Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa
File:                     3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          MHaIgLxCfwHaKCeMqjWkRf3f8UU445klGXSnFfK3XR0=
Subject key identifier:   83:B3:B5:CD:01:90:70:C5:85:0D:31:3A:B8:AB:2B:A0:C6:2C:F7:4A
Certificate issuer:       /CN=9129AD41D8674385271EFA3A05D3D27494319FC0
Certificate serial:       136263784286F89AC745EE9FCDF35A47FD037772
Authority key identifier: 91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa
Signing time:             Thu 12 Oct 2023 20:08:00 +0000
ROA not before:           Thu 12 Oct 2023 20:03:00 +0000
ROA not after:            Thu 10 Oct 2024 20:08:00 +0000
asID:                     263656
IP address blocks:        201.139.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:63:78:42:86:f8:9a:c7:45:ee:9f:cd:f3:5a:47:fd:03:77:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9129AD41D8674385271EFA3A05D3D27494319FC0
        Validity
            Not Before: Oct 12 20:03:00 2023 GMT
            Not After : Oct 10 20:08:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:d3:c6:5f:37:e8:e7:10:c4:4e:11:38:52:
                    28:da:c2:11:d5:2c:f9:c8:7f:43:b0:c2:5c:66:34:
                    37:b4:07:3b:77:8f:dd:9e:21:70:1b:65:51:07:19:
                    c8:e5:42:6f:85:5a:d1:c1:8c:84:73:e9:c8:2e:c3:
                    91:6e:29:0d:f8:1d:7f:92:77:59:16:c5:d5:52:a9:
                    3a:dd:a3:fe:df:eb:75:d0:3d:d4:cc:ab:c0:c8:cc:
                    4d:d4:a8:b8:cd:87:46:48:6f:0e:bb:a8:05:ed:b9:
                    5a:84:59:9d:94:5f:ce:e9:76:ce:ee:b8:34:9d:0b:
                    a1:7e:5d:6d:36:f9:09:a3:e3:2e:d7:0b:69:b4:e5:
                    86:c6:c5:00:33:05:15:b9:bd:66:31:24:57:00:c4:
                    7d:f3:21:8b:12:ba:53:4c:88:02:49:12:0c:a2:51:
                    68:c6:14:22:59:f0:46:2e:9c:55:13:2a:1f:f4:bd:
                    1e:6b:ca:eb:ab:e1:56:0e:72:2e:46:4e:f0:17:b8:
                    24:8a:4b:90:a6:a6:be:e6:55:a8:9d:c4:c9:90:0d:
                    46:bb:c7:89:3f:1f:a3:7d:ff:f3:86:11:57:22:a4:
                    ff:8e:ca:24:b2:2f:1a:a2:f8:01:67:1b:55:b1:c2:
                    f2:7a:e3:49:9c:95:48:5d:1d:99:6c:19:09:f2:5b:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:B5:CD:01:90:70:C5:85:0D:31:3A:B8:AB:2B:A0:C6:2C:F7:4A
            X509v3 Authority Key Identifier:
                keyid:91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:d3:89:d6:0a:64:d2:76:c7:06:4d:c9:55:da:54:86:e6:
         75:ce:b6:4b:93:cb:92:12:7f:3d:6b:e6:87:75:7c:00:ea:23:
         8b:2e:18:aa:94:02:50:90:58:14:0d:12:37:32:c1:17:57:8f:
         f5:22:de:b7:8e:49:d8:b2:df:35:de:31:a9:e1:a6:78:c9:95:
         21:0f:e3:28:e3:74:10:3e:28:26:b4:75:8a:69:d2:f0:69:1e:
         b9:f3:94:61:59:67:d1:43:4d:b0:3e:f2:8c:75:80:23:db:3a:
         de:09:bc:85:1e:93:53:65:b1:21:51:a4:e8:e8:5f:29:ee:5a:
         52:10:14:b8:10:46:1a:28:68:b3:b2:d5:1a:c5:a5:ee:ff:41:
         5e:05:75:28:af:17:f3:5d:1b:67:92:93:b1:c9:eb:7a:5d:94:
         38:76:68:50:1b:b6:46:75:49:34:4e:24:6f:64:2f:43:b2:09:
         a8:91:55:fc:43:cd:d7:2d:56:d1:bd:1a:a7:96:3e:de:d8:fb:
         14:9d:30:44:ec:57:00:32:57:ba:1b:2a:6a:6d:8e:7d:b7:72:
         80:0d:57:a2:bd:7c:ff:bc:fb:49:95:aa:d7:a0:e1:89:42:b0:
         4b:63:6f:74:42:6a:30:0b:bb:0a:1d:ba:2e:3f:cd:67:34:4a:
         ff:b8:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org