Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132312e302f32342d3234203d3e20323730333035.roa
File:                     3230312e3231362e3132312e302f32342d3234203d3e20323730333035.roa (raw, json)
Hash identifier:          GDLrBo8mfQBQgn7wmHVX4dBU0VBJLWvy4OweI6TLmg0=
Subject key identifier:   FE:77:0E:A6:3B:0D:00:B7:D2:F0:C7:3C:BF:BC:75:A4:AD:8A:99:CE
Certificate issuer:       /CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
Certificate serial:       626265DD788812FEBFFFFD7212C63A835C61A1B2
Authority key identifier: 0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132312e302f32342d3234203d3e20323730333035.roa
Signing time:             Thu 09 Nov 2023 19:29:55 +0000
ROA not before:           Thu 09 Nov 2023 19:24:55 +0000
ROA not after:            Thu 07 Nov 2024 19:29:55 +0000
asID:                     270305
IP address blocks:        201.216.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:62:65:dd:78:88:12:fe:bf:ff:fd:72:12:c6:3a:83:5c:61:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
        Validity
            Not Before: Nov  9 19:24:55 2023 GMT
            Not After : Nov  7 19:29:55 2024 GMT
        Subject: CN=FE770EA63B0D00B7D2F0C73CBFBC75A4AD8A99CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:bf:43:f4:32:71:d9:68:70:96:76:e5:66:
                    a5:85:fa:3f:66:94:63:78:71:89:09:9e:9b:f8:e2:
                    36:ae:3f:36:3c:11:9d:e6:c6:4a:71:78:83:8a:ae:
                    07:53:cb:65:fa:72:13:0a:16:20:bc:d5:44:23:50:
                    33:bd:63:d7:b0:86:06:bd:de:fa:da:20:c1:12:32:
                    0c:0f:8b:3d:7e:d9:12:d5:9f:31:83:af:01:bc:c6:
                    65:8c:09:19:c5:b8:23:fa:15:65:7b:5f:d8:9f:d9:
                    72:65:ed:e8:be:62:ec:09:69:53:33:dc:71:87:fa:
                    b1:c8:b7:db:86:11:2c:75:50:83:57:b4:ef:b6:c2:
                    2e:3f:cf:a0:cb:d9:2d:84:c8:bf:2b:e1:6b:b0:e4:
                    1f:13:30:c3:f0:4c:c7:50:d9:d4:2a:ba:1f:98:a7:
                    0e:51:89:6a:b5:5b:bb:a1:af:41:b7:07:f9:96:d2:
                    77:3f:31:6e:9e:8c:ef:35:14:4b:6d:f7:b7:4e:f4:
                    2f:5f:ec:d4:72:bf:ae:26:f4:a1:7b:ac:b5:78:87:
                    6f:76:0f:58:68:9a:c5:a3:c7:00:07:5e:2b:dd:83:
                    fe:0b:2c:63:f6:ff:c4:2f:5b:79:94:1c:e7:96:01:
                    a9:60:1e:f8:4f:e5:ef:01:ee:28:96:30:43:a1:2f:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:0E:A6:3B:0D:00:B7:D2:F0:C7:3C:BF:BC:75:A4:AD:8A:99:CE
            X509v3 Authority Key Identifier:
                keyid:0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132312e302f32342d3234203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:47:c8:79:67:c5:65:0d:35:a0:64:9b:ed:a9:bd:fb:53:
         9b:a2:c3:81:19:3e:f4:d8:df:e9:53:e7:42:b3:e6:c2:d1:a1:
         26:61:51:dc:bc:6c:57:17:99:cb:fd:2a:b7:8e:ba:17:3d:36:
         48:4f:d3:1b:bc:e6:a4:6c:53:5c:a7:a2:ff:1d:25:1d:7e:15:
         ec:a9:10:cf:cb:74:bb:cd:d5:1f:62:00:30:b4:d0:3c:36:50:
         bb:c5:a2:c1:47:4c:f2:a3:5b:e9:68:3c:48:5d:7f:31:8f:76:
         74:86:df:10:a0:76:00:70:0f:14:10:3d:e2:84:7e:75:2b:70:
         84:f7:22:89:ab:ac:65:c3:6e:13:ee:80:c1:c0:5a:f6:5d:59:
         fd:33:d5:0b:b1:e2:88:99:38:64:0e:b9:d6:dd:31:29:6f:d5:
         9d:d6:15:56:a8:14:fd:d8:9f:17:ab:a8:e5:da:ea:f0:1f:89:
         30:31:be:ee:95:af:98:61:84:eb:01:ef:41:76:dc:90:5f:15:
         cb:8d:e6:fe:39:cb:b4:3e:44:7a:bd:fb:39:76:4d:62:c1:b3:
         cd:e4:b4:5e:96:96:6a:12:08:a5:ed:29:be:0f:5b:9b:5d:94:
         55:49:5a:81:5b:32:69:d5:14:6a:16:83:86:18:7d:bb:57:29:
         52:7d:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org