Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/3230302e3131352e3130302e302f32322d3234203d3e20323730323638.roa
File:                     3230302e3131352e3130302e302f32322d3234203d3e20323730323638.roa (raw, json)
Hash identifier:          tvqOn1sFZNNl590K4Z4AxNzJWjTNZuw8wWQISZwGalE=
Subject key identifier:   17:6F:F8:AF:5B:06:B6:15:F0:58:D9:78:C9:1E:52:DD:DE:F8:14:48
Certificate issuer:       /CN=70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F
Certificate serial:       52D2AF96CA85BFE75ED08947592B8061A129B50A
Authority key identifier: 70:D6:F0:3C:94:BB:DD:1E:EA:9A:12:F5:94:C3:E7:0A:CB:60:25:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/3230302e3131352e3130302e302f32322d3234203d3e20323730323638.roa
Signing time:             Tue 01 Nov 2022 08:25:19 +0000
ROA not before:           Tue 01 Nov 2022 08:20:19 +0000
ROA not after:            Tue 31 Oct 2023 08:25:19 +0000
asID:                     270268
IP address blocks:        200.115.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:af:96:ca:85:bf:e7:5e:d0:89:47:59:2b:80:61:a1:29:b5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F
        Validity
            Not Before: Nov  1 08:20:19 2022 GMT
            Not After : Oct 31 08:25:19 2023 GMT
        Subject: CN=176FF8AF5B06B615F058D978C91E52DDDEF81448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:dd:3f:6a:f4:94:58:ad:a0:47:3c:0c:a0:
                    d4:77:c9:17:10:7e:b7:59:33:1b:03:af:2e:fe:bd:
                    49:b7:ff:59:e3:95:2f:37:20:2c:fa:54:50:e7:79:
                    7b:e5:e6:25:1b:06:43:35:59:70:d3:b6:6a:44:9b:
                    4a:74:55:b3:38:5a:c9:c0:10:b9:58:a0:3b:ab:30:
                    8b:cc:24:80:06:9b:77:d0:76:39:3f:f6:77:0d:03:
                    40:60:d2:64:e6:f4:12:6f:a1:1c:a9:ae:8d:c9:38:
                    17:9d:4c:7a:09:de:d7:ae:c8:ce:a3:ea:86:b6:0c:
                    89:62:de:eb:ed:79:23:57:cd:eb:f0:13:40:3c:7f:
                    db:31:a2:68:d0:55:96:a2:1f:e7:fd:e7:13:2b:22:
                    2b:4f:b8:1e:ad:14:85:e3:71:b5:4c:0f:e9:68:d7:
                    8d:5f:ff:19:6a:7d:17:ff:e8:71:e6:72:87:dc:4a:
                    ad:d7:94:ce:b5:4a:e4:73:f5:ea:81:e3:b8:96:f0:
                    99:7b:95:0f:96:37:4a:06:f7:ab:c7:7d:36:80:1c:
                    8c:80:34:30:53:79:dd:8c:2c:6a:c7:7f:2d:eb:cc:
                    3f:27:c1:09:b4:7f:43:43:4b:2a:26:e2:0b:97:55:
                    57:ae:35:e7:29:72:4a:2f:ed:9a:09:ea:cd:ba:89:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:F8:AF:5B:06:B6:15:F0:58:D9:78:C9:1E:52:DD:DE:F8:14:48
            X509v3 Authority Key Identifier:
                keyid:70:D6:F0:3C:94:BB:DD:1E:EA:9A:12:F5:94:C3:E7:0A:CB:60:25:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70D6F03C94BBDD1EEA9A12F594C3E70ACB60253F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gruTcwzMGNrGBCWmsvYieu1HhFR1NBhpoHf83HKpxpj/0/3230302e3131352e3130302e302f32322d3234203d3e20323730323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:31:35:8b:8a:60:b3:b7:84:45:83:42:f3:fe:0a:09:fc:7c:
         93:0d:a4:d1:b9:43:35:d5:74:ef:28:03:54:dc:e0:ff:16:bd:
         dc:09:0d:91:20:fa:25:92:2b:ba:08:db:15:a8:e2:be:ab:d2:
         77:28:3c:32:7c:71:84:f7:7b:14:39:93:6a:cc:e2:39:29:e7:
         28:c1:4a:db:a3:01:78:bb:de:ca:b1:8d:07:1a:38:4a:0e:ad:
         d8:d5:7c:52:a7:6d:05:a6:0c:c3:73:e8:9a:8a:2f:67:38:6c:
         bb:80:bd:dc:3d:0b:c1:b4:f0:10:93:9d:fb:5d:3c:a5:54:cc:
         1d:ba:f7:18:a6:a2:3d:76:97:7a:d3:93:55:b1:0d:72:47:51:
         0c:17:c7:4b:e1:38:3b:33:29:8b:ef:7d:3b:e2:6e:7d:7a:54:
         eb:1c:e8:ba:63:15:a7:30:db:07:f6:76:7e:0d:40:ec:ca:73:
         01:6e:d4:c6:db:e3:26:db:e6:1b:30:48:0e:2b:93:c4:a4:8f:
         4f:17:f0:1b:a5:c6:03:c0:9b:72:c0:9e:7c:74:69:09:ec:28:
         4b:df:56:07:1d:9f:1b:d1:12:22:b9:88:2c:c8:0c:c5:42:5e:
         4f:22:07:7f:24:eb:e9:7a:47:75:fb:d3:b7:c6:20:23:01:94:
         c8:65:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org