Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa
File:                     3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa (raw, json)
Hash identifier:          WX4l05xrpSpeSqZ4a8EbkMJTp+f6wQmBHSZl5ewVoNY=
Subject key identifier:   3A:C9:DE:15:69:21:B4:CB:1A:9A:D0:56:23:A1:19:06:9D:83:E1:61
Certificate issuer:       /CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
Certificate serial:       0B9A865D5400996E17A261EE452816CBD360F8EA
Authority key identifier: 1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa
Signing time:             Thu 04 Apr 2024 18:14:46 +0000
ROA not before:           Thu 04 Apr 2024 18:09:46 +0000
ROA not after:            Thu 03 Apr 2025 18:14:46 +0000
asID:                     271423
IP address blocks:        200.36.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9a:86:5d:54:00:99:6e:17:a2:61:ee:45:28:16:cb:d3:60:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
        Validity
            Not Before: Apr  4 18:09:46 2024 GMT
            Not After : Apr  3 18:14:46 2025 GMT
        Subject: CN=3AC9DE156921B4CB1A9AD05623A119069D83E161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:49:0b:b1:9d:23:54:cd:96:a7:7c:93:71:
                    82:50:7a:96:12:d6:76:f5:fd:32:4d:f5:ba:25:d7:
                    69:73:f5:e6:5d:3d:07:3b:36:b6:90:8b:24:33:f5:
                    53:4a:d1:b3:9c:bf:c5:fc:f6:ad:98:ab:1b:3b:36:
                    22:f2:52:bd:91:04:f2:b8:1b:aa:ae:a9:be:8f:a8:
                    0a:83:c1:7c:0b:3f:83:c0:8a:f1:3b:f0:72:85:7f:
                    2e:7f:9d:96:43:b7:dd:4c:ac:2e:46:22:1e:ad:b7:
                    8d:cc:8d:03:dd:f5:8b:9c:c7:58:eb:c6:99:5a:04:
                    b0:f4:c5:1b:b3:88:28:22:d0:9f:4c:4b:75:ab:5e:
                    40:3a:9a:5b:0a:b2:96:a4:ea:d1:48:91:fa:7b:3a:
                    ff:cc:77:9e:92:5f:8e:c0:7b:da:d9:d5:1f:00:f2:
                    ce:4c:c2:73:3d:6e:6c:84:a0:b7:80:06:1f:1d:17:
                    22:ba:0d:43:8b:ef:44:2a:c4:59:8a:ae:ed:18:8c:
                    00:b3:cd:96:ca:ec:15:22:65:ea:4e:aa:62:96:aa:
                    66:16:a1:db:9f:19:b9:a1:42:b3:f0:a5:3c:ab:1c:
                    fa:3a:92:9c:f6:3a:c9:19:de:d0:ce:2a:1f:3b:8e:
                    49:85:7e:ae:23:83:da:24:43:0e:11:d6:52:a1:57:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:DE:15:69:21:B4:CB:1A:9A:D0:56:23:A1:19:06:9D:83:E1:61
            X509v3 Authority Key Identifier:
                keyid:1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32322d3234203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:d2:8a:e0:ae:6b:8a:27:7b:55:71:2f:1b:02:60:01:00:
         6f:fd:85:24:93:cd:cb:c4:2c:96:34:2b:da:73:d8:d1:fd:c5:
         fd:09:a6:6d:19:a0:33:90:58:f2:33:85:c3:89:88:69:2c:40:
         87:92:77:01:da:21:bd:d5:7d:26:ab:57:48:fc:40:27:8d:48:
         c9:5d:f3:8e:f9:7b:0c:bc:fd:bd:30:24:b7:b2:16:eb:dd:df:
         0d:ee:c8:00:1b:54:1b:55:a0:a6:7f:d8:a9:65:91:3b:b2:c1:
         51:92:7e:2a:cc:21:e3:09:e7:cb:fe:98:8c:1f:dc:bc:8d:b0:
         77:17:59:71:51:c8:ce:97:8e:1f:8c:48:05:d4:bb:bc:63:f0:
         40:4a:d3:18:7c:12:22:3a:16:39:89:d8:37:c1:00:e9:92:62:
         32:21:a6:0f:4d:e7:49:68:64:ff:7c:28:2b:7d:4b:9c:fa:57:
         72:e6:ca:dc:b0:bf:17:0a:c1:c5:21:0f:2b:6c:c5:b4:29:f9:
         9f:92:7e:b3:98:e4:8b:3b:3e:ca:02:0f:41:3d:3e:31:c9:41:
         17:6a:27:36:af:1f:ba:a9:16:27:8b:b2:c4:56:6d:e2:83:48:
         7a:2b:76:91:86:70:b6:a3:39:39:e4:29:0e:dd:50:c1:94:b4:
         b3:99:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org