Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/3230302e37312e37362e302f32322d3234203d3e203631353939.roa
File:                     3230302e37312e37362e302f32322d3234203d3e203631353939.roa (raw, json)
Hash identifier:          w/CwQk+3lYWcSO0vmzUgPwm4YKUZB1iWTNNfw4UeivM=
Subject key identifier:   21:8D:18:EA:8C:BC:E5:38:44:43:5A:37:F2:50:16:02:95:EE:10:6F
Certificate issuer:       /CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
Certificate serial:       654B6020C74D5D0FBE6BD8B9E609ABD2078433C9
Authority key identifier: 46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/3230302e37312e37362e302f32322d3234203d3e203631353939.roa
Signing time:             Sun 29 Oct 2023 03:08:14 +0000
ROA not before:           Sun 29 Oct 2023 03:03:14 +0000
ROA not after:            Sun 27 Oct 2024 03:08:14 +0000
asID:                     61599
IP address blocks:        200.71.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:60:20:c7:4d:5d:0f:be:6b:d8:b9:e6:09:ab:d2:07:84:33:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7
        Validity
            Not Before: Oct 29 03:03:14 2023 GMT
            Not After : Oct 27 03:08:14 2024 GMT
        Subject: CN=218D18EA8CBCE53844435A37F250160295EE106F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:11:1d:df:cb:c8:78:dc:e5:33:56:60:bb:
                    87:b6:0b:af:78:be:6b:61:6b:97:3d:6d:70:2b:02:
                    90:e5:77:3c:f0:72:35:82:57:83:dd:bf:6b:fa:c7:
                    07:36:cf:05:6b:8f:d2:28:9b:55:3a:59:e9:5b:03:
                    3d:f4:1f:80:46:05:81:8c:b1:01:a3:36:aa:9a:a2:
                    61:ae:d7:b2:75:cf:c9:ab:78:00:d2:96:cd:02:d8:
                    34:35:4f:ff:92:52:26:26:21:2c:d1:18:3b:79:1d:
                    8b:78:77:00:26:55:dd:17:84:4a:f7:3b:72:18:93:
                    73:a2:73:33:c2:db:d2:e3:10:fd:59:e6:82:83:a8:
                    ce:72:e4:4d:69:ef:bd:46:36:cb:11:0b:d1:cf:da:
                    1f:34:d3:70:98:1b:55:94:b5:b8:cb:a4:ec:c5:00:
                    fa:9a:8c:8a:db:eb:8f:b4:81:fa:38:95:c1:1c:bd:
                    78:4b:b1:25:2f:30:fe:9c:84:98:57:fb:b5:0d:6b:
                    c6:3b:3c:fa:ee:8d:13:a7:57:60:6d:1f:7c:94:df:
                    1d:bf:d3:6a:8a:3a:71:ba:3d:9e:6f:1a:c2:2f:e0:
                    8d:f8:2e:56:32:6c:72:8a:24:42:c7:73:a2:d9:1a:
                    60:9a:1e:fe:06:73:db:14:c8:bb:8d:67:38:c0:a5:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:18:EA:8C:BC:E5:38:44:43:5A:37:F2:50:16:02:95:EE:10:6F
            X509v3 Authority Key Identifier:
                keyid:46:F0:DB:4A:B3:9C:E5:9E:FB:5E:FE:6E:24:B1:11:F0:09:82:C1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/46F0DB4AB39CE59EFB5EFE6E24B111F00982C1D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/3230302e37312e37362e302f32322d3234203d3e203631353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2f:6a:68:50:32:7f:ed:4e:34:be:26:0e:ac:49:49:5c:1d:
         e2:8d:1a:5c:1e:aa:87:8c:7e:37:92:34:4f:f9:16:73:28:b2:
         37:23:f4:ce:a3:f7:8b:6c:6e:f0:7a:34:08:d1:a1:0f:f8:5d:
         83:76:3d:d9:01:4e:ce:9e:90:e9:59:7e:a6:24:69:fd:b6:64:
         74:56:68:dd:98:4d:85:48:66:29:10:27:b1:0f:4c:ec:ef:e0:
         b8:62:e4:02:3c:9e:4d:ff:3e:13:0f:b6:78:66:e5:ba:9d:31:
         f5:6d:b3:67:41:62:17:83:4b:cd:29:92:0f:48:1b:78:62:1c:
         97:4e:3d:6f:25:db:87:71:98:17:cc:c5:d6:5b:1d:c1:7d:cd:
         9b:e3:0d:95:ed:36:6f:c9:dd:01:0f:77:cd:aa:9c:2c:ac:73:
         db:d3:a9:8d:8d:b8:01:bb:51:3c:f9:eb:d3:f1:47:1f:72:bd:
         31:1e:f6:dc:4e:ea:06:4f:46:21:bd:86:a5:b6:0e:cc:fb:83:
         c2:f3:96:64:09:a9:ce:40:6d:e1:23:76:a2:e8:97:11:78:f1:
         e1:97:d8:25:86:8f:2c:64:aa:1b:99:4f:ac:c5:d9:bd:f2:98:
         6a:2f:b8:16:71:62:c6:75:ed:c9:ba:97:59:e5:8a:13:ff:72:
         be:49:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org