Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa
File:                     3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa (raw, json)
Hash identifier:          BPMJAyYNA72A/N8hJGq9JqsRvuWXNKay/MpcqDpQLlA=
Subject key identifier:   B3:49:D3:B2:51:60:4C:27:74:56:25:67:07:89:81:A8:2C:AB:0B:48
Certificate issuer:       /CN=1F2E84748355FBB127446FF91925D695C155F607
Certificate serial:       0A97C590FA8F90E791CA2FBBD03F69EADFA15E99
Authority key identifier: 1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa
Signing time:             Tue 30 May 2023 19:08:47 +0000
ROA not before:           Tue 30 May 2023 19:03:47 +0000
ROA not after:            Tue 28 May 2024 19:08:47 +0000
asID:                     270756
IP address blocks:        200.39.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:97:c5:90:fa:8f:90:e7:91:ca:2f:bb:d0:3f:69:ea:df:a1:5e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2E84748355FBB127446FF91925D695C155F607
        Validity
            Not Before: May 30 19:03:47 2023 GMT
            Not After : May 28 19:08:47 2024 GMT
        Subject: CN=B349D3B251604C2774562567078981A82CAB0B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:43:bc:78:19:66:8f:7c:36:13:55:89:be:
                    a1:69:07:d0:f3:02:ea:6c:25:f3:24:62:93:1e:22:
                    7d:46:5e:0d:17:e5:c0:8a:1d:2f:4c:37:9a:85:8c:
                    32:bf:10:f2:3f:35:3f:f5:71:3b:78:ba:99:fd:32:
                    7f:09:dd:70:a1:9e:73:5a:07:e6:48:2f:f3:5f:f3:
                    d2:24:a5:c8:6c:93:c2:fa:38:0f:8b:90:05:34:61:
                    54:19:96:fc:b3:48:cb:fb:7b:68:28:6d:03:a3:7e:
                    39:3f:49:79:90:0e:df:da:cd:02:ae:3c:53:54:63:
                    bb:b7:dc:d7:e7:55:2d:eb:fd:0a:7e:4e:dc:b6:05:
                    98:3e:43:e4:65:81:d7:e0:25:2c:e5:a6:c7:d7:c7:
                    cc:6a:2c:57:72:67:f6:1a:5b:f8:5b:36:63:e0:7e:
                    ab:c8:a2:ed:c0:b8:03:91:93:8d:b4:5d:6c:78:d2:
                    21:c1:76:28:d9:b7:f6:71:b9:71:f0:9d:5c:84:b9:
                    6a:98:b3:58:cf:7d:0c:81:b9:fe:3e:b2:d1:6d:27:
                    48:ea:53:0b:05:4a:8a:4b:a6:e3:21:2f:a7:0f:1a:
                    b0:c9:27:a5:42:69:61:00:b1:b6:1e:f7:ab:ad:c3:
                    ab:b4:f5:c8:46:4e:dc:17:6d:be:6d:0c:ab:64:21:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:49:D3:B2:51:60:4C:27:74:56:25:67:07:89:81:A8:2C:AB:0B:48
            X509v3 Authority Key Identifier:
                keyid:1F:2E:84:74:83:55:FB:B1:27:44:6F:F9:19:25:D6:95:C1:55:F6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/1F2E84748355FBB127446FF91925D695C155F607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2E84748355FBB127446FF91925D695C155F607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TWTqG2PWhBJpHoQwv7TTbcekXGDbKHRvNhNPi7wfb26/0/3230302e33392e3132382e302f32322d3234203d3e20323730373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f0:22:1c:b0:cb:c5:ac:75:2e:6c:61:0e:14:ee:ae:78:59:43:
         58:4f:3d:72:20:71:40:ac:42:e8:0b:6a:20:2f:bb:b5:51:1a:
         ed:08:bd:ef:d0:69:5b:a9:96:c6:ac:70:b9:d9:ed:2b:96:20:
         08:9b:7a:8f:f9:8c:2b:c4:cb:b9:82:31:6d:60:c5:ec:08:6b:
         3d:08:93:43:b4:aa:36:dd:db:13:f9:d0:a4:f1:3b:74:47:f0:
         2b:d6:69:2f:87:27:bd:34:1f:65:fe:b2:ae:44:4b:e0:9d:e1:
         c2:aa:f9:e8:c9:d1:8c:d0:51:ed:53:01:ca:30:60:a5:a4:e9:
         3d:54:72:6b:bc:e8:6e:7f:50:1d:5d:52:67:7f:67:8d:ed:5c:
         a2:f3:ad:2a:21:bf:f1:45:a9:79:9a:fc:8a:31:00:0e:4c:3b:
         d5:e6:e3:7b:92:62:79:3a:11:81:bf:1a:a0:e1:bc:7d:68:3b:
         ac:39:8a:33:5f:f1:3b:03:5a:f3:e0:a5:2b:5d:3b:1e:d0:81:
         8b:62:4c:5b:40:bb:fa:b0:b0:40:47:66:31:20:a8:10:c8:e6:
         01:76:8d:09:bd:7e:a5:62:a0:ed:88:39:f3:5e:0c:6d:70:00:
         d7:57:94:0d:9a:6b:bb:17:38:7c:23:4a:cb:4d:cb:9f:33:3d:
         02:d6:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org