Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3234203d3e20323731363730.roa
File:                     3230302e3135302e3235342e302f32342d3234203d3e20323731363730.roa (raw, json)
Hash identifier:          rvfP5p2FqB7FYHW/97gWxNi80SjtMObe7qiqloCfk6E=
Subject key identifier:   D7:7A:C3:84:7D:6E:97:EE:A2:D6:61:73:C9:03:1D:E6:58:53:D6:77
Certificate issuer:       /CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Certificate serial:       49705400C54A4BC7D0B55091963A79679BC484D9
Authority key identifier: 86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3234203d3e20323731363730.roa
Signing time:             Thu 02 Nov 2023 15:42:17 +0000
ROA not before:           Thu 02 Nov 2023 15:37:17 +0000
ROA not after:            Thu 31 Oct 2024 15:42:17 +0000
asID:                     271670
IP address blocks:        200.150.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:70:54:00:c5:4a:4b:c7:d0:b5:50:91:96:3a:79:67:9b:c4:84:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
        Validity
            Not Before: Nov  2 15:37:17 2023 GMT
            Not After : Oct 31 15:42:17 2024 GMT
        Subject: CN=D77AC3847D6E97EEA2D66173C9031DE65853D677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:bc:36:4c:c4:b8:48:bb:18:49:e0:a0:17:
                    c4:73:bf:0d:3e:2a:7b:f9:de:2a:be:ef:44:bd:70:
                    b6:56:c0:18:ad:7d:ea:b0:b8:54:33:8d:a4:0f:3c:
                    cd:87:50:ca:00:5c:ad:31:18:57:b5:0a:90:e8:31:
                    74:07:37:b3:02:e8:43:0b:48:c4:49:77:b0:52:18:
                    4f:9f:77:83:31:2b:b6:7c:a9:8c:30:f1:6a:50:d1:
                    17:4d:36:13:d0:64:f7:54:70:43:d8:c9:e3:8c:7d:
                    a9:89:ca:70:1b:84:b2:51:99:a9:1d:62:b8:5e:20:
                    2b:91:08:fa:62:49:b7:f7:23:b7:38:f0:96:f0:ac:
                    45:cb:94:aa:bd:df:63:b0:0c:c0:0e:7f:66:55:3f:
                    15:c2:c9:6a:f1:33:a5:64:e1:38:0a:83:76:23:3f:
                    23:13:3c:38:c9:e7:fb:c5:09:89:81:c6:29:a5:1a:
                    12:c0:37:77:37:80:7e:7e:9f:69:7e:7f:04:92:06:
                    9a:36:bd:c7:a8:61:bb:57:65:58:81:d1:d1:26:c5:
                    73:4b:63:cb:47:ec:18:c8:46:c2:c3:50:5f:02:b1:
                    18:af:a2:c3:8a:c2:29:8a:eb:7c:a2:6d:3c:af:73:
                    cc:0f:d4:e8:ed:19:d7:f5:62:3a:bf:2c:81:a6:4c:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:C3:84:7D:6E:97:EE:A2:D6:61:73:C9:03:1D:E6:58:53:D6:77
            X509v3 Authority Key Identifier:
                keyid:86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/3230302e3135302e3235342e302f32342d3234203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:fa:ff:7b:70:fe:32:2b:e4:9b:bb:1b:24:70:13:eb:47:
         39:94:cb:04:52:03:00:ae:47:b7:b8:d3:fd:05:c7:e6:e5:f2:
         21:a7:db:92:09:a0:48:21:13:a8:da:e3:47:79:8d:27:03:5c:
         8c:c6:fb:c0:a3:81:5f:84:62:89:82:2b:92:ae:a0:88:0b:fa:
         00:3c:33:99:16:13:26:2e:b5:7c:ad:7a:c7:06:b5:d4:05:b6:
         f5:96:85:93:a8:d9:c3:07:32:c3:3e:13:e8:fa:19:5d:a4:28:
         4d:a8:a3:bf:02:4b:0d:56:49:e7:76:3c:6e:bc:10:79:31:12:
         15:b9:d2:ed:8d:7e:32:aa:89:2c:f0:1b:aa:3f:1c:ae:e0:35:
         07:d8:d5:6f:e6:0e:67:59:a2:ed:68:53:93:f9:81:05:dc:ad:
         57:0c:01:43:2c:90:89:b7:38:b4:f8:58:40:2e:bc:31:52:93:
         29:08:a5:90:50:f5:65:c0:7d:be:3a:80:3e:e9:ad:e5:bf:4e:
         7d:7e:cb:9c:91:67:f1:03:5a:ac:8f:4f:53:aa:53:0e:92:2b:
         0b:34:6f:13:63:d2:44:d1:ff:85:97:cc:64:0a:a8:6c:5d:99:
         8d:ee:7f:7f:6a:88:a6:e8:ac:6b:79:10:03:40:37:55:59:48:
         c7:ee:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org