Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32342d3234203d3e20323731343139.roa
File:                     3230302e33392e35322e302f32342d3234203d3e20323731343139.roa (raw, json)
Hash identifier:          5qSxF9F7B9sK97di83ScZQCazzxAQsbEjm3SkZPflkQ=
Subject key identifier:   10:7C:C1:F0:73:A8:7D:A9:A3:53:1B:3B:F5:2A:0C:EB:E0:3B:BD:A3
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       1497B52FF40C543F464D2ED6D8543C00E39EC593
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32342d3234203d3e20323731343139.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     271419
IP address blocks:        200.39.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:97:b5:2f:f4:0c:54:3f:46:4d:2e:d6:d8:54:3c:00:e3:9e:c5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:25:bb:c6:dd:94:1f:6b:92:26:71:12:fb:
                    bc:03:5e:00:75:48:49:c3:49:0c:d6:a7:e6:51:7b:
                    9e:6a:b2:37:74:81:fe:5c:b0:40:58:8a:8d:64:d7:
                    ad:49:a8:34:0c:86:c5:eb:d4:be:c3:e5:db:78:dc:
                    1c:32:4a:a9:55:b5:6d:3b:78:17:2b:95:8c:80:07:
                    f6:d5:66:1e:69:4a:e9:95:d7:38:66:af:b3:bb:da:
                    2a:b9:81:12:2c:90:ab:4f:92:e7:d5:2d:6f:15:91:
                    e4:2a:ad:b9:ad:33:05:00:62:56:05:8e:3d:14:5b:
                    1d:29:50:06:43:fe:37:8b:5c:d4:f4:1c:5c:db:ca:
                    fc:97:5c:36:6d:b1:17:6d:63:9a:2a:d2:1b:35:55:
                    57:b6:56:5b:11:71:a1:f3:f6:6c:ba:9b:6c:0b:2b:
                    db:84:24:ca:bd:d8:0c:23:ef:b6:12:ae:63:e4:62:
                    b9:ed:0c:83:d2:64:e8:e0:b2:30:2f:eb:3d:58:c2:
                    77:35:91:d5:16:c4:90:c8:c3:f7:fe:f9:ee:d4:1b:
                    f8:aa:ec:9e:4c:8b:55:2e:1d:9e:da:c6:b6:40:3b:
                    ed:71:06:68:d1:e4:bf:41:93:6d:13:97:50:5a:d6:
                    54:b0:78:13:cb:2e:58:0b:c0:d3:74:04:ea:90:bb:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:C1:F0:73:A8:7D:A9:A3:53:1B:3B:F5:2A:0C:EB:E0:3B:BD:A3
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32342d3234203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:30:fc:25:4d:67:67:e9:f9:e3:c8:60:37:00:eb:27:32:e0:
         49:9b:f2:3a:d2:b8:b0:88:c3:9f:59:ac:89:ab:cd:0d:d3:f4:
         04:1d:20:0a:f4:5b:b8:29:03:17:43:0e:0e:89:64:61:57:75:
         0e:d2:6c:b2:df:ec:aa:4a:95:05:5f:de:5b:b8:34:d1:2a:7d:
         40:c1:00:5b:13:e7:79:f1:a5:6c:1e:ba:6d:0d:02:46:7c:2c:
         2e:36:fa:18:f7:98:5c:67:53:90:76:6d:7d:78:72:bb:12:32:
         5e:81:03:6c:cc:c8:1f:a1:c9:1c:95:69:59:5f:e7:19:21:94:
         ea:8c:90:a5:44:a9:fa:44:12:94:f1:fe:2e:cd:fc:2a:b5:bb:
         f6:2d:3f:4a:c0:07:6a:af:e4:d3:be:f4:fc:e1:2b:69:b5:7f:
         0f:7e:05:2f:a4:12:fb:ad:02:57:b0:0d:3c:d5:dc:95:ff:31:
         d8:c4:48:c4:d5:fd:84:58:f6:46:bc:27:de:84:7c:a2:ed:05:
         ef:15:52:52:0e:cd:72:b9:5a:f0:46:8d:5d:9a:8c:6d:4f:1f:
         6c:bc:ff:48:c0:0d:09:3a:2e:59:a1:f9:02:f1:d5:50:fa:1e:
         d6:1e:54:6c:31:b6:f5:37:fb:f8:b4:25:77:29:94:e0:d1:e1:
         85:7c:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org