Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234312e302f32342d3234203d3e20323730363134.roa
File:                     3230302e3231352e3234312e302f32342d3234203d3e20323730363134.roa (raw, json)
Hash identifier:          3b4yJVnGtBZ2SqNFRaTOs7Ex2rLQiarRuddPbHxX7r0=
Subject key identifier:   DF:72:8A:B6:A1:2B:A2:5F:BC:96:78:D5:57:09:9E:1D:F4:EA:B2:94
Certificate issuer:       /CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
Certificate serial:       083352FF7246FEB02DCF01F7BA18884AC0025DC3
Authority key identifier: 86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234312e302f32342d3234203d3e20323730363134.roa
Signing time:             Tue 23 Apr 2024 19:21:21 +0000
ROA not before:           Tue 23 Apr 2024 19:16:21 +0000
ROA not after:            Tue 22 Apr 2025 19:21:21 +0000
asID:                     270614
IP address blocks:        200.215.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:33:52:ff:72:46:fe:b0:2d:cf:01:f7:ba:18:88:4a:c0:02:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8688B4FDDDBEB800A5969D7ADEDCD084034F4906
        Validity
            Not Before: Apr 23 19:16:21 2024 GMT
            Not After : Apr 22 19:21:21 2025 GMT
        Subject: CN=DF728AB6A12BA25FBC9678D557099E1DF4EAB294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7e:dc:8b:11:a4:02:62:39:ce:a7:bd:7b:46:
                    69:5e:68:c3:c1:38:2a:d7:1c:c0:94:a9:98:da:73:
                    70:57:8d:b3:4a:24:c5:eb:a8:39:90:18:a1:8c:42:
                    be:4f:b4:db:11:ea:99:e6:29:00:57:26:ae:e6:7a:
                    92:b8:7e:1c:09:f4:1d:d2:53:b9:3d:b1:4b:bc:fe:
                    ff:7b:78:61:78:34:0c:4e:a0:27:63:ac:87:fc:13:
                    12:2f:e3:68:b7:f0:6e:1e:b6:10:78:56:a8:3c:3b:
                    5a:32:ee:50:86:03:ef:7a:5a:5c:8e:44:72:5c:20:
                    fd:74:95:58:b7:c9:aa:99:06:83:5d:01:89:5e:98:
                    36:9b:47:27:7e:31:86:fc:62:75:65:88:4d:cb:11:
                    8b:bb:c5:62:f5:54:99:5f:b2:0b:10:6a:d6:38:2f:
                    71:50:97:94:01:30:07:a3:2b:c0:55:ef:3a:4f:ff:
                    c2:49:7c:32:7e:7b:6a:02:02:04:01:6d:ee:f8:7a:
                    da:3d:97:bb:46:0a:3a:74:eb:60:b1:6d:62:48:2c:
                    47:86:a1:3d:19:06:77:4b:73:1e:ec:87:54:c1:fc:
                    31:d4:a7:de:94:7b:b5:d3:36:b2:ae:73:6c:b7:b9:
                    6d:50:9f:6e:3f:06:6d:82:3b:93:b4:c9:39:19:6e:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:72:8A:B6:A1:2B:A2:5F:BC:96:78:D5:57:09:9E:1D:F4:EA:B2:94
            X509v3 Authority Key Identifier:
                keyid:86:88:B4:FD:DD:BE:B8:00:A5:96:9D:7A:DE:DC:D0:84:03:4F:49:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8688B4FDDDBEB800A5969D7ADEDCD084034F4906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FsHYPbVJBKvd2wf55jUHYa8v2PHjN5Cj8W62KyAwL3p/0/3230302e3231352e3234312e302f32342d3234203d3e20323730363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:45:cd:b0:fb:44:c8:4d:3a:5b:92:f7:df:49:cc:bf:18:
         95:39:69:21:3d:34:ba:08:70:d8:31:d8:04:6c:ca:e2:a9:1e:
         98:63:2f:c5:4b:a9:38:06:40:74:26:15:39:26:fd:70:79:f2:
         62:4f:71:ec:6a:31:49:54:41:49:3c:c4:9b:3e:d5:bb:e9:07:
         54:5a:83:2e:29:0a:82:17:46:fd:aa:30:0b:41:63:67:d9:46:
         1e:62:63:76:f8:f6:3f:e9:8e:b3:1d:e6:52:b9:c7:83:4b:fb:
         cf:70:e3:44:4e:7a:1e:5e:bb:28:65:b6:4a:34:15:96:bb:17:
         37:3a:64:35:28:25:90:7b:80:c8:e7:38:8c:de:fe:9f:ae:be:
         70:54:de:b5:75:e3:2c:76:1f:d7:b1:51:74:55:f3:4b:f9:2a:
         78:30:2d:86:97:eb:a7:a3:8b:37:9f:70:55:5d:02:44:b4:e5:
         a5:6a:d4:d1:fa:37:52:eb:3d:7f:41:2c:52:ce:37:ad:bc:c3:
         fa:9d:e7:b7:ae:23:52:d4:b6:75:a8:9b:34:48:bc:8f:d7:5f:
         76:f0:64:4d:af:d1:4f:0b:e7:d9:db:b9:2c:15:a2:d2:99:99:
         69:2d:ea:ff:23:0e:17:ad:e4:fc:06:f3:20:73:e6:15:15:da:
         fa:35:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org