2c:d1:de:d4:c1:8b:8f:32:97:4c:e6:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:E1:E8:92:5B:39:01:A4:4F:7C:A4:64:90:1F:01:71:1A:B1:24
            X509v3 Authority Key Identifier:
                keyid:84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:af:81:9f:25:fb:16:16:b9:61:6b:71:ea:50:37:ef:74:6a:
         ce:96:d0:a0:64:6f:4b:d0:db:21:52:22:a5:1e:49:49:a0:10:
         d9:6a:2f:dd:c7:89:69:fc:fe:0d:05:fd:97:cc:95:3d:24:07:
         8b:b9:6e:d8:bb:d3:e9:40:ac:fc:38:37:21:3a:78:b8:b6:c5:
         74:c7:12:1b:1a:74:fd:0c:aa:a6:8a:c2:f3:d1:fd:3f:c7:0c:
         38:de:97:cc:36:12:76:22:f1:be:59:47:1c:c3:05:22:5f:3d:
         10:0e:ab:17:23:5f:2c:45:41:e8:1e:d8:da:34:29:d7:83:b0:
         5f:5d:ab:94:17:e3:b7:a3:69:2a:74:b1:9b:3e:de:0d:aa:37:
         fd:4e:1c:4c:3d:29:73:a4:db:1f:59:20:1c:91:fb:72:bf:00:
         40:35:18:e9:33:ae:96:15:99:88:2a:92:10:cf:e6:1b:31:dc:
         b6:76:24:a1:46:70:e3:0c:7d:98:70:a4:3f:31:e3:ef:09:ad:
         de:1b:a7:f9:eb:90:9d:03:22:84:33:d3:88:ac:ae:8d:8f:e0:
         4b:20:d6:66:c7:bd:f5:d7:79:e4:7c:b5:63:a5:8c:b1:6a:57:
         89:b5:d4:06:5d:9d:40:4e:ed:d1:ae:5e:f6:45:f4:6a:26:f9:
         95:f9:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:53 2024 by rpki-client on console-ams.rpki-client.org