Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137342e302f32342d3234203d3e203236363136.roa
File:                     3230302e3232392e3137342e302f32342d3234203d3e203236363136.roa (raw, json)
Hash identifier:          7XJzcGeWKwgV4uaK6ZZdeMtsHHpSzYmd/jYg0AyTEyE=
Subject key identifier:   D9:BD:F4:2A:B7:E1:1A:20:FA:B1:C7:42:E0:85:1B:6E:B2:D4:A8:BC
Certificate issuer:       /CN=4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098
Certificate serial:       69521F50168329A0BC6AC3CC4376659CD6A68AA7
Authority key identifier: 4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137342e302f32342d3234203d3e203236363136.roa
Signing time:             Fri 12 Aug 2022 18:26:13 +0000
ROA not before:           Fri 12 Aug 2022 18:21:13 +0000
ROA not after:            Fri 11 Aug 2023 18:26:13 +0000
asID:                     26616
IP address blocks:        200.229.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:52:1f:50:16:83:29:a0:bc:6a:c3:cc:43:76:65:9c:d6:a6:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098
        Validity
            Not Before: Aug 12 18:21:13 2022 GMT
            Not After : Aug 11 18:26:13 2023 GMT
        Subject: CN=D9BDF42AB7E11A20FAB1C742E0851B6EB2D4A8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:bf:95:aa:71:eb:26:70:aa:96:3c:28:b5:
                    ac:e9:e1:78:cc:d1:80:ec:f4:41:b6:55:e0:4d:f4:
                    10:d6:22:43:36:aa:61:92:4c:cc:20:2a:97:67:51:
                    f4:e2:fc:f2:37:59:8c:8f:81:14:a3:4f:77:d7:33:
                    35:39:b3:1f:0f:24:c4:59:f5:71:c8:f8:32:19:43:
                    d9:77:46:3b:44:ad:77:4f:df:b6:19:26:f1:95:07:
                    7c:e2:be:0f:36:79:cc:30:02:4c:b1:26:e9:41:7e:
                    91:f0:b3:17:2e:11:52:2b:70:80:d0:64:13:27:42:
                    37:96:8c:08:f4:13:c7:83:8d:e4:37:56:cb:a2:06:
                    58:79:04:3b:ed:cc:5f:5d:db:ac:dc:d5:04:92:51:
                    05:cf:45:e6:29:90:5e:1e:88:bb:cf:bf:1f:b6:76:
                    44:d0:33:87:9e:5f:e0:e1:63:fa:04:7d:af:09:c0:
                    cb:2d:ad:d3:33:6f:9f:c2:09:c2:80:a0:75:3d:16:
                    d3:05:fd:b7:8c:8b:d4:4c:aa:92:20:e7:3f:20:e0:
                    52:5c:cf:dc:a4:9d:3b:b6:20:30:b1:da:be:46:d0:
                    d6:f4:f7:d6:e9:a5:93:af:b3:fa:0c:96:65:79:fb:
                    c4:21:10:c6:4b:8b:11:56:95:2e:b5:c4:b2:ea:fd:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:F4:2A:B7:E1:1A:20:FA:B1:C7:42:E0:85:1B:6E:B2:D4:A8:BC
            X509v3 Authority Key Identifier:
                keyid:4F:D0:E3:FD:5B:A0:0C:14:AC:4F:48:B2:CE:1C:EF:40:98:2E:80:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FD0E3FD5BA00C14AC4F48B2CE1CEF40982E8098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3232392e3137342e302f32342d3234203d3e203236363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:81:e4:0f:c8:99:d6:8b:12:05:73:44:39:22:1d:ef:a1:
         84:28:a0:f1:2b:c5:96:8b:41:9e:9d:06:48:5d:b6:0b:18:d2:
         bb:58:12:62:9e:f7:4e:3f:05:a6:6e:99:40:70:c8:39:5a:b7:
         3d:7a:25:99:78:35:64:7a:01:82:58:ac:72:53:a2:d0:36:bf:
         7a:af:48:5a:33:64:f5:ef:bf:62:f3:77:c1:ce:86:d0:c6:2a:
         77:92:d2:59:d8:b0:be:d6:a8:16:2d:1b:a0:9f:dc:3e:88:f1:
         3f:85:da:ca:1d:a6:1a:90:36:5e:a5:e4:a5:c5:9c:f2:ba:f8:
         62:02:ab:36:60:aa:ef:6a:8a:75:e9:86:c5:10:7c:ee:23:07:
         4d:61:b4:fa:2e:a3:d7:69:f2:9e:c3:b4:a0:0a:55:dc:bf:9b:
         5d:c3:bb:a5:3b:65:79:84:92:8a:e5:ea:78:1d:8a:10:d8:2b:
         8a:c6:f5:82:b7:e4:52:55:2c:2b:e4:ea:43:be:60:62:5c:2c:
         96:d8:e6:bd:2f:1d:bd:fe:86:b4:64:8d:2a:68:d1:77:e3:d1:
         47:f9:40:cc:fa:6e:34:b4:49:e1:d4:38:67:c9:0a:a4:da:af:
         f5:73:70:ca:27:0d:65:2d:6a:71:83:4d:9a:0e:4e:d7:d5:03:
         b9:06:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org