Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373335.roa
File:                     3230302e362e38342e302f32322d3234203d3e20323730373335.roa (raw, json)
Hash identifier:          b0oMSvtcHAWh4WCojDKYQmA6jfnHk7FG86ts5HVSBwc=
Subject key identifier:   F3:77:87:1B:40:57:0A:E7:33:FA:4F:EF:98:7E:6B:0A:D4:BB:76:66
Certificate issuer:       /CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
Certificate serial:       16BA09ACE4C09EF504E5A4BAAEADE7C385ADE1E6
Authority key identifier: CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373335.roa
Signing time:             Mon 04 Sep 2023 14:27:40 +0000
ROA not before:           Mon 04 Sep 2023 14:22:40 +0000
ROA not after:            Mon 02 Sep 2024 14:27:40 +0000
asID:                     270735
IP address blocks:        200.6.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ba:09:ac:e4:c0:9e:f5:04:e5:a4:ba:ae:ad:e7:c3:85:ad:e1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF1D4ED402F6A7495FF98704F6504616E9CD02FA
        Validity
            Not Before: Sep  4 14:22:40 2023 GMT
            Not After : Sep  2 14:27:40 2024 GMT
        Subject: CN=F377871B40570AE733FA4FEF987E6B0AD4BB7666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:d5:3d:46:fe:09:a9:54:46:37:fc:f6:c6:
                    d3:6d:ce:17:69:f5:1f:76:a9:06:1a:db:95:a3:1e:
                    40:8e:b7:b7:80:80:9d:1a:12:af:91:6c:46:4f:de:
                    d1:fe:89:b6:d2:f8:61:bf:fc:6c:55:ef:f3:4f:e0:
                    db:fa:48:ef:18:25:cb:17:49:19:c1:d7:2c:7a:62:
                    f2:d3:5e:25:d1:79:37:84:77:2b:3d:68:90:0c:49:
                    4a:fc:7c:36:88:56:0a:e6:d0:07:28:20:49:40:00:
                    21:22:1f:f5:0a:6d:22:b4:2e:53:79:a6:6d:65:3a:
                    04:90:f4:6c:04:a8:86:82:b4:45:67:0c:90:c7:5c:
                    96:62:4a:81:a3:ca:ff:2a:87:ca:da:f5:24:d7:f1:
                    94:c5:68:03:a1:0d:fb:2a:b9:c5:e0:a0:f2:99:f6:
                    01:a9:0c:d3:7b:9b:fb:47:53:0f:a7:16:b8:24:86:
                    c6:a1:86:55:da:43:c3:d2:93:b5:ea:8f:23:0b:7d:
                    18:89:12:f5:06:6d:1b:54:de:17:e1:2a:0e:9a:1a:
                    53:6e:ab:57:50:4f:c8:a4:ea:24:d9:31:2c:64:9f:
                    0d:55:46:53:4f:88:17:26:ff:89:b2:c9:60:e3:bd:
                    f8:10:51:22:f6:86:2d:95:b1:66:68:74:1c:81:58:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:87:1B:40:57:0A:E7:33:FA:4F:EF:98:7E:6B:0A:D4:BB:76:66
            X509v3 Authority Key Identifier:
                keyid:CF:1D:4E:D4:02:F6:A7:49:5F:F9:87:04:F6:50:46:16:E9:CD:02:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF1D4ED402F6A7495FF98704F6504616E9CD02FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12W8vQg78nWPuTYV5pheNeHQAy8FeaDpEGBBAUUpXa2R/0/3230302e362e38342e302f32322d3234203d3e20323730373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:13:31:5b:f6:88:7e:39:79:9d:9d:fc:f5:2f:33:bc:73:
         60:a7:bb:7b:60:72:b9:93:5d:3b:db:16:e0:71:af:5a:7e:25:
         6c:df:82:b5:42:a4:7e:dc:19:ac:9e:34:b0:86:f2:c1:7b:e2:
         94:00:9c:b7:c5:d9:5c:02:81:42:e3:07:31:77:00:20:24:fb:
         71:8f:17:00:cf:e0:90:86:21:55:2c:5a:f8:7a:51:65:fe:62:
         19:40:6c:93:23:cd:86:b5:e0:bc:97:0b:b2:7e:f0:ec:fe:d1:
         b5:87:f3:1b:36:b0:c7:8f:0d:a0:94:4b:57:ee:64:0d:21:d9:
         3e:a1:c6:86:c0:0e:52:f3:6f:dc:66:70:7c:b5:38:b2:63:09:
         dd:10:c1:cb:fe:f4:95:18:19:2b:15:5d:e2:2e:62:dd:ac:c9:
         c3:20:71:90:76:c7:38:91:23:8d:81:38:23:96:11:34:4a:e5:
         66:4c:a0:66:3b:e0:e7:92:8c:36:a6:e0:09:be:16:ef:51:36:
         18:c7:55:c1:68:ce:9b:f0:8a:0e:1b:7b:ca:ca:0f:be:7e:f3:
         ff:b6:be:12:c9:86:40:06:d5:4a:17:57:93:80:8f:b6:84:55:
         c6:b1:a1:ca:2a:35:7a:28:69:43:13:4e:48:05:e6:5c:65:c8:
         2e:4c:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org