Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kd6b5UayamLoXTWFqZGdtFD5tfizf1s5oPJ9DMtnx4H/0/3230312e3133392e38342e302f32322d3234203d3e20323632373532.roa
File:                     3230312e3133392e38342e302f32322d3234203d3e20323632373532.roa (raw, json)
Hash identifier:          hAkx6PEk8bNN0v8MKUARzpk6MEmi9UIAQsCpi5cbDcE=
Subject key identifier:   70:00:43:CE:E1:AF:34:A9:91:0F:B7:73:51:8F:FE:DB:2D:A8:D8:25
Certificate issuer:       /CN=E8485EBD66D5B9A7DB9DF1868A4A89040834D490
Certificate serial:       2424C5659723C65AFAE1D3A4199B2360C7200D09
Authority key identifier: E8:48:5E:BD:66:D5:B9:A7:DB:9D:F1:86:8A:4A:89:04:08:34:D4:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8485EBD66D5B9A7DB9DF1868A4A89040834D490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kd6b5UayamLoXTWFqZGdtFD5tfizf1s5oPJ9DMtnx4H/0/3230312e3133392e38342e302f32322d3234203d3e20323632373532.roa
Signing time:             Mon 25 Apr 2022 20:16:45 +0000
ROA not before:           Mon 25 Apr 2022 20:11:45 +0000
ROA not after:            Mon 24 Apr 2023 20:16:45 +0000
asID:                     262752
IP address blocks:        201.139.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:24:c5:65:97:23:c6:5a:fa:e1:d3:a4:19:9b:23:60:c7:20:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8485EBD66D5B9A7DB9DF1868A4A89040834D490
        Validity
            Not Before: Apr 25 20:11:45 2022 GMT
            Not After : Apr 24 20:16:45 2023 GMT
        Subject: CN=700043CEE1AF34A9910FB773518FFEDB2DA8D825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:8d:9f:d6:45:bc:1b:59:5a:56:c0:b0:eb:
                    a6:d0:1d:f7:5c:90:e5:b6:6b:b5:a0:4e:03:60:4e:
                    18:37:6e:ed:f6:e4:29:a0:c7:21:19:b9:c2:aa:f2:
                    48:8a:72:4a:fe:eb:a3:a7:92:c4:c4:ce:4e:2e:d4:
                    89:b8:38:db:96:57:24:d0:03:66:10:ef:c0:6c:82:
                    2e:b1:0e:5e:d5:5c:e3:de:70:46:b9:da:2b:83:b4:
                    94:b9:a8:1b:be:66:61:ff:85:98:17:4b:3c:bd:29:
                    ff:0d:d3:75:00:71:98:25:6e:66:32:13:b8:f4:2f:
                    65:de:38:42:c9:f5:b4:af:d3:08:33:f1:bf:6f:c5:
                    d2:6a:86:36:c6:6b:d3:bf:a5:e4:9b:1c:c4:f6:e1:
                    0e:43:58:77:e8:38:98:c5:96:b8:36:55:35:88:49:
                    5d:8c:2e:15:70:80:f0:19:98:f1:f3:2c:24:6f:74:
                    7e:72:27:ed:31:3a:fd:22:63:50:34:35:9b:fb:27:
                    68:a5:67:39:b5:c3:26:ec:33:84:1c:4e:fd:49:dc:
                    14:65:fc:a4:0a:81:ea:05:d5:09:f0:37:4e:c0:61:
                    c4:00:90:12:30:7e:02:86:01:0c:f4:99:e5:57:e9:
                    cb:f2:dd:ad:32:ef:d7:86:b2:fe:e0:f7:91:ee:3c:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:43:CE:E1:AF:34:A9:91:0F:B7:73:51:8F:FE:DB:2D:A8:D8:25
            X509v3 Authority Key Identifier:
                keyid:E8:48:5E:BD:66:D5:B9:A7:DB:9D:F1:86:8A:4A:89:04:08:34:D4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kd6b5UayamLoXTWFqZGdtFD5tfizf1s5oPJ9DMtnx4H/0/E8485EBD66D5B9A7DB9DF1868A4A89040834D490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8485EBD66D5B9A7DB9DF1868A4A89040834D490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kd6b5UayamLoXTWFqZGdtFD5tfizf1s5oPJ9DMtnx4H/0/3230312e3133392e38342e302f32322d3234203d3e20323632373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:6a:8d:f6:fb:e5:e2:22:56:3b:56:be:ad:c7:17:30:88:
         d3:fd:1d:d1:ad:2e:eb:3b:94:25:fa:32:d2:58:0b:32:d6:e5:
         9b:6e:76:02:9d:a0:b2:d9:54:3b:a6:44:f9:79:c7:93:0a:c9:
         e5:8c:c1:24:c6:23:ce:de:f2:f7:78:0a:a2:79:a0:fb:1a:10:
         c7:51:1a:93:3b:2b:af:cd:3b:b7:70:39:b9:2b:9a:92:7d:11:
         3d:34:d2:25:cc:91:86:a9:bb:f0:2a:93:91:84:f0:5b:b5:83:
         c7:df:c6:f4:c2:df:19:27:60:6f:33:fc:41:d5:f7:5d:99:bd:
         61:fb:d2:f1:78:4e:cd:ea:be:f8:7b:58:8b:da:5f:e1:c1:86:
         43:d9:f5:32:f1:7c:4d:21:3d:45:24:70:c2:fc:b1:8b:4e:1b:
         92:b8:36:a0:76:d9:47:7c:0e:06:21:2d:e0:25:ba:8b:8c:c8:
         a1:52:72:15:36:86:4d:fa:c5:43:c5:35:c3:12:62:80:c5:a5:
         a2:71:1a:a1:30:44:47:26:14:97:56:c3:06:b1:f9:f2:29:0f:
         9c:0e:9a:57:d5:e2:28:24:70:a3:bc:d7:95:56:65:47:b9:60:
         60:31:41:f2:22:06:ec:7e:74:d2:5a:79:a1:05:31:2c:ae:0c:
         64:97:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org