Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa
File:                     3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa (raw, json)
Hash identifier:          z3NYt40IQf0gc+ygIF19wcry+j+Umia/c+y74IKHics=
Subject key identifier:   FC:08:94:D9:9E:9C:44:27:EB:DE:9C:15:5A:93:3E:B1:5D:21:F6:EE
Certificate issuer:       /CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
Certificate serial:       4176BC2ABC7552E9B98A80058BFD92D58DF0EC17
Authority key identifier: 40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa
Signing time:             Tue 07 Mar 2023 13:10:30 +0000
ROA not before:           Tue 07 Mar 2023 13:05:30 +0000
ROA not after:            Tue 05 Mar 2024 13:10:30 +0000
asID:                     270305
IP address blocks:        201.216.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:76:bc:2a:bc:75:52:e9:b9:8a:80:05:8b:fd:92:d5:8d:f0:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Validity
            Not Before: Mar  7 13:05:30 2023 GMT
            Not After : Mar  5 13:10:30 2024 GMT
        Subject: CN=FC0894D99E9C4427EBDE9C155A933EB15D21F6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:95:73:e4:d6:a2:f0:ce:16:bd:b0:2f:d5:
                    03:c7:1d:6c:40:41:55:65:0f:8b:0e:38:5d:2c:eb:
                    61:6f:54:5d:8e:8b:8f:d0:5b:fc:68:6e:77:2e:3d:
                    f8:93:76:9d:89:a4:4f:ff:c1:97:c6:71:96:f3:35:
                    06:ad:97:55:ab:fd:d4:de:ae:e6:bb:9f:a3:e6:5f:
                    1c:ef:79:8e:65:fb:3a:a0:47:a3:77:ce:13:6d:77:
                    e2:7f:ca:26:1f:76:80:2b:a7:3b:37:1e:c1:b4:1f:
                    b4:3a:da:db:38:c8:ae:ae:5c:9a:b1:1d:2a:f6:3c:
                    38:e3:dc:c9:9a:de:5e:4e:b4:39:d5:05:3d:8c:f5:
                    46:52:18:6d:5b:e4:dc:f9:82:e2:4e:28:d0:9d:67:
                    b9:ea:ae:d0:14:e7:f6:b1:d3:65:ca:69:01:71:1a:
                    b3:ae:b7:97:96:9f:ad:2b:24:08:65:47:6b:98:ce:
                    86:d4:93:be:1b:52:ab:39:03:ae:11:6c:dd:10:e7:
                    e1:ab:3b:8a:36:12:3d:de:49:87:1c:97:3f:10:1c:
                    7e:1c:c6:84:35:08:27:6a:9a:e3:3a:73:39:df:9b:
                    99:b6:4d:8d:5e:92:5a:32:6e:e2:9e:85:fa:eb:c1:
                    38:c7:80:1d:67:e5:0b:9a:82:8a:5d:2f:19:0f:75:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:94:D9:9E:9C:44:27:EB:DE:9C:15:5A:93:3E:B1:5D:21:F6:EE
            X509v3 Authority Key Identifier:
                keyid:40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132302e302f32322d3232203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:bd:5e:1b:a5:be:09:37:7b:fa:2a:c2:31:ad:bb:3f:1f:f1:
         65:07:86:16:70:15:44:91:46:e9:b9:76:9a:d2:85:ea:5c:47:
         74:66:3c:bc:61:b8:f3:66:b0:90:15:2d:d6:b3:19:15:01:92:
         1d:ea:c9:4d:26:62:bd:df:a7:e0:20:99:e1:91:e3:26:0f:4f:
         4c:73:fe:3b:3d:5a:27:85:cf:cc:6e:22:c4:ee:ee:dc:52:9f:
         fd:76:19:b0:00:f9:b6:e6:d5:79:e0:6b:ff:90:c1:1c:46:b7:
         08:65:33:6d:9e:6f:24:8f:97:84:9e:7c:d8:8f:7e:fd:cd:73:
         bd:a6:8a:73:2a:0b:51:48:8b:85:18:b6:90:41:2a:15:e1:2c:
         25:51:1c:a7:3b:1b:f3:9d:37:c6:52:d7:0b:cd:d4:c6:04:18:
         c5:d2:5a:a0:36:c0:c0:73:77:d7:90:f0:1a:9e:91:4e:d9:7f:
         40:4a:e5:2a:c1:49:3e:ad:19:4f:ce:4d:94:60:a1:40:d6:32:
         5e:97:1f:3c:4a:fc:2f:43:c5:6c:fd:df:ac:76:e2:ca:75:6a:
         b2:7f:22:a9:53:41:33:31:ef:d9:68:a0:7a:56:e2:3d:f1:24:
         44:d8:88:f3:61:2e:b0:20:8f:89:40:df:c2:98:c7:9d:6e:5d:
         8d:25:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org