Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3332203d3e203238363234.roa
File:                     3230302e3233372e3132382e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          gnnoYxpMl9HmIgUmjRrmc/MXm4scOSpp1MzCKbk+AlY=
Subject key identifier:   9D:EC:6F:4C:42:28:F3:EE:49:EC:36:CC:16:AD:8C:44:0D:2F:8B:F4
Certificate issuer:       /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial:       0A4C0D505E4F5244EEA811A8DB325238C80DD535
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3332203d3e203238363234.roa
Signing time:             Tue 02 Apr 2024 13:18:57 +0000
ROA not before:           Tue 02 Apr 2024 13:13:57 +0000
ROA not after:            Tue 01 Apr 2025 13:18:57 +0000
asID:                     28624
IP address blocks:        200.237.128.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:0d:50:5e:4f:52:44:ee:a8:11:a8:db:32:52:38:c8:0d:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
        Validity
            Not Before: Apr  2 13:13:57 2024 GMT
            Not After : Apr  1 13:18:57 2025 GMT
        Subject: CN=9DEC6F4C4228F3EE49EC36CC16AD8C440D2F8BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:c2:75:02:c3:b0:29:7b:0e:f9:df:49:23:
                    c1:e9:7f:76:17:27:3c:68:20:18:a5:7a:fb:66:ad:
                    ab:bd:33:7a:f3:b7:cd:51:b9:12:1c:a4:dd:2d:5c:
                    91:c4:7a:22:df:9b:4f:32:d8:03:f9:6d:48:86:e2:
                    f9:1e:00:26:2d:36:33:2a:a2:2a:dc:d7:ee:17:2f:
                    f2:eb:26:69:d7:37:d1:67:14:26:bc:86:db:58:80:
                    e7:28:e0:48:71:3a:61:d4:ba:61:ba:95:a8:0d:29:
                    13:05:0a:f1:c2:39:a3:9b:ac:79:f7:01:af:99:9d:
                    78:0e:50:fc:6c:1f:85:31:75:6b:7f:74:80:1a:fe:
                    ce:cf:f7:bd:fd:f7:bb:8a:61:21:c2:7e:0c:3f:16:
                    d7:d4:f8:cd:95:c0:02:fe:65:25:8d:10:d6:90:a2:
                    1d:f6:ee:21:0c:1c:bd:85:e8:2b:a8:b0:24:90:b7:
                    d1:2e:30:99:6b:b3:36:c0:3e:3c:14:52:23:30:34:
                    19:76:e6:3e:b0:92:6f:4f:61:6b:ac:27:89:a8:2f:
                    b6:3f:30:e2:25:ce:1b:b4:bf:72:17:49:3c:b0:ba:
                    95:96:ec:65:e0:66:61:76:48:f7:10:d7:e5:c0:7f:
                    2f:a9:3d:74:c6:0a:c4:84:50:80:60:31:6b:0c:2a:
                    6b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:6F:4C:42:28:F3:EE:49:EC:36:CC:16:AD:8C:44:0D:2F:8B:F4
            X509v3 Authority Key Identifier:
                keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3230302e3233372e3132382e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:d8:f2:1d:fb:1d:8c:a4:8c:1e:88:c7:e7:df:5c:18:9b:
         cc:a2:8f:60:1b:f8:4e:1c:49:ae:09:9d:45:3c:43:2c:b0:5f:
         ed:ba:63:c2:bf:33:1b:f7:85:08:e7:b6:c7:70:f6:fb:80:83:
         5f:bf:51:1f:8e:73:ea:31:e7:88:a8:8e:1e:00:df:28:47:03:
         61:fe:49:83:b9:da:f8:77:e5:89:aa:ed:20:54:4e:40:0b:57:
         2f:54:ba:02:fb:82:b1:9a:e6:11:31:27:c3:47:50:25:11:be:
         1b:3d:7e:01:f1:fa:67:59:1a:7d:30:f8:ca:5a:ae:72:d1:32:
         5f:63:0b:62:fb:87:da:79:5c:45:8b:a1:b7:3b:d8:49:05:60:
         17:f8:cb:18:84:da:09:81:79:a6:08:ab:cc:87:ad:95:43:a7:
         bb:85:c3:9b:33:92:c0:81:5a:7f:7a:d0:57:8b:57:61:30:d3:
         9e:a2:f3:c2:68:b1:48:0c:f8:82:da:1f:93:7c:92:72:db:bd:
         8d:02:66:e3:5c:14:9a:6e:58:e2:ed:a2:5b:85:c0:94:98:fd:
         85:57:1b:d8:16:58:de:10:18:33:4d:80:14:9b:0b:10:d9:81:
         b0:96:c2:18:c1:ec:cc:5d:4b:0b:d9:cb:95:03:65:b1:01:46:
         44:d2:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org