Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa
File:                     3230302e33342e3231382e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          4w7ZFqDAuaoYHUDwprGqrBFLGDQX3SN5EH8g5oEdhM8=
Subject key identifier:   E2:53:CF:DA:DD:04:43:CD:8D:94:B3:59:82:16:B8:5A:CE:E3:AD:69
Certificate issuer:       /CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
Certificate serial:       67A401F2C553FE630D865EF0EDB1D615AF270C34
Authority key identifier: 72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:37:16 +0000
ROA not before:           Wed 10 Apr 2024 13:32:16 +0000
ROA not after:            Wed 09 Apr 2025 13:37:16 +0000
asID:                     61689
IP address blocks:        200.34.218.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:01:f2:c5:53:fe:63:0d:86:5e:f0:ed:b1:d6:15:af:27:0c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725625A656CCD2BE3F3F0F87D9A4BF2E192BE414
        Validity
            Not Before: Apr 10 13:32:16 2024 GMT
            Not After : Apr  9 13:37:16 2025 GMT
        Subject: CN=E253CFDADD0443CD8D94B3598216B85ACEE3AD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:10:79:66:1e:fd:bc:23:9a:65:fc:66:75:
                    5d:57:c7:3b:fe:aa:dd:0a:4a:00:13:01:31:ff:2b:
                    7c:b4:2f:d4:65:36:d6:c4:43:89:af:78:d8:7e:b6:
                    06:10:d4:be:c1:82:e1:c9:ef:24:92:fb:7b:4a:1f:
                    04:eb:cf:74:a0:66:9f:d1:29:11:ea:44:08:99:86:
                    23:42:22:0b:cb:96:c8:05:dd:ce:63:c7:18:a4:fe:
                    9f:dc:d4:5f:f4:8b:0c:82:15:9a:95:60:75:5b:27:
                    29:cd:a6:d9:4f:26:c5:10:cf:38:ca:98:ba:fa:2c:
                    38:aa:e8:88:d3:d3:01:1b:c7:92:64:3e:93:5e:37:
                    6d:0f:46:73:54:81:1d:94:2b:c4:37:03:06:d6:e9:
                    8c:b2:fa:6a:1f:9c:4e:85:b2:ab:d4:64:1b:6e:e7:
                    93:98:ba:94:c1:39:79:26:9a:bc:cd:d7:73:7b:33:
                    b1:65:1f:b8:17:91:dc:2a:5b:63:46:76:31:1f:fa:
                    34:a7:df:b7:8c:50:cc:c4:9e:66:83:7a:3b:79:17:
                    39:ae:de:ee:4b:4c:22:2a:7c:5b:39:c9:fa:60:3a:
                    44:7a:ee:27:0f:1e:fa:c2:c2:69:16:e6:c1:3b:b3:
                    40:fb:bb:b9:93:04:c0:65:89:5b:96:b1:fe:96:57:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:53:CF:DA:DD:04:43:CD:8D:94:B3:59:82:16:B8:5A:CE:E3:AD:69
            X509v3 Authority Key Identifier:
                keyid:72:56:25:A6:56:CC:D2:BE:3F:3F:0F:87:D9:A4:BF:2E:19:2B:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/725625A656CCD2BE3F3F0F87D9A4BF2E192BE414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:d4:22:3f:d7:08:c9:fc:40:a7:49:4c:25:81:4d:d0:0d:
         15:6c:4b:ad:e9:e3:da:86:fe:cb:61:7c:77:26:e1:05:11:c8:
         5b:84:05:55:77:02:d5:a2:97:9f:95:55:a6:d0:71:c9:96:27:
         29:bc:d1:dd:8f:16:07:b6:38:2d:19:18:30:1a:17:36:bf:df:
         72:6b:b9:0a:d5:98:80:9c:94:9c:ac:6b:fc:d8:ce:fa:78:e5:
         a3:13:7a:63:7c:94:ea:a2:1c:f6:1c:2d:ff:4d:ad:9b:34:48:
         6c:de:35:b8:17:c7:a0:3e:9d:de:2d:65:8c:bf:64:6a:0a:6b:
         22:75:59:de:41:1c:f8:c3:15:7f:31:59:34:20:45:4d:57:2a:
         5e:3c:bb:09:4e:52:3f:e0:b9:62:32:82:30:b7:da:ee:4a:c7:
         01:65:ef:d8:63:ef:41:74:63:9d:a0:af:d1:37:4e:99:84:ac:
         61:97:8f:b5:d5:33:eb:c9:67:35:54:16:50:e6:e7:e4:98:f3:
         a9:aa:f9:25:00:ad:40:5e:78:18:f6:d8:b1:63:7d:e8:1a:c1:
         a1:3d:37:15:e2:22:f9:3f:21:cd:89:91:00:f3:17:12:83:a1:
         33:e9:ae:63:71:2a:a9:e3:99:82:cd:fa:16:98:e5:52:a5:18:
         01:9a:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org