Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          G2TsXcVRRgACFJwSBwkZj4f5Z0EURuNrSpUySWMHNQA=
Subject key identifier:   8C:3F:DC:35:DF:3E:BE:AE:C3:04:E5:EB:E1:39:69:D3:70:EE:C6:4A
Certificate issuer:       /CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
Certificate serial:       70852EDBEEC6B57D1D208EF10BC33148A9D6722F
Authority key identifier: AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
Signing time:             Mon 26 Jun 2023 16:14:29 +0000
ROA not before:           Mon 26 Jun 2023 16:09:29 +0000
ROA not after:            Mon 24 Jun 2024 16:14:29 +0000
asID:                     270275
IP address blocks:        200.124.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:85:2e:db:ee:c6:b5:7d:1d:20:8e:f1:0b:c3:31:48:a9:d6:72:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4E045CCD60F57F93C3C91D5A9A71004102D44B
        Validity
            Not Before: Jun 26 16:09:29 2023 GMT
            Not After : Jun 24 16:14:29 2024 GMT
        Subject: CN=8C3FDC35DF3EBEAEC304E5EBE13969D370EEC64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:ef:52:7f:5a:32:bd:f3:5f:2d:53:e8:66:
                    c9:49:77:08:90:24:9b:35:4f:55:a1:7c:21:1f:2e:
                    d3:f8:0b:e2:37:a1:e5:3b:dd:6b:2a:46:0b:58:53:
                    1d:8d:f0:a3:3a:96:3b:8f:84:34:b8:6a:4d:b3:f6:
                    25:6a:3a:96:72:77:12:59:71:9f:e8:31:eb:c9:19:
                    91:6e:52:59:98:53:66:d4:05:60:6d:4f:3d:c5:32:
                    85:d9:eb:74:e5:0d:25:5e:d9:68:b3:6d:e7:91:60:
                    96:f6:6c:ee:d4:fc:05:a2:97:4a:61:eb:06:07:b4:
                    b1:35:19:a5:68:22:12:e4:52:b4:10:d5:9e:41:46:
                    bf:be:e9:01:13:fb:4e:4b:35:d0:7e:fd:8a:77:f7:
                    57:d4:fe:bc:e6:e3:8b:1c:04:8a:41:08:7b:54:a0:
                    31:a5:99:96:bd:2e:2d:8f:c3:88:98:fd:e4:58:36:
                    e7:33:10:37:62:c6:8f:14:86:2e:b6:ea:77:fd:88:
                    d8:94:61:1a:53:1e:af:97:88:1e:63:fc:62:8e:fd:
                    26:c0:1f:00:5b:a9:5e:4b:79:2b:84:58:6d:39:1f:
                    6d:c3:db:53:0d:49:77:28:a2:9c:1d:35:00:ce:db:
                    3f:fa:8d:a6:62:fe:ff:5f:1f:78:44:ef:41:34:ce:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:DC:35:DF:3E:BE:AE:C3:04:E5:EB:E1:39:69:D3:70:EE:C6:4A
            X509v3 Authority Key Identifier:
                keyid:AF:4E:04:5C:CD:60:F5:7F:93:C3:C9:1D:5A:9A:71:00:41:02:D4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF4E045CCD60F57F93C3C91D5A9A71004102D44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/0/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:42:3e:d1:1e:39:c4:01:c6:b7:dd:7c:b5:6e:a3:32:a3:4a:
         f9:19:83:85:d4:62:f3:0a:34:ef:c4:43:df:c8:bf:cf:9e:7b:
         ec:17:ec:01:e8:66:15:22:34:e0:d9:c4:32:65:44:a8:1a:2a:
         d0:77:8a:c7:1b:ee:92:df:44:14:2f:99:c1:6f:ed:47:83:c2:
         9b:bc:44:30:12:2c:b5:83:04:04:8c:64:16:0d:29:65:1b:c7:
         4e:bd:2e:80:e1:ce:92:ae:ac:00:bc:66:ca:42:3d:ea:7b:30:
         6a:28:08:99:4c:f1:4e:1f:c0:bc:9d:e3:d2:8d:9b:ad:36:23:
         0b:01:e7:c8:c4:eb:46:31:1b:6e:fb:57:45:af:bf:dd:e3:94:
         8c:f7:dd:f3:c8:71:39:57:2b:03:5f:5a:2f:fd:3d:90:a1:22:
         b2:5f:2e:9b:d3:3b:a0:04:cc:9a:43:a7:2d:6e:8f:08:25:b4:
         bc:86:b5:a5:ee:1f:5f:3c:66:28:ed:ec:0d:9c:c0:be:ba:ab:
         e3:25:58:fa:05:3b:a6:b3:6e:e1:56:d1:00:4b:30:df:50:73:
         db:5a:83:af:7c:cc:cd:ac:3b:12:98:1a:11:cf:8a:d6:a0:e7:
         62:98:8d:44:1d:98:1b:a3:75:b8:67:01:67:90:be:ac:10:4b:
         0a:32:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org