Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3232203d3e203532363934.roa
File:                     3230302e362e3132382e302f32322d3232203d3e203532363934.roa (raw, json)
Hash identifier:          HQReIlnGcqiYsuKIfDDdB6vIuiXLa+XxtbNzkqE2jbY=
Subject key identifier:   19:9F:18:E1:C0:D3:20:2B:94:AA:35:21:B8:48:46:57:E6:B6:BF:69
Certificate issuer:       /CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
Certificate serial:       3FE92647AD0A852A32AE3BC2ECF30CEC167A33CD
Authority key identifier: 64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3232203d3e203532363934.roa
Signing time:             Sun 21 Aug 2022 01:00:00 +0000
ROA not before:           Sun 21 Aug 2022 00:55:00 +0000
ROA not after:            Sun 20 Aug 2023 01:00:00 +0000
asID:                     52694
IP address blocks:        200.6.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e9:26:47:ad:0a:85:2a:32:ae:3b:c2:ec:f3:0c:ec:16:7a:33:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64894956869A94FA3EF45CC10A7E5C1449C5BCD3
        Validity
            Not Before: Aug 21 00:55:00 2022 GMT
            Not After : Aug 20 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:d1:fa:22:1a:2a:db:c3:0f:4d:51:3f:a8:
                    ee:19:cb:a9:d4:33:c4:67:99:51:bc:7b:de:cd:ed:
                    90:43:f3:b6:4f:fa:ff:c7:dd:31:e7:d1:4c:e3:3c:
                    f0:bb:e4:22:41:5b:ef:c5:31:6b:43:11:a9:f7:c4:
                    4d:41:fc:6c:4c:3c:ea:c4:8b:84:53:01:c8:a7:2a:
                    76:86:47:c3:21:8e:b3:06:66:19:2a:ba:88:ad:92:
                    6f:3f:4d:b4:54:a9:de:5a:98:cd:68:0d:15:0d:ae:
                    03:c6:a8:86:5f:78:f5:ea:76:c0:9c:0e:b9:3c:c1:
                    85:7a:84:26:b8:58:24:c8:47:a0:d6:dc:25:9b:38:
                    b8:f1:47:ad:82:0f:89:d8:cd:02:73:f0:59:c5:39:
                    08:f2:6d:ef:31:1a:39:5f:b0:a9:1c:c6:0b:ed:62:
                    ad:14:d4:fa:0a:49:d3:c7:ba:2e:ef:40:d0:87:1f:
                    24:87:7a:02:17:66:58:e3:1f:7b:48:39:4b:28:b2:
                    a4:8b:72:06:dc:0c:d7:63:38:4e:96:65:00:c6:cf:
                    41:e4:7d:ce:4c:54:22:09:dc:ee:ae:da:be:93:09:
                    7f:b1:79:0e:13:6d:c1:36:3b:9e:e5:0e:bc:69:a8:
                    62:18:d2:33:a9:3f:cc:2b:57:7f:72:ed:99:1f:a9:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:18:E1:C0:D3:20:2B:94:AA:35:21:B8:48:46:57:E6:B6:BF:69
            X509v3 Authority Key Identifier:
                keyid:64:89:49:56:86:9A:94:FA:3E:F4:5C:C1:0A:7E:5C:14:49:C5:BC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/64894956869A94FA3EF45CC10A7E5C1449C5BCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3230302e362e3132382e302f32322d3232203d3e203532363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:26:71:c7:a9:be:b9:54:cc:9d:d9:be:2a:52:51:59:32:
         19:5b:27:26:1f:ac:b6:e5:c6:4f:e3:51:9e:98:e4:d1:63:fe:
         72:c0:db:99:a8:36:e2:0a:65:20:b2:10:86:f7:8e:64:38:66:
         d6:8d:6a:7f:e1:39:7e:96:93:60:15:d6:6a:e3:88:b9:04:37:
         25:fa:26:40:8b:79:b3:56:ed:34:d3:5e:75:5d:62:6c:b9:a7:
         07:25:76:84:76:c4:65:01:49:f4:c3:7d:36:95:44:ed:ad:49:
         c2:27:4b:bd:b5:18:12:90:0d:a3:de:fd:09:84:80:ff:c0:c0:
         9b:05:26:92:1d:62:15:66:6b:9f:78:03:00:68:aa:e9:47:9e:
         4d:6d:24:38:9c:bd:b2:06:46:e7:55:44:f0:80:93:6a:97:21:
         9c:9f:4f:fa:b2:1d:cc:49:b7:da:8e:75:5c:64:ec:e4:c6:fa:
         1c:cd:74:07:29:2a:06:05:e2:ee:cb:a0:c5:b0:bb:02:85:4f:
         76:5f:2f:3b:ce:d5:fb:37:8f:76:3b:d5:4e:5f:61:93:9a:58:
         4a:73:64:54:71:91:7d:d1:70:ec:c9:40:1d:e6:43:e0:fc:2e:
         cb:cf:d8:96:77:23:a7:f0:7d:18:8e:2d:72:c1:a4:4a:5e:5e:
         c7:9f:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org