Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132332e302f32342d3234203d3e20323730333035.roa
File:                     3230312e3231362e3132332e302f32342d3234203d3e20323730333035.roa (raw, json)
Hash identifier:          oC+krh2EYGUhEeU8gX0YNgXQymhX8pZeR7epSBXWEe4=
Subject key identifier:   2A:18:BD:D8:A3:2C:98:A7:2F:D7:BA:3C:59:6C:0A:83:E3:FF:E6:B4
Certificate issuer:       /CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
Certificate serial:       798024FE02FC27D2FB7A958C379CADAA7A41C108
Authority key identifier: 0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132332e302f32342d3234203d3e20323730333035.roa
Signing time:             Thu 09 Nov 2023 19:30:01 +0000
ROA not before:           Thu 09 Nov 2023 19:25:01 +0000
ROA not after:            Thu 07 Nov 2024 19:30:01 +0000
asID:                     270305
IP address blocks:        201.216.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:80:24:fe:02:fc:27:d2:fb:7a:95:8c:37:9c:ad:aa:7a:41:c1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4
        Validity
            Not Before: Nov  9 19:25:01 2023 GMT
            Not After : Nov  7 19:30:01 2024 GMT
        Subject: CN=2A18BDD8A32C98A72FD7BA3C596C0A83E3FFE6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:0d:6a:df:83:a9:c2:e6:94:56:2a:17:58:
                    1f:22:7b:e9:bd:8c:0a:c8:c3:4c:a9:9a:38:7d:13:
                    7e:ea:81:48:ad:a0:e8:58:42:cd:b6:f6:05:90:9a:
                    86:40:8b:6e:9d:d9:53:40:95:32:30:f0:bc:e7:c1:
                    8e:90:3e:c6:b5:4c:34:44:a6:c4:ab:0f:76:0f:e2:
                    fc:5c:7a:9b:96:0c:39:61:36:c3:99:16:6d:21:38:
                    37:9c:51:24:58:70:01:88:96:61:80:a6:89:71:92:
                    aa:ad:5c:71:85:0e:30:3d:2b:73:a1:2f:ee:bc:91:
                    a5:d6:db:e5:e0:74:16:b5:36:0f:a4:29:6a:50:03:
                    0b:ca:41:e9:36:6c:d5:bf:3e:fc:33:14:b4:5c:21:
                    33:56:35:6d:d3:cb:ea:e7:8d:14:28:4e:cd:15:50:
                    f2:e2:e2:f8:b7:3f:8e:98:03:86:82:58:fa:21:92:
                    d2:d4:3b:f0:9b:58:13:30:65:bd:54:92:a7:20:b8:
                    62:85:2f:2b:f5:c0:d7:d2:eb:76:f2:9a:37:73:18:
                    75:0b:ce:14:82:77:12:21:45:4f:6b:ea:19:c2:cc:
                    9f:0a:8e:ac:3c:a7:a1:d9:08:56:4a:e0:9b:e8:2a:
                    69:7c:53:29:15:67:d7:0f:28:23:aa:c6:78:59:00:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:BD:D8:A3:2C:98:A7:2F:D7:BA:3C:59:6C:0A:83:E3:FF:E6:B4
            X509v3 Authority Key Identifier:
                keyid:0C:4E:24:E6:BF:19:C3:E2:F2:97:D1:5F:E6:97:6D:04:A2:7A:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C4E24E6BF19C3E2F297D15FE6976D04A27A65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/3230312e3231362e3132332e302f32342d3234203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:65:b7:e0:07:79:46:2b:d4:4c:57:08:77:db:ab:ee:a1:bb:
         cf:18:58:7f:77:37:5b:56:33:77:61:22:8b:01:98:af:9b:9f:
         9c:da:b6:0e:f1:04:6a:77:dd:19:78:56:73:d7:e7:3b:5d:7b:
         0f:14:9c:d4:05:05:68:84:3a:f8:79:e1:88:9b:58:07:74:de:
         08:4f:07:cc:09:08:b8:05:21:e4:cb:cf:91:65:20:00:80:32:
         69:ae:3e:ec:10:03:c6:e5:c9:16:2c:ff:c4:ac:c4:28:a4:aa:
         68:e3:24:82:fa:50:90:47:3c:e1:ac:94:8d:85:32:bc:98:b5:
         70:4e:8d:13:77:a3:1e:9f:14:fb:9a:74:67:7d:68:1d:ce:2f:
         fa:18:72:56:e2:bd:fb:73:5a:65:0a:64:36:e3:cc:28:91:03:
         07:db:67:4d:69:2b:ea:9e:08:78:fe:6a:c7:08:29:45:ac:df:
         b1:42:77:44:a7:3c:d4:c9:27:a2:19:04:b6:74:79:41:de:1e:
         21:9f:70:18:8f:bc:8e:ed:f4:3f:a0:64:fa:81:30:60:69:22:
         62:b6:ec:65:72:94:89:00:71:ca:09:1c:d5:53:40:48:38:9b:
         59:e7:02:9f:b5:80:4f:78:03:15:06:b5:76:35:ed:55:19:29:
         df:9b:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org