Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa
File:                     3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa (raw, json)
Hash identifier:          RFt8ytF72GOZTq8Uw2TSFKOek/QHfrP99R6GTi/vVLA=
Subject key identifier:   5D:18:27:55:F4:13:A0:80:12:5A:9F:3B:50:31:E2:04:B8:23:57:4C
Certificate issuer:       /CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
Certificate serial:       649CC46539248683DDE34B8BA1BCF01EF11384BF
Authority key identifier: 1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa
Signing time:             Thu 04 Apr 2024 18:14:47 +0000
ROA not before:           Thu 04 Apr 2024 18:09:47 +0000
ROA not after:            Thu 03 Apr 2025 18:14:47 +0000
asID:                     271423
IP address blocks:        200.36.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9c:c4:65:39:24:86:83:dd:e3:4b:8b:a1:bc:f0:1e:f1:13:84:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
        Validity
            Not Before: Apr  4 18:09:47 2024 GMT
            Not After : Apr  3 18:14:47 2025 GMT
        Subject: CN=5D182755F413A080125A9F3B5031E204B823574C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:2a:d5:3f:55:3d:03:db:83:48:35:ce:ec:
                    a4:67:78:ae:7c:5f:65:0b:df:ef:25:91:e3:ec:c3:
                    97:f5:4e:65:35:53:ce:7e:86:4e:43:b0:a5:29:b6:
                    4c:87:7f:33:09:88:4e:90:5c:67:11:ab:b5:52:27:
                    2f:7d:14:85:46:f4:ba:eb:96:ca:a0:0f:6f:46:0a:
                    2a:e0:c1:10:c3:81:90:b7:67:f4:d2:a6:e3:c3:66:
                    92:3e:3a:c8:58:af:45:df:70:7f:4c:f4:da:a8:a8:
                    39:1f:ad:e7:6f:f8:b8:3c:82:76:29:e3:e9:d0:50:
                    eb:d5:34:b2:f1:0b:d7:5f:aa:a6:58:c1:12:e6:43:
                    9e:b9:27:fc:27:89:f5:32:ed:06:58:6e:e2:7f:ec:
                    25:2f:51:bb:69:3f:06:d0:f4:b5:3f:ed:c1:41:67:
                    a1:bb:29:09:ee:39:b8:38:ab:a1:6f:d2:76:41:b3:
                    73:ad:a7:dd:8a:83:00:1d:29:5d:c8:cd:5c:2f:4b:
                    32:4f:bb:94:b9:2d:07:b9:c4:01:c0:f0:c8:9c:60:
                    60:85:96:86:82:24:cf:48:dd:3d:f2:3d:69:25:5c:
                    b4:9b:8f:db:76:fd:69:ac:02:f9:0d:51:42:0f:70:
                    82:a0:3f:03:e0:d3:c3:8d:61:6a:bb:55:c7:af:3c:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:27:55:F4:13:A0:80:12:5A:9F:3B:50:31:E2:04:B8:23:57:4C
            X509v3 Authority Key Identifier:
                keyid:1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139362e302f32342d3234203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:46:f7:2c:ce:56:90:bb:e6:fa:f1:08:07:09:f1:6e:36:
         cc:4a:39:16:47:b0:6c:cb:ba:19:eb:0d:2b:a6:f5:42:c1:e3:
         36:7f:f6:b0:f8:04:fc:6e:d4:19:c0:ee:0c:c3:91:0c:bf:d8:
         03:b5:c4:a7:36:57:f6:e3:20:53:94:2f:6a:ac:e5:f2:88:04:
         fe:60:7b:64:14:eb:ae:30:b7:f1:d4:7e:f8:a5:d9:33:7a:2a:
         e1:f7:22:53:4d:bd:4d:9c:10:a0:f4:96:ba:06:f7:80:39:ca:
         8c:1c:dd:27:41:0c:a1:51:0c:31:47:5b:00:b1:ea:e5:f7:a1:
         e7:62:a3:67:47:b0:0c:90:a8:40:32:a9:42:b3:dd:b5:9c:a6:
         31:d1:06:85:71:23:e3:71:50:65:47:2f:25:09:ad:a1:ea:ef:
         57:e7:be:40:87:57:fb:ef:6a:d7:84:4c:cc:c4:de:f7:aa:ad:
         3b:01:58:5b:cf:a4:57:c0:d0:5a:07:25:cd:28:d3:3c:ac:7c:
         30:c7:6d:02:01:1d:c0:68:72:a1:f4:ae:68:08:91:f9:49:9b:
         cc:97:8d:8d:13:98:22:d8:96:03:e1:34:ad:90:58:fb:f9:58:
         83:76:79:3f:f4:83:02:65:85:b6:35:0b:53:6e:0b:10:70:e9:
         15:98:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org