Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa
File:                     3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa (raw, json)
Hash identifier:          pmJ7csY7dLjoFSVcRu4dB9f0TN39xCTzw8qf0ba8wjo=
Subject key identifier:   DC:64:5F:13:1F:3C:98:AB:5B:D1:7B:15:86:67:58:B4:8B:14:E1:52
Certificate issuer:       /CN=48323F4EC06250B666CEA3AD182055DC4D6CBFE6
Certificate serial:       6283E3DF355844A5E3E0AC282A667ED7661E6B25
Authority key identifier: 48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa
Signing time:             Thu 04 Apr 2024 11:39:14 +0000
ROA not before:           Thu 04 Apr 2024 11:34:14 +0000
ROA not after:            Thu 03 Apr 2025 11:39:14 +0000
asID:                     270261
IP address blocks:        200.110.200.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:e3:df:35:58:44:a5:e3:e0:ac:28:2a:66:7e:d7:66:1e:6b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48323F4EC06250B666CEA3AD182055DC4D6CBFE6
        Validity
            Not Before: Apr  4 11:34:14 2024 GMT
            Not After : Apr  3 11:39:14 2025 GMT
        Subject: CN=DC645F131F3C98AB5BD17B15866758B48B14E152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:9f:7d:3d:d7:f2:4f:88:21:c3:58:91:aa:
                    89:a4:78:79:8f:3a:ee:d8:37:8c:38:fe:15:30:c9:
                    83:97:8e:ee:77:6a:88:d3:16:fe:d9:69:e6:da:de:
                    54:4b:5e:e7:2b:a3:de:b6:74:c3:43:c8:e2:32:75:
                    d0:e8:9f:76:30:7b:64:13:14:21:04:68:4d:98:82:
                    b0:0a:28:ac:f8:3f:9e:63:81:b0:e9:4b:72:1a:d2:
                    15:8e:c6:21:d2:68:69:4e:83:82:9f:7b:cd:54:91:
                    73:82:b3:de:4b:22:77:2a:30:83:4c:85:ac:3c:75:
                    2e:e2:73:fa:b1:df:b7:fd:d5:ea:03:07:1e:76:38:
                    8e:7a:26:b1:d0:de:63:18:0e:d8:8f:7d:b7:5a:7f:
                    fb:a5:85:b9:37:fc:c1:2f:e3:fa:7b:83:a5:56:b3:
                    aa:ac:41:39:3f:35:6c:96:3c:37:06:5c:3e:ca:4e:
                    a6:3f:82:29:7c:d3:a7:56:89:91:41:a4:15:ba:21:
                    c3:52:94:8f:23:72:ed:c4:b9:e2:a1:d6:e0:22:a6:
                    eb:de:49:6c:9c:99:68:df:fa:b1:a5:2c:08:d6:e9:
                    77:7d:85:fc:4c:d8:4f:11:88:ed:d3:57:87:84:f9:
                    ab:43:8b:ef:5b:f9:83:8e:ee:c6:f0:09:ef:f7:a5:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:5F:13:1F:3C:98:AB:5B:D1:7B:15:86:67:58:B4:8B:14:E1:52
            X509v3 Authority Key Identifier:
                keyid:48:32:3F:4E:C0:62:50:B6:66:CE:A3:AD:18:20:55:DC:4D:6C:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48323F4EC06250B666CEA3AD182055DC4D6CBFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/1/3230302e3131302e3230302e302f32322d3332203d3e20323730323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:bc:11:62:11:c5:e4:88:aa:4b:4a:50:6c:cd:b9:35:d6:
         a9:47:5c:ef:ae:50:96:8b:52:86:fc:80:97:56:78:7b:db:bf:
         c8:f3:3f:1e:3f:99:0d:ad:1a:cf:9e:98:8f:d2:ae:61:91:18:
         e9:ba:25:da:aa:59:ac:48:aa:15:27:67:96:ee:08:f3:07:12:
         7b:82:66:58:ae:cd:60:cc:17:83:ae:a0:58:48:80:09:47:6c:
         54:94:a1:ec:1e:e4:75:51:4a:10:db:f3:c4:2d:33:9e:1e:43:
         af:eb:84:47:66:6a:f7:39:84:df:c2:3c:17:2e:31:fd:83:c2:
         eb:9e:d1:41:15:55:2a:0f:db:7c:48:3a:b7:b1:3c:59:b8:9d:
         15:66:a8:b1:dd:30:87:72:b9:9f:c7:68:11:72:3a:82:4a:09:
         38:bc:b8:37:cf:dd:d8:a2:db:cf:c5:4d:65:d9:27:71:35:16:
         84:71:45:29:df:33:d1:d1:a4:ac:da:69:37:d5:0e:25:8b:b0:
         2c:78:be:fc:f8:39:6f:65:ef:da:58:a2:8c:81:03:82:b5:d8:
         bc:62:c8:cb:84:67:3d:34:ec:5d:4b:25:f5:67:a7:39:2d:a1:
         9b:0d:c9:b3:b9:af:c6:34:1e:61:03:41:02:a6:d3:9a:33:a2:
         cb:97:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org