Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
File:                     3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (raw, json)
Hash identifier:          Zx+09pC4o+uMo9kGyW2mUBgK5xf5p71uO9ywK5vvT/Q=
Subject key identifier:   03:9F:08:48:B2:E0:8D:4B:A4:35:CE:B6:58:4C:66:DE:07:0A:3A:78
Certificate issuer:       /CN=273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB
Certificate serial:       1DF9B3A54AFF8CF1E4F96B80E3D1C1FCC593262E
Authority key identifier: 27:3C:9E:F9:6A:99:17:BB:D4:A1:8D:BA:49:5C:4C:70:7A:8A:C9:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
Signing time:             Fri 05 Apr 2024 21:00:17 +0000
ROA not before:           Fri 05 Apr 2024 20:55:17 +0000
ROA not after:            Fri 04 Apr 2025 21:00:17 +0000
asID:                     263516
IP address blocks:        200.9.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:b3:a5:4a:ff:8c:f1:e4:f9:6b:80:e3:d1:c1:fc:c5:93:26:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB
        Validity
            Not Before: Apr  5 20:55:17 2024 GMT
            Not After : Apr  4 21:00:17 2025 GMT
        Subject: CN=039F0848B2E08D4BA435CEB6584C66DE070A3A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:68:dd:99:98:64:82:99:8e:46:0a:9a:49:
                    9e:75:7e:4f:fd:34:fc:fd:cc:62:96:88:b6:77:b7:
                    d1:57:79:ea:c6:39:e6:e8:0a:65:61:f4:87:9d:44:
                    67:d3:6c:23:07:38:ee:39:90:b5:b3:bc:f9:96:35:
                    96:10:66:12:3a:3f:23:4e:d4:19:ac:43:9b:71:92:
                    e9:38:c4:24:6e:b2:41:2a:8e:f0:f9:2b:f9:57:71:
                    ec:67:23:ee:fa:5b:31:42:bb:fb:73:f9:c7:d5:14:
                    38:dc:c8:ee:a6:ea:e1:56:c4:f3:e7:0e:eb:dd:65:
                    10:f2:be:dd:17:57:39:37:58:35:a6:31:29:af:4b:
                    a6:88:69:9c:98:92:0e:98:44:6e:8f:fb:20:e1:9f:
                    b1:d0:69:93:52:b9:3b:b5:eb:c7:c9:7f:2e:c6:f3:
                    95:b0:c4:27:ee:4f:24:80:18:b5:29:7b:f5:3d:f5:
                    07:fa:66:82:fe:5b:af:3a:f7:62:28:82:9e:c8:cf:
                    19:6f:d1:84:e0:82:2b:5f:e3:89:5b:12:b3:74:e9:
                    7b:15:fe:49:89:2d:34:23:18:79:79:2b:76:68:e7:
                    a6:9f:63:31:cf:4c:5e:ed:ab:00:2c:a5:aa:a8:63:
                    5a:05:8d:2c:8a:89:27:8a:4f:8a:16:0b:96:d9:18:
                    ce:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:08:48:B2:E0:8D:4B:A4:35:CE:B6:58:4C:66:DE:07:0A:3A:78
            X509v3 Authority Key Identifier:
                keyid:27:3C:9E:F9:6A:99:17:BB:D4:A1:8D:BA:49:5C:4C:70:7A:8A:C9:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/273C9EF96A9917BBD4A18DBA495C4C707A8AC9EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/0/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:b4:ab:19:b0:8a:5d:10:ea:a9:0e:0b:d2:9e:89:f9:4c:
         a5:f3:4f:d9:c9:5e:b7:1c:e0:2c:87:e0:54:a5:f7:c0:73:47:
         88:bd:40:37:cd:3d:51:70:dc:60:89:1d:c0:58:14:5d:cc:e0:
         e2:d8:da:64:c0:3a:2a:ab:4e:22:e1:2d:91:e6:e5:f2:13:a2:
         d5:04:5c:71:66:b4:87:d0:9b:65:76:35:ba:d2:9d:83:03:f7:
         1b:33:57:dd:da:ee:c9:23:11:07:bc:ef:06:bf:84:84:d5:9d:
         1e:4a:c4:21:5f:78:43:f8:8c:6b:b3:ab:41:d3:27:da:93:f0:
         6d:b5:c9:b0:d7:1c:45:6c:41:c0:72:44:4e:aa:6f:fb:71:81:
         49:c9:ee:28:35:df:36:a2:3a:b6:84:e5:5c:70:9d:70:e4:80:
         b0:38:68:ad:5c:e2:db:a3:1a:1f:a4:47:fd:86:4b:9f:68:71:
         07:4f:27:c3:36:4e:c0:2f:aa:4d:a2:a7:9f:d7:79:2a:24:f9:
         5d:7a:4d:2c:3d:06:fa:24:4e:a8:e9:df:27:de:fe:75:64:73:
         55:ef:c3:59:de:f7:ba:04:0b:3d:60:90:f5:36:5c:df:fa:65:
         f6:88:47:6b:d6:77:2b:cf:2b:bf:f2:22:50:f8:e1:da:0a:59:
         5d:84:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org