Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32312e302f32342d3234203d3e20323636313930.roa
File:                     3230302e392e32312e302f32342d3234203d3e20323636313930.roa (raw, json)
Hash identifier:          zytT/9BhCH1Cu5hbQxYif783Judzmm8BfOaLuREZ0cU=
Subject key identifier:   2F:C5:71:45:96:EE:57:D5:02:B5:59:BB:91:A0:7A:CC:67:9C:23:B5
Certificate issuer:       /CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
Certificate serial:       1BEABD720E0F9C4172BD23D81E6A7599E132F1AB
Authority key identifier: 44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32312e302f32342d3234203d3e20323636313930.roa
Signing time:             Thu 21 Sep 2023 21:30:10 +0000
ROA not before:           Thu 21 Sep 2023 21:25:10 +0000
ROA not after:            Thu 19 Sep 2024 21:30:10 +0000
asID:                     266190
IP address blocks:        200.9.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:bd:72:0e:0f:9c:41:72:bd:23:d8:1e:6a:75:99:e1:32:f1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443C52A1E1B3E17578094AEB52B4600E6650CDD5
        Validity
            Not Before: Sep 21 21:25:10 2023 GMT
            Not After : Sep 19 21:30:10 2024 GMT
        Subject: CN=2FC5714596EE57D502B559BB91A07ACC679C23B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:30:4f:c3:fe:da:a3:01:c2:7b:68:de:56:
                    36:f3:33:b1:bf:6f:ea:de:f6:3b:b2:51:be:37:0c:
                    bd:04:87:5a:a6:2a:7a:ed:a8:9d:0c:52:4a:33:81:
                    32:23:54:4f:c0:c8:9e:8c:32:59:48:c2:1e:ba:fe:
                    64:98:53:13:ec:02:d8:34:cc:d1:70:97:50:48:c9:
                    be:89:fc:e0:86:a9:37:02:6b:b6:d8:eb:70:d2:cc:
                    01:9e:72:e0:e0:7a:c5:59:84:a4:fe:92:c2:83:86:
                    2f:ac:1c:38:9f:63:47:02:fd:da:12:80:b6:41:9b:
                    cc:e0:4e:f0:86:cc:d5:8b:69:51:41:ba:45:eb:cf:
                    09:49:d4:02:29:14:b2:68:8e:d3:3b:22:87:d0:07:
                    c5:88:40:02:f8:ed:6c:66:a9:e1:c5:ed:31:dc:80:
                    96:f7:ae:ae:9d:e6:2b:a3:94:34:2c:74:48:37:aa:
                    de:cf:3b:4a:e0:f0:84:de:68:58:67:34:61:8f:09:
                    19:2f:0a:da:4f:ad:d1:66:72:32:97:40:d8:86:1f:
                    7e:b5:00:76:6c:7b:57:99:8e:23:f6:3d:f2:b5:5b:
                    ec:6a:f4:60:c6:8d:ef:b0:48:65:03:a7:3b:eb:dd:
                    07:39:9f:2b:a0:77:ff:e9:f1:b8:96:39:ad:7c:7a:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:71:45:96:EE:57:D5:02:B5:59:BB:91:A0:7A:CC:67:9C:23:B5
            X509v3 Authority Key Identifier:
                keyid:44:3C:52:A1:E1:B3:E1:75:78:09:4A:EB:52:B4:60:0E:66:50:CD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/443C52A1E1B3E17578094AEB52B4600E6650CDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcvpyAYqUdM6rcYbHC9wPUM5ZzrMJPPagHzJeLRVBxDV/0/3230302e392e32312e302f32342d3234203d3e20323636313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:74:f3:a2:c7:27:38:c2:4c:6a:bb:1d:7f:16:b3:88:64:
         9b:2e:1a:2a:ae:3c:99:34:cf:3d:bb:ea:68:84:f2:12:7d:bc:
         cf:63:5b:41:65:fd:86:1d:6b:19:3f:7c:f9:39:71:4c:1d:69:
         10:68:10:0a:b5:15:63:6e:55:44:5e:91:0e:0b:e8:b1:35:d2:
         e6:07:37:c4:b4:67:51:bd:da:bc:ef:ec:fc:ee:c7:db:3c:e0:
         7d:99:6f:6a:7e:2c:cb:b3:a9:58:d4:10:4b:b0:b4:bd:57:c1:
         91:01:8c:d5:ec:c5:a6:e0:9e:ea:2d:13:b9:1a:25:7a:bf:27:
         e9:70:ef:1f:68:a2:d1:bf:8c:0a:f3:9e:59:e8:d3:c7:65:1c:
         22:b8:61:97:6c:c2:7b:31:13:85:dd:72:6b:94:fe:51:46:ef:
         4c:c0:df:0b:6e:40:d5:b3:4c:63:f2:f4:c2:9f:69:90:3a:fd:
         f3:6e:a1:91:f1:0a:6d:5f:95:53:07:b1:a7:5d:3b:8d:b4:36:
         f4:db:05:3f:d4:f4:a9:a9:7a:98:99:30:55:eb:b7:ea:34:37:
         1c:6f:bb:d4:ec:de:83:69:9a:bf:46:d9:2c:f3:f7:c4:3d:0c:
         6e:5d:fa:8b:3a:f3:0c:ee:62:58:46:9d:86:94:9e:5f:13:43:
         64:93:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org