Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa
File:                     3230302e33342e3231362e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          MJej4WWrTHiVQ3RMMtPCmNwjZJgVVrBfVhWyX9240xQ=
Subject key identifier:   CB:63:02:6A:1F:D6:B9:E8:37:95:41:06:49:E2:46:C4:AA:E4:51:08
Certificate issuer:       /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial:       6F5CDBA5A1F58A57F5DEEC868FBCC9168CECB2F3
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:37:09 +0000
ROA not before:           Wed 10 Apr 2024 13:32:09 +0000
ROA not after:            Wed 09 Apr 2025 13:37:09 +0000
asID:                     61689
IP address blocks:        200.34.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5c:db:a5:a1:f5:8a:57:f5:de:ec:86:8f:bc:c9:16:8c:ec:b2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Validity
            Not Before: Apr 10 13:32:09 2024 GMT
            Not After : Apr  9 13:37:09 2025 GMT
        Subject: CN=CB63026A1FD6B9E83795410649E246C4AAE45108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:7e:88:92:21:c9:b7:f2:91:ff:2d:b0:5f:
                    65:29:98:fb:d2:fb:0a:a3:d6:7d:34:e5:a1:fa:f6:
                    fb:a4:df:c2:8d:f3:ad:3d:36:0f:1a:97:0c:34:b2:
                    8a:0b:8b:88:c7:84:34:ca:18:94:f7:c3:79:ff:89:
                    6a:14:76:9d:59:aa:eb:a5:db:e3:c7:1a:47:36:4c:
                    bf:e0:22:6c:6c:c1:7a:ee:5f:3c:97:f2:96:1f:33:
                    42:a1:d0:4d:9b:b1:ba:57:ff:f2:e5:cb:23:81:44:
                    0b:f0:d8:84:8f:39:e4:a7:15:7d:14:40:c8:b9:5f:
                    a9:47:88:b6:3e:78:5f:75:4c:fa:0b:0a:9e:df:19:
                    cb:7c:56:b4:b7:5d:6f:0f:4a:c4:4f:e8:13:c5:85:
                    c9:6b:1c:1c:a4:70:29:4c:e5:5c:6e:a2:6f:e3:bd:
                    0d:a1:16:85:25:8c:1e:43:ea:c1:9e:94:7a:b0:f5:
                    08:7f:32:44:f7:92:71:fb:ef:0b:02:d8:33:2a:21:
                    62:7a:2c:7d:bf:e5:ea:69:e1:ce:c4:e8:92:d8:ab:
                    39:cc:99:04:48:5b:6d:23:39:d2:35:02:11:b5:14:
                    75:f1:6a:32:a7:71:52:cc:48:1d:c7:77:d7:3f:aa:
                    fc:34:40:1d:e9:6c:a2:8e:21:89:64:a4:c9:bd:a9:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:63:02:6A:1F:D6:B9:E8:37:95:41:06:49:E2:46:C4:AA:E4:51:08
            X509v3 Authority Key Identifier:
                keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:9a:f4:35:09:a9:22:93:fe:2c:15:98:07:1f:86:0d:8c:
         fb:33:e8:64:f7:20:6e:05:05:d7:6d:7d:1d:7c:54:c9:02:22:
         e1:d3:e0:2e:fd:a3:10:79:e9:2a:f9:5d:ab:f0:bc:b2:dc:02:
         7d:d4:e4:15:57:0d:26:a2:32:4a:d6:c4:26:e8:fb:1d:32:6f:
         f0:0a:56:96:f7:c6:a6:ce:15:cd:2b:2b:5d:0f:eb:ac:91:c1:
         6d:b5:e1:a6:07:6c:41:1e:f4:83:aa:f5:e2:a1:b2:29:88:5c:
         eb:f9:67:37:dd:0e:42:38:16:23:a1:73:f8:30:51:8b:3f:d6:
         25:38:d0:ed:b7:b8:43:05:26:65:ac:56:c8:6f:b2:21:41:41:
         21:b3:a8:59:e3:73:7c:13:30:12:e2:a1:9f:06:3b:7f:70:d6:
         35:77:c0:bd:46:b3:6b:52:f4:6d:f6:fa:39:0a:9c:8c:06:69:
         b3:d5:3b:85:3c:2b:1a:1b:ec:7b:aa:91:1b:cc:42:76:a5:31:
         0a:0f:81:36:0f:4c:12:25:df:5b:79:d7:6b:5b:4b:6a:b6:96:
         17:5a:8c:46:87:64:c0:dd:e4:8c:19:ca:ba:bb:e4:a6:03:f7:
         69:03:01:64:23:35:bf:ca:83:94:19:f9:e0:32:e2:6c:9f:41:
         53:04:01:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org