Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          x8FERphPCar0FQYd8cMJh3MzuV7j+17X1gPFUAT/eAw=
Subject key identifier:   A4:86:79:31:D4:B9:95:7A:E0:24:1A:3A:C0:CE:A5:E3:A5:38:D5:C4
Certificate issuer:       /CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
Certificate serial:       7852B7DDC8F9B824805F67C7C745CFFD6B123561
Authority key identifier: AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa
Signing time:             Tue 12 Mar 2024 16:33:21 +0000
ROA not before:           Tue 12 Mar 2024 16:28:21 +0000
ROA not after:            Tue 11 Mar 2025 16:33:21 +0000
asID:                     267511
IP address blocks:        201.182.102.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:52:b7:dd:c8:f9:b8:24:80:5f:67:c7:c7:45:cf:fd:6b:12:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0A5A110B6FD898CCCEFC07C260A96ED656830E
        Validity
            Not Before: Mar 12 16:28:21 2024 GMT
            Not After : Mar 11 16:33:21 2025 GMT
        Subject: CN=A4867931D4B9957AE0241A3AC0CEA5E3A538D5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:f2:d2:e4:e2:63:03:ba:5a:52:8b:8b:a6:
                    d5:be:2f:fc:e7:f4:d8:bc:91:a0:13:ba:05:89:ef:
                    6f:c8:dd:3c:17:fa:2a:05:1f:d8:a8:81:71:92:0d:
                    c1:15:ed:75:46:c3:85:fb:47:08:8f:8f:16:3a:ef:
                    d5:66:f0:78:62:5d:4d:bf:fd:82:f5:64:a8:9c:49:
                    d7:44:6f:d2:73:cf:5c:da:2e:f1:b8:2b:52:ff:3a:
                    11:22:9d:7a:c8:51:70:ab:89:0a:52:f3:a4:69:4f:
                    32:b0:2f:bd:f3:31:70:3f:fc:9d:a8:3f:35:27:b0:
                    d9:d0:f2:41:11:4c:00:9d:71:9d:8b:63:0e:e7:24:
                    e8:77:65:97:8c:c5:fd:ed:72:bb:9b:79:f8:1b:3d:
                    32:03:a1:bc:e4:94:78:32:f9:8f:24:f8:b8:98:92:
                    26:49:9e:d1:26:01:15:69:84:02:74:ae:37:53:2b:
                    32:1d:eb:52:e6:56:75:c0:a7:09:16:7e:4e:26:78:
                    28:7e:98:5c:a0:13:fb:66:ca:31:be:f2:ba:8c:3f:
                    d9:56:e9:05:20:f0:6d:1a:1d:8b:a4:bc:45:88:dc:
                    ec:57:65:27:6f:26:af:61:1d:81:a0:57:5f:09:b7:
                    a2:27:e2:e7:f5:41:7f:ba:05:24:34:e6:c5:37:42:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:79:31:D4:B9:95:7A:E0:24:1A:3A:C0:CE:A5:E3:A5:38:D5:C4
            X509v3 Authority Key Identifier:
                keyid:AE:0A:5A:11:0B:6F:D8:98:CC:CE:FC:07:C2:60:A9:6E:D6:56:83:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE0A5A110B6FD898CCCEFC07C260A96ED656830E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:e6:20:cc:70:35:a6:91:c0:0c:56:bb:25:9e:4a:b5:f9:
         76:22:0d:7a:cc:d5:99:fa:18:59:12:ca:f5:75:ff:6b:1a:8e:
         c0:22:d6:7f:00:35:46:27:bd:94:4c:2c:75:43:c8:f7:32:44:
         20:19:af:16:0c:14:64:bf:0b:80:4f:50:c4:f3:72:f4:f7:dc:
         30:4a:73:d2:b5:13:90:76:6f:0c:dc:56:d9:fe:bf:3b:2b:d1:
         75:98:a9:29:33:b6:16:f3:ef:25:11:10:42:cc:b7:4c:45:ae:
         54:b8:85:6a:4d:0f:06:40:e6:c7:09:ae:33:1c:9e:43:72:50:
         b2:0f:f1:bc:b6:67:f8:b5:42:e5:b0:cf:fd:4b:be:33:8d:f5:
         ab:8f:f4:d6:3f:58:72:d7:b2:24:21:68:80:e6:f3:8d:e5:61:
         0d:0b:50:fc:44:8a:6b:52:dc:8e:ea:4b:3d:e3:4e:d1:e1:90:
         07:bd:fd:bb:09:35:06:98:35:40:16:8d:e7:2f:fc:5e:4d:07:
         ba:22:b3:31:15:74:98:84:9f:6f:cc:76:49:81:74:43:90:da:
         fc:aa:55:d7:80:07:0e:92:b5:c9:5c:d5:4b:08:b2:32:67:f4:
         84:18:cc:cd:f8:40:94:e5:ad:91:f0:0d:aa:d4:21:64:2f:44:
         4d:db:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org