Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3230302e362e33362e302f32322d3332203d3e20323632333737.roa
File:                     3230302e362e33362e302f32322d3332203d3e20323632333737.roa (raw, json)
Hash identifier:          q2qWZBN95uA5Mn7Kmn9qVsHrnNs8DJc2MDbpaxnFGSE=
Subject key identifier:   C1:50:C8:34:54:20:37:E2:FD:42:A4:EE:56:ED:C6:F3:7B:0A:94:7B
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       642A8C976A1B708DF10BCCC11037A1D25530E9DA
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3230302e362e33362e302f32322d3332203d3e20323632333737.roa
Signing time:             Fri 02 Jun 2023 12:19:50 +0000
ROA not before:           Fri 02 Jun 2023 12:14:50 +0000
ROA not after:            Fri 31 May 2024 12:19:50 +0000
asID:                     262377
IP address blocks:        200.6.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:8c:97:6a:1b:70:8d:f1:0b:cc:c1:10:37:a1:d2:55:30:e9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  2 12:14:50 2023 GMT
            Not After : May 31 12:19:50 2024 GMT
        Subject: CN=C150C834542037E2FD42A4EE56EDC6F37B0A947B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:05:d6:06:0b:56:92:dd:a3:ec:b8:08:30:
                    8d:37:c6:73:61:4c:56:e8:f2:00:44:ec:00:08:b6:
                    d0:31:cd:45:10:4f:97:52:b2:62:a6:c9:64:4d:c0:
                    48:d4:8d:48:48:8a:41:a4:12:ed:a3:d4:db:bd:d7:
                    4d:15:99:2d:84:ba:2b:23:aa:23:45:81:03:59:fd:
                    0c:c8:bb:ee:33:89:1e:4a:6d:b3:d6:90:05:58:c3:
                    da:34:76:2e:a6:d3:09:7a:58:f7:b6:e3:36:a8:e7:
                    c7:bb:27:5d:98:cc:be:53:2c:b3:d8:f3:71:87:7c:
                    8a:bd:0c:db:67:eb:c8:8f:c2:e7:21:49:55:37:db:
                    1e:e5:d4:1e:e0:05:0e:26:d5:98:77:da:a9:dd:26:
                    85:66:61:dc:28:d4:f5:ab:79:6a:04:99:5d:f6:c0:
                    67:9d:6f:af:55:4f:70:a2:3d:f9:75:a6:69:31:11:
                    5c:a4:f5:89:c6:71:3c:e0:f1:ac:c1:85:17:43:3b:
                    0a:ab:cd:9b:0f:d5:d3:70:d8:f6:cb:c0:e5:d3:b1:
                    90:03:16:c8:95:78:eb:cc:47:ff:99:5a:8f:0e:cd:
                    d4:ea:71:da:e3:3b:1b:41:01:05:e6:30:4e:8f:4f:
                    c8:03:eb:de:3c:24:a5:ba:8c:41:a8:de:2d:78:c6:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:C8:34:54:20:37:E2:FD:42:A4:EE:56:ED:C6:F3:7B:0A:94:7B
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3230302e362e33362e302f32322d3332203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:09:2e:d9:37:bd:cb:c5:79:3c:ba:f4:84:80:cc:ee:36:
         6f:57:1e:cf:cd:13:7f:81:44:36:10:e6:36:18:fd:fa:49:56:
         7b:a4:39:af:44:45:80:99:28:29:7a:f5:bc:77:41:96:69:58:
         cf:4d:28:c5:e0:c6:25:05:e6:1e:8c:dd:40:df:b8:5e:cc:5d:
         3b:bd:ed:18:ff:ac:99:e4:f8:f7:22:90:32:a9:75:72:b4:7b:
         8d:66:0d:c0:3b:6c:52:b0:c4:e3:9a:6d:f4:0c:be:ba:eb:f7:
         32:37:e0:d0:c4:9e:30:9f:82:95:c0:b5:1b:17:ec:f2:78:7a:
         cb:c1:e9:8e:2d:a5:50:06:f7:b4:c3:ac:05:ef:d5:cb:44:80:
         ab:7c:4d:59:0e:7d:e4:60:69:88:15:eb:16:ea:fd:d1:b7:2e:
         96:ba:e2:73:c4:5d:d4:3b:3f:89:d1:6b:6c:7f:a0:21:9f:a8:
         f6:63:c8:db:03:56:55:b6:44:93:48:96:e4:e6:92:21:bd:f5:
         fc:dc:1b:ad:5a:9a:38:d1:65:93:63:8b:38:c0:4f:c5:68:c9:
         56:f8:d6:e2:3c:2d:61:38:30:c4:dd:4e:ea:f1:0a:19:85:8f:
         50:ab:5c:f5:7c:6b:8a:81:19:3e:15:05:93:de:cb:8a:d9:e8:
         ca:22:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org