Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          DvmgqBqMRbyunZ7pUIawQJgEbp3kBshcxgFD7DOE3fA=
Subject key identifier:   F6:B0:1F:81:95:5D:4A:0D:41:AA:1F:B5:89:A0:4D:D3:AE:B1:53:A1
Certificate issuer:       /CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
Certificate serial:       03E5394E0DF0A5687B0D393D1AED4561104E1678
Authority key identifier: 84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa
Signing time:             Thu 04 Jan 2024 19:40:46 +0000
ROA not before:           Thu 04 Jan 2024 19:35:46 +0000
ROA not after:            Thu 02 Jan 2025 19:40:46 +0000
asID:                     267540
IP address blocks:        201.182.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:39:4e:0d:f0:a5:68:7b:0d:39:3d:1a:ed:45:61:10:4e:16:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
        Validity
            Not Before: Jan  4 19:35:46 2024 GMT
            Not After : Jan  2 19:40:46 2025 GMT
        Subject: CN=F6B01F81955D4A0D41AA1FB589A04DD3AEB153A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:da:44:55:d0:c4:51:2b:84:7b:01:6b:43:6b:
                    53:86:8a:bf:93:8a:fa:26:07:df:24:a9:0f:f0:02:
                    8e:2f:5f:f1:2c:be:92:86:2a:e8:e2:8b:8f:39:b4:
                    8b:19:b7:ed:68:94:72:2e:78:6a:78:0e:08:14:fb:
                    e4:7d:17:41:45:8c:19:d8:2c:aa:7a:f4:b7:f3:29:
                    ba:0f:09:24:96:1f:2c:cc:2f:a6:01:58:75:28:f8:
                    e7:16:01:a4:3c:cf:d8:77:0b:48:66:96:07:48:7d:
                    e5:fb:5d:0a:de:82:b2:51:7e:fb:51:86:f6:fd:3e:
                    a0:28:f3:0a:45:de:4d:2c:0a:85:a1:3f:0f:f9:82:
                    29:b7:2b:a1:c6:9d:a2:38:2d:f4:29:57:3a:48:e9:
                    5f:b9:a4:e6:ad:d4:81:7a:a6:5a:b3:ad:f9:ec:3e:
                    2d:d5:a5:6a:9a:e8:a3:bd:46:fe:e5:66:b3:cd:c8:
                    fc:f8:58:20:ce:cd:f2:a2:ab:0e:5e:d5:f7:97:4f:
                    e8:c0:a6:7c:d7:9b:41:3f:0a:fb:19:4d:dd:85:f5:
                    5a:6e:93:b4:90:41:40:43:cf:78:0b:8f:a3:4e:c9:
                    73:ae:d0:23:ce:40:7d:ff:a9:88:06:90:fb:38:7b:
                    d6:a6:80:12:bb:ca:b5:f5:27:f1:e2:3c:53:a5:d7:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:1F:81:95:5D:4A:0D:41:AA:1F:B5:89:A0:4D:D3:AE:B1:53:A1
            X509v3 Authority Key Identifier:
                keyid:84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231392e302f32342d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:34:1b:3a:67:81:64:87:11:e4:ab:4e:4b:66:c9:f9:8c:d9:
         b7:e2:05:67:f1:64:10:e4:4b:15:3b:d2:8c:e7:4a:47:2a:4d:
         c6:a6:47:83:bf:f8:ac:a3:df:5d:4c:11:5f:60:66:3e:39:17:
         7e:be:eb:b6:30:14:43:0c:29:27:5b:83:6d:6e:8f:ae:1e:ad:
         a8:a5:d6:e4:92:3f:30:61:b0:c9:57:20:a1:9e:2a:b1:5e:1e:
         2a:41:8c:78:2a:d5:e0:f5:8b:ab:12:5e:98:22:e6:1b:58:95:
         64:d8:3b:34:a9:3d:b9:4a:8d:e8:65:d6:f8:ed:d5:31:f3:05:
         75:1a:05:02:26:67:79:57:3e:ef:13:9f:97:d6:e3:d3:5d:72:
         90:c2:5e:6a:e6:97:8a:5c:3f:46:82:a7:d4:85:0d:a2:e9:94:
         8d:6a:cc:98:d8:9e:ec:a4:58:19:5f:af:d6:b7:77:b3:81:f9:
         83:34:fe:8a:2a:83:ac:17:34:82:9a:54:0d:53:9a:e0:c1:cc:
         4f:7f:ac:f5:c8:65:b0:1a:f9:f0:4a:59:c4:4c:fc:c4:2d:f8:
         43:36:64:28:3f:ea:91:09:0b:63:cd:b5:23:e9:a7:a5:92:60:
         75:c5:53:e1:e2:f0:b0:86:07:11:c2:01:ae:fa:f0:d1:fd:35:
         1d:85:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org