Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137332e302f32342d3234203d3e203236363136.roa
File:                     3230302e3232392e3137332e302f32342d3234203d3e203236363136.roa (raw, json)
Hash identifier:          Lr9KqEdNv0M0VWgK0VloY9QnArteNv751XV022orH9Q=
Subject key identifier:   DE:41:6B:35:45:2B:CF:67:EB:CC:79:DC:6C:E6:7A:D3:7E:D6:F4:D1
Certificate issuer:       /CN=4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098
Certificate serial:       5AA444F8D182456BA944B0201B4965D88926DE5F
Authority key identifier: 4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137332e302f32342d3234203d3e203236363136.roa
Signing time:             Fri 12 Aug 2022 18:26:07 +0000
ROA not before:           Fri 12 Aug 2022 18:21:07 +0000
ROA not after:            Fri 11 Aug 2023 18:26:07 +0000
asID:                     26616
IP address blocks:        200.229.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:44:f8:d1:82:45:6b:a9:44:b0:20:1b:49:65:d8:89:26:de:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098
        Validity
            Not Before: Aug 12 18:21:07 2022 GMT
            Not After : Aug 11 18:26:07 2023 GMT
        Subject: CN=DE416B35452BCF67EBCC79DC6CE67AD37ED6F4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:9d:c4:64:7c:03:b1:61:55:84:fb:f0:78:
                    69:f0:7e:3b:bd:1f:36:19:4c:7a:9f:38:77:ce:ba:
                    be:91:1b:45:2e:43:29:70:86:bb:e1:99:3f:79:58:
                    a1:2a:b9:f0:e0:e3:7c:ab:5e:4e:d5:4b:de:10:ca:
                    b7:aa:fd:ae:3f:83:a5:70:ef:3e:9a:a5:dd:5a:66:
                    12:15:4d:bb:6e:e5:e4:e9:fd:c2:f6:e8:92:2c:fb:
                    01:10:cf:7e:0d:62:6d:53:96:bf:b0:f7:8e:19:e5:
                    73:ed:4a:68:80:91:4f:5c:4c:85:88:c2:66:34:f6:
                    d6:18:13:11:74:e5:5c:9b:4c:67:c0:40:3b:d7:39:
                    cc:37:5e:13:5b:89:b3:c0:8f:5b:3d:15:e0:b7:a9:
                    b8:76:ea:53:f2:c6:24:35:9a:57:98:1c:00:77:78:
                    54:2d:6c:3f:76:57:b8:e5:ba:73:c6:9a:78:a2:9b:
                    25:8e:91:eb:c9:9e:70:e7:2e:a8:6e:d1:c9:92:ca:
                    49:92:c3:57:fe:d1:40:9b:77:18:60:57:b2:42:cd:
                    e3:fe:f0:70:ff:81:23:76:96:02:4f:08:13:8f:3a:
                    e9:8e:91:66:c6:8e:2a:b7:c3:0c:46:2b:54:ee:9d:
                    bc:87:e9:1b:d6:07:1c:1e:f5:52:02:d8:45:cb:4b:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:6B:35:45:2B:CF:67:EB:CC:79:DC:6C:E6:7A:D3:7E:D6:F4:D1
            X509v3 Authority Key Identifier:
                keyid:4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137332e302f32342d3234203d3e203236363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7c:08:0c:a9:8f:76:2c:e7:43:2f:df:cb:3c:96:68:eb:c4:
         9e:46:2d:72:be:a3:36:12:c0:f3:d0:e9:e1:38:81:20:ee:43:
         33:9d:42:3b:7f:ea:58:44:4b:09:d6:ec:cf:d7:32:e0:cc:82:
         13:a1:64:f1:c8:96:54:1f:97:11:e7:7a:bc:48:05:0f:c7:df:
         d7:d1:19:7c:4f:92:5c:c3:6d:14:10:41:3d:58:fb:bd:12:7c:
         84:13:98:90:5a:65:a0:46:ad:a9:67:98:a9:1d:fa:de:94:c8:
         aa:8e:f3:64:d3:99:ad:6f:06:0c:aa:71:ed:15:d9:a1:5d:65:
         07:64:14:29:3c:0a:63:14:60:70:07:db:c1:ea:ae:1f:e1:ad:
         16:9d:b9:76:ee:dc:d4:4e:cf:bd:b6:fb:70:26:64:e3:33:2a:
         ea:18:e4:21:d8:10:9b:26:4e:a7:e3:ed:b2:0c:42:12:bc:01:
         2b:ea:43:97:ca:2b:dd:2b:b8:1a:a7:83:03:8c:03:46:d6:f0:
         c7:5f:30:97:35:4c:cb:1a:af:45:f7:31:ce:98:12:b8:25:eb:
         b7:3e:91:c0:79:e4:d4:65:ec:75:15:d8:7e:3c:51:95:42:c4:
         b0:86:4f:85:bb:ba:da:25:c6:8b:5d:e8:d0:64:9d:23:30:cb:
         58:2e:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org