Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4DLtebujAYLwhGmqdNYRnzhSqPk5cgAJH1hGj2iaHivM/0/3230302e3138392e31362e302f32302d3234203d3e203133373631.roa
File:                     3230302e3138392e31362e302f32302d3234203d3e203133373631.roa (raw, json)
Hash identifier:          zzZly0d0uFRd74XFMJL7zXGsvHIFms2cwKQ/yzbUu/w=
Subject key identifier:   EF:9B:3A:C6:30:18:42:97:C3:CF:C4:8F:86:1A:42:74:66:59:34:26
Certificate issuer:       /CN=9FD8AECD3F31A5655D1449CE20985F4DEAEE88C7
Certificate serial:       78ECCD759699DA69F58FE43B88314E9F2EB303A4
Authority key identifier: 9F:D8:AE:CD:3F:31:A5:65:5D:14:49:CE:20:98:5F:4D:EA:EE:88:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FD8AECD3F31A5655D1449CE20985F4DEAEE88C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4DLtebujAYLwhGmqdNYRnzhSqPk5cgAJH1hGj2iaHivM/0/3230302e3138392e31362e302f32302d3234203d3e203133373631.roa
Signing time:             Fri 03 Nov 2023 10:31:53 +0000
ROA not before:           Fri 03 Nov 2023 10:26:53 +0000
ROA not after:            Fri 01 Nov 2024 10:31:53 +0000
asID:                     13761
IP address blocks:        200.189.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ec:cd:75:96:99:da:69:f5:8f:e4:3b:88:31:4e:9f:2e:b3:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FD8AECD3F31A5655D1449CE20985F4DEAEE88C7
        Validity
            Not Before: Nov  3 10:26:53 2023 GMT
            Not After : Nov  1 10:31:53 2024 GMT
        Subject: CN=EF9B3AC630184297C3CFC48F861A427466593426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:0d:a4:4c:a7:ce:d1:a5:86:05:d5:cc:59:
                    2f:0b:6a:70:5e:6f:2b:b2:eb:d4:8d:bd:be:59:45:
                    8b:ce:fb:98:33:1b:8a:27:b0:86:df:80:6f:12:80:
                    9e:eb:b9:e2:33:04:68:1a:11:1c:ae:3f:98:bf:75:
                    51:7d:c6:ff:86:a4:e3:2d:e8:31:ff:40:f0:cf:d3:
                    32:8a:14:a0:ee:02:46:b6:ed:fa:29:fe:bb:dc:0c:
                    15:34:f1:09:78:86:a1:fc:93:82:4b:9e:28:3f:c6:
                    ae:f9:69:9f:28:ec:0d:b4:5f:55:9f:74:b0:1c:f6:
                    10:60:1b:aa:6b:9b:f2:0a:81:bb:c3:e5:9e:72:9a:
                    99:a2:eb:68:da:d5:ce:d9:8f:03:ac:9b:b1:1e:a7:
                    60:f1:37:56:f2:88:79:2d:34:62:e4:56:34:df:fb:
                    cd:82:4b:24:71:10:58:07:17:a0:03:fa:54:f5:35:
                    14:7d:d5:7c:f7:06:e4:61:6b:1e:8c:71:95:56:22:
                    cc:8c:2f:5c:eb:dd:e2:55:1e:61:aa:26:ea:38:96:
                    37:fd:51:9d:ca:75:14:25:f2:71:67:1d:c8:48:5d:
                    74:86:b1:2f:e8:dc:66:4e:27:3e:9e:b3:d4:b6:66:
                    76:3c:5f:0a:93:81:fe:21:8a:e2:03:54:6f:94:c9:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:3A:C6:30:18:42:97:C3:CF:C4:8F:86:1A:42:74:66:59:34:26
            X509v3 Authority Key Identifier:
                keyid:9F:D8:AE:CD:3F:31:A5:65:5D:14:49:CE:20:98:5F:4D:EA:EE:88:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4DLtebujAYLwhGmqdNYRnzhSqPk5cgAJH1hGj2iaHivM/0/9FD8AECD3F31A5655D1449CE20985F4DEAEE88C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FD8AECD3F31A5655D1449CE20985F4DEAEE88C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4DLtebujAYLwhGmqdNYRnzhSqPk5cgAJH1hGj2iaHivM/0/3230302e3138392e31362e302f32302d3234203d3e203133373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:c4:e4:13:c8:4f:23:37:0a:84:b2:7e:38:19:17:8a:b1:
         81:49:bb:32:09:01:a4:d7:e2:1c:d1:f2:93:f7:02:95:a7:1b:
         ad:e9:44:71:3c:c1:e2:91:69:c6:d4:ca:74:ea:2c:6a:38:df:
         db:4b:31:4c:1e:d0:ca:1a:d4:c2:10:59:40:9b:71:79:28:23:
         57:3b:98:eb:ba:c7:20:98:5c:54:d7:c3:49:4d:30:16:b3:33:
         05:22:8a:3b:2a:d9:41:a0:40:b5:75:e4:71:26:de:f3:68:73:
         cf:74:80:17:eb:53:4c:ce:90:07:0e:9b:2d:cd:bb:fa:a5:60:
         d6:db:75:44:2f:c1:83:4a:19:8d:0d:f2:04:3b:d7:f2:02:01:
         16:89:65:23:66:ad:00:91:44:1b:50:28:e2:ff:65:b9:0a:78:
         14:47:75:1b:f5:02:a6:08:a9:cd:0e:65:11:5b:59:64:9d:c2:
         16:8e:fd:c3:81:08:78:1f:d1:e6:b7:2f:c3:3d:77:af:cb:a2:
         99:75:97:f8:f4:6f:50:ff:e7:e5:70:8e:42:f3:e6:0f:5d:e5:
         bf:13:e3:96:ee:ff:0e:ca:b2:49:8e:9d:bb:a4:66:09:9e:5f:
         f1:4b:21:d6:98:29:32:99:62:b7:aa:40:84:f3:85:d8:f6:aa:
         ca:16:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:31 2024 by rpki-client on console-fra.rpki-client.org