Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32322e302f32332d3233203d3e20323731333335.roa
File:                     3230372e3234382e32322e302f32332d3233203d3e20323731333335.roa (raw, json)
Hash identifier:          WNAdpXvwUYV/nkkHwhcOCRi02gXrDT0aCNTTd3Czj+M=
Subject key identifier:   EF:50:ED:46:DC:61:A4:F7:67:E6:C3:C8:4D:D1:1D:A7:3B:EB:55:DC
Certificate issuer:       /CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
Certificate serial:       1DF5F38CEAF298532CC0863202BE18644590201D
Authority key identifier: 18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32322e302f32332d3233203d3e20323731333335.roa
Signing time:             Fri 20 Oct 2023 11:19:25 +0000
ROA not before:           Fri 20 Oct 2023 11:14:25 +0000
ROA not after:            Fri 18 Oct 2024 11:19:25 +0000
asID:                     271335
IP address blocks:        207.248.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f5:f3:8c:ea:f2:98:53:2c:c0:86:32:02:be:18:64:45:90:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183AD09B8E58EC140D5736D6990E8E4E9855AB8A
        Validity
            Not Before: Oct 20 11:14:25 2023 GMT
            Not After : Oct 18 11:19:25 2024 GMT
        Subject: CN=EF50ED46DC61A4F767E6C3C84DD11DA73BEB55DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:b2:ef:4d:18:ad:e8:c0:c1:bf:fc:40:00:
                    71:de:8b:43:ad:eb:7d:d0:9c:f0:16:cd:0e:1f:e2:
                    72:a5:f1:5f:7a:e3:9a:6f:4d:4a:49:1c:d3:57:6c:
                    63:64:2b:28:b6:51:b6:e1:47:4a:fb:81:51:7a:06:
                    66:03:c3:b1:44:4f:e5:b5:d0:30:b3:91:5a:d4:30:
                    ad:3a:34:4e:f3:f8:8e:56:37:44:83:34:3c:95:c3:
                    30:69:39:89:14:ba:8d:f7:e1:b2:b4:d3:d7:6b:26:
                    f6:c0:93:b3:e9:25:92:48:16:57:7c:ef:7f:20:07:
                    08:66:bf:81:71:ec:d1:21:0a:6d:19:a7:f7:fc:66:
                    f5:8f:bd:ce:81:8b:30:2d:96:b8:1e:cb:32:8a:43:
                    8f:f3:55:17:d6:a7:87:a2:ee:b9:de:8c:05:0c:eb:
                    c7:ab:80:e6:11:72:a3:d0:a5:b3:7b:5c:9e:0e:e2:
                    8b:22:db:3e:01:07:01:a8:8a:1d:56:9b:52:1e:56:
                    c5:85:d7:d0:39:95:6d:5b:a9:be:27:da:6a:7a:e4:
                    e9:b4:9d:f9:0e:25:69:4e:48:ad:87:4e:ac:7a:6d:
                    5a:f1:4e:80:19:24:0b:76:eb:71:98:03:78:d0:09:
                    6e:f1:a2:39:a0:3e:30:ba:8f:a6:d2:1e:f8:bb:4a:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:ED:46:DC:61:A4:F7:67:E6:C3:C8:4D:D1:1D:A7:3B:EB:55:DC
            X509v3 Authority Key Identifier:
                keyid:18:3A:D0:9B:8E:58:EC:14:0D:57:36:D6:99:0E:8E:4E:98:55:AB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/183AD09B8E58EC140D5736D6990E8E4E9855AB8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/3230372e3234382e32322e302f32332d3233203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:7c:b6:d8:25:5b:db:71:cb:a3:d0:38:80:2b:77:5f:b7:
         24:8d:a5:e5:9e:fa:5a:d1:a0:d7:67:c8:a8:73:c8:14:04:32:
         a7:fc:b5:00:2f:78:56:c6:83:61:87:b3:01:7c:04:44:b5:c7:
         43:35:5b:08:2f:e8:21:81:03:2e:97:b1:ad:44:94:7f:c3:1a:
         d9:5b:96:4c:59:63:09:48:c6:b3:d2:6e:2b:73:fd:56:57:54:
         f8:0a:f6:43:17:2c:bf:a8:fb:64:9e:79:ca:db:5a:84:be:6a:
         3e:87:64:63:a5:e9:91:4f:8a:11:88:35:dd:ec:84:53:3c:cd:
         af:11:a9:14:43:b9:67:81:b5:19:43:29:a5:be:a9:41:b8:13:
         a1:22:e9:f7:68:1a:97:f2:c7:bf:78:95:fa:be:48:7b:72:4f:
         02:6c:89:51:08:7b:e6:0c:61:18:19:a0:0d:88:11:db:55:7d:
         32:10:30:3c:61:c9:ab:16:40:d0:b4:e4:9e:fc:22:15:7f:d8:
         e3:d9:42:1c:5c:e8:fb:66:a0:cf:46:fe:bd:8c:2d:02:f7:71:
         e4:45:2f:7a:00:a0:3f:9b:cb:1a:88:3c:a1:9e:be:47:38:14:
         f9:25:99:42:36:7e:82:86:0b:4b:d5:bc:6b:e9:06:95:bf:6d:
         84:e1:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:38 2023 by rpki-client on console.sobornost.net