Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32332d3233203d3e20323731363730.roa
File:                     3230302e3135302e3235322e302f32332d3233203d3e20323731363730.roa (raw, json)
Hash identifier:          YgCJ9RfnvyXFucTiLjlHNY4CP0xD0sNwvlJJlYHee7w=
Subject key identifier:   0C:23:7D:75:BF:4A:85:BA:97:58:34:2A:2B:55:82:6E:35:B3:B7:05
Certificate issuer:       /CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Certificate serial:       6231648B831C202C84091AEDDA35B3ED2DF71C45
Authority key identifier: 86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32332d3233203d3e20323731363730.roa
Signing time:             Thu 02 Nov 2023 15:42:23 +0000
ROA not before:           Thu 02 Nov 2023 15:37:23 +0000
ROA not after:            Thu 31 Oct 2024 15:42:23 +0000
asID:                     271670
IP address blocks:        200.150.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:31:64:8b:83:1c:20:2c:84:09:1a:ed:da:35:b3:ed:2d:f7:1c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
        Validity
            Not Before: Nov  2 15:37:23 2023 GMT
            Not After : Oct 31 15:42:23 2024 GMT
        Subject: CN=0C237D75BF4A85BA9758342A2B55826E35B3B705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:9e:10:34:32:37:d7:5e:cf:76:bd:28:38:
                    ca:d6:7c:b1:f2:e3:aa:56:40:1e:1a:00:b0:77:9d:
                    cc:12:60:06:9b:fe:c3:63:20:16:b6:c3:b8:ec:03:
                    e2:6d:1d:1f:f7:24:91:1c:06:9f:b8:47:e3:57:47:
                    1a:86:4b:54:24:8e:5e:44:e8:3f:50:6f:66:3e:8b:
                    c6:81:c9:2b:92:67:eb:26:17:48:10:b8:1e:53:34:
                    e7:b3:c7:92:6e:2d:34:7b:3b:ac:6a:b8:d1:9f:59:
                    45:07:82:34:0c:c9:8b:0b:15:1b:2e:82:05:0b:b4:
                    dd:ff:88:38:9b:57:02:70:d0:20:0b:7d:15:61:b9:
                    b5:2e:70:75:47:10:8c:5b:d8:b6:69:4b:d4:8a:18:
                    06:f7:d1:6e:49:fb:b8:cb:77:3d:bf:0c:47:25:cb:
                    e3:23:ce:69:4f:92:f2:95:4c:a7:36:00:0e:30:03:
                    bd:6f:b7:a1:fe:c7:59:d9:c5:98:79:57:ba:bc:d8:
                    14:77:c9:25:95:1f:77:7a:b1:c8:64:dc:0a:8b:c9:
                    6e:27:00:6b:09:1f:a3:b3:44:08:d4:93:cb:42:97:
                    6f:2d:05:23:1e:94:63:8d:ac:76:ec:7a:47:cf:ec:
                    25:64:bd:53:01:0d:e1:48:f1:40:4e:24:63:c3:51:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:23:7D:75:BF:4A:85:BA:97:58:34:2A:2B:55:82:6E:35:B3:B7:05
            X509v3 Authority Key Identifier:
                keyid:86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235322e302f32332d3233203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:15:08:b1:c2:0b:bc:66:40:a9:56:12:0d:f3:41:81:51:54:
         4f:51:fd:47:24:42:a9:fc:02:12:4a:78:d7:bd:bb:53:e9:6c:
         7b:9a:d9:fa:b2:90:01:26:4d:0b:b4:2d:4e:9f:d4:01:10:da:
         45:88:c0:ba:ea:c9:b5:8c:32:45:c9:71:41:19:fd:ff:9c:b4:
         69:0f:3c:3e:37:0d:b3:38:26:5b:25:fb:78:b1:38:19:ab:f6:
         57:bf:72:53:ae:f2:d2:44:60:13:8f:49:62:90:89:97:07:d4:
         c1:d8:df:1d:cd:d2:10:9e:1c:18:30:7a:6d:d7:8b:4b:78:1a:
         fd:e8:c9:da:72:e0:8c:eb:a9:b4:a8:6d:ce:40:ac:f7:06:3d:
         d5:4a:d5:e8:25:91:6b:0c:9f:28:22:98:f1:4b:4b:42:27:d1:
         17:b5:5d:09:43:90:7a:00:39:af:0d:48:e6:55:28:80:4d:e4:
         94:00:92:d6:55:7a:eb:3c:be:76:ad:40:6c:dc:10:7e:f1:e8:
         e3:21:6a:04:b2:3d:40:0c:8f:5b:22:69:79:25:8c:b1:b8:7e:
         04:c1:3c:73:2c:76:a5:ed:9c:c3:ce:dd:00:98:93:1f:d8:a5:
         71:fd:61:48:05:59:6c:30:99:d2:6c:8c:d2:f1:45:e5:47:eb:
         1e:2f:fa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org