Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138322e302f32342d3234203d3e20323731363433.roa
File:                     3230302e3139342e3138322e302f32342d3234203d3e20323731363433.roa (raw, json)
Hash identifier:          ud23c8QP1RGUmUhRY1inu2DqFzX4Vqt9ZyvF6vOWEI0=
Subject key identifier:   CF:CE:A4:A1:32:69:56:B8:95:64:80:46:30:85:8D:6D:60:2E:9C:7A
Certificate issuer:       /CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
Certificate serial:       3FCB7F21A89E0FE439500A074D5D4F7216581AE6
Authority key identifier: A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138322e302f32342d3234203d3e20323731363433.roa
Signing time:             Tue 24 Oct 2023 04:37:20 +0000
ROA not before:           Tue 24 Oct 2023 04:32:20 +0000
ROA not after:            Tue 22 Oct 2024 04:37:20 +0000
asID:                     271643
IP address blocks:        200.194.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cb:7f:21:a8:9e:0f:e4:39:50:0a:07:4d:5d:4f:72:16:58:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228
        Validity
            Not Before: Oct 24 04:32:20 2023 GMT
            Not After : Oct 22 04:37:20 2024 GMT
        Subject: CN=CFCEA4A1326956B89564804630858D6D602E9C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:54:ff:d7:2e:9b:92:0d:74:a6:9d:e8:04:
                    a2:5a:f1:3f:34:54:8e:1b:d2:b4:42:de:28:2c:51:
                    1e:9b:71:79:8b:46:90:60:f6:4f:4c:f7:41:f2:5a:
                    ae:0d:91:8b:de:ec:ce:0a:29:c6:fa:61:40:b4:d7:
                    0f:44:26:67:51:72:65:fa:b7:89:c3:a8:ea:9a:99:
                    04:aa:98:26:72:df:07:9e:66:04:a2:52:4c:46:91:
                    7b:57:ef:55:f8:bb:8a:95:f0:32:51:f8:27:e0:c8:
                    aa:5c:65:ee:c8:96:bd:e8:9e:ba:4a:4a:6d:12:76:
                    2a:ac:89:e4:74:a3:e0:f5:92:d0:f6:3a:e9:fa:63:
                    59:21:39:e1:17:4d:58:fb:95:f1:ee:81:03:86:22:
                    80:8a:f0:d2:7a:b3:83:79:88:ce:b3:aa:cc:79:11:
                    18:72:70:8f:a1:52:80:b3:1f:4f:4b:3f:a6:07:37:
                    c2:e1:60:b5:13:a7:d0:5b:d8:7b:08:1d:97:02:e2:
                    85:3b:e1:ff:67:bc:d2:28:7b:ed:71:f9:96:9e:72:
                    53:fe:d1:27:2d:57:7f:d5:ed:a4:60:a6:06:75:14:
                    51:8c:0e:82:f5:b9:5a:3a:a4:40:5c:55:b4:7c:61:
                    89:c7:57:ff:d0:ed:7f:b0:29:4e:81:5a:ea:77:c5:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:A4:A1:32:69:56:B8:95:64:80:46:30:85:8D:6D:60:2E:9C:7A
            X509v3 Authority Key Identifier:
                keyid:A5:AD:02:60:80:AD:9F:E5:5C:60:BE:DF:E7:4E:0C:A8:7D:7B:F2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5AD026080AD9FE55C60BEDFE74E0CA87D7BF228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138322e302f32342d3234203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:f9:71:b4:84:dd:92:f5:2b:73:13:4c:49:96:3f:19:4a:
         a2:4a:b2:3f:a7:b0:49:70:cf:69:5a:5b:a2:1f:f5:0a:88:d5:
         98:e6:6f:5e:d6:e4:e6:c3:17:2d:22:60:bc:9e:02:6e:d9:90:
         b2:22:4c:ac:f5:d4:1d:d7:9e:3f:3d:ce:42:d2:30:c1:59:4b:
         45:e4:fa:6c:2b:81:2b:ad:42:5d:62:72:f9:dc:77:79:ab:0e:
         d7:6a:d3:34:39:89:72:8b:56:13:e9:c9:94:b6:72:3d:e1:04:
         90:3a:2e:65:fb:08:37:fb:57:57:e1:40:04:7b:e8:a6:13:cf:
         6f:6f:fa:0a:dc:35:8c:8f:be:4a:ac:16:f9:51:a9:d6:e7:b1:
         f5:71:df:ce:a1:3a:fa:1c:e7:db:8a:75:04:12:fc:c9:f7:88:
         af:06:be:d9:9d:ca:df:f6:c3:68:15:68:44:5a:d2:1b:c4:56:
         29:5d:d3:04:af:ca:52:31:dc:38:6f:6e:4f:27:33:43:b9:66:
         f1:bc:c5:18:b8:7d:06:55:b4:75:85:ff:a0:c3:34:40:f9:d3:
         d7:13:dc:70:36:5e:5c:79:ac:7d:03:c7:b8:88:dd:f6:38:43:
         b4:c1:37:7c:4b:b5:a6:48:4b:e4:e5:b9:b8:00:3c:7b:df:8f:
         a6:bf:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org