Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323731343139.roa
File:                     3230302e33392e35342e302f32342d3234203d3e20323731343139.roa (raw, json)
Hash identifier:          zCPLAw3+WTUuAYNzpgRA0hWHUTcCCR22RB3d3eCpbGA=
Subject key identifier:   54:EA:34:94:79:BF:76:C9:85:4E:49:92:B6:25:35:11:9C:7C:BA:11
Certificate issuer:       /CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
Certificate serial:       72D2C3C59CA0F8666AE7DD0DFF2E506797C36B33
Authority key identifier: 91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323731343139.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     271419
IP address blocks:        200.39.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d2:c3:c5:9c:a0:f8:66:6a:e7:dd:0d:ff:2e:50:67:97:c3:6b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913F9BB5F19C9AB91D95AFC628E9A7290E143695
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:a2:be:f9:12:d5:e2:14:fc:3f:a4:f3:d9:
                    d1:53:c2:68:00:67:b6:00:57:4a:b9:e8:1e:36:9d:
                    43:0b:23:f1:db:0a:c8:59:71:1d:ff:48:10:01:49:
                    08:67:13:6b:bd:7b:59:fc:47:60:2b:f6:85:e2:ae:
                    82:c2:3c:0a:16:fc:a3:be:8f:8e:ee:10:c9:0a:5a:
                    4d:3f:f6:5b:7e:69:14:d2:69:92:0b:df:cd:77:31:
                    4b:2e:c9:69:3e:98:84:e3:62:c5:ce:c2:d5:a1:33:
                    ab:3f:95:86:cb:2a:e8:68:2c:fb:27:59:78:ae:5f:
                    71:09:30:2d:8a:4f:6f:2a:46:3a:c1:dc:2f:6a:d8:
                    54:33:92:0d:e2:08:3a:9b:57:af:e5:4c:6f:ba:99:
                    32:82:c9:75:85:06:0f:c1:96:21:49:2b:bf:70:91:
                    be:0b:49:b0:d0:79:f4:03:e7:61:08:ee:4c:8c:ed:
                    18:82:c3:ba:59:e6:c7:84:69:ac:a2:4d:98:e8:a0:
                    cc:85:15:df:27:fe:b7:31:8b:a1:43:c2:cc:44:65:
                    b9:73:d9:2d:58:28:5a:fe:9b:5b:7b:67:10:d6:74:
                    9e:d1:ac:a0:af:e2:97:d9:2a:97:c6:a7:fc:a6:b5:
                    dc:4f:7d:48:df:2b:e2:5e:bb:66:0a:f5:d3:b9:87:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EA:34:94:79:BF:76:C9:85:4E:49:92:B6:25:35:11:9C:7C:BA:11
            X509v3 Authority Key Identifier:
                keyid:91:3F:9B:B5:F1:9C:9A:B9:1D:95:AF:C6:28:E9:A7:29:0E:14:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/913F9BB5F19C9AB91D95AFC628E9A7290E143695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35342e302f32342d3234203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:d5:21:e3:1e:8a:cf:e5:5b:75:90:80:4e:d8:cd:0a:4a:
         37:b7:55:ad:d3:d8:9f:53:68:63:d9:04:29:16:c5:80:66:0a:
         58:3a:3d:6e:ba:54:24:c7:06:3b:02:77:07:38:f5:15:a7:a2:
         73:10:8e:87:37:e1:ce:a1:35:50:31:33:78:55:1c:67:10:f4:
         34:b8:a8:f3:a0:fd:45:9e:4b:57:48:b0:76:13:59:b6:dd:52:
         e7:cf:d4:99:47:8d:c3:6f:eb:80:18:9c:fe:45:cf:f7:d8:c2:
         46:84:39:93:66:36:32:3d:a0:51:6b:d5:7e:58:df:e1:b5:d7:
         60:5b:00:5f:e8:0b:a0:13:01:46:31:1c:a5:a8:b9:ec:78:d4:
         d8:43:04:f6:2c:d3:d5:72:20:6a:94:25:1b:e8:2f:39:04:95:
         4e:fe:a0:99:03:43:40:0b:ec:51:77:7b:e6:9b:72:77:a5:bf:
         e3:46:5c:86:74:65:e1:0f:1f:7e:97:5f:ca:9e:46:1e:60:f6:
         01:57:a5:8a:e3:a8:da:e5:a7:8e:f3:69:17:8a:07:73:1f:8d:
         09:fd:a4:6b:0f:e7:87:97:37:2e:db:57:80:76:5b:76:00:f1:
         a8:eb:b9:42:49:a9:a7:59:38:99:a4:a5:76:b3:89:6c:c2:78:
         b6:7d:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org