Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa
File:                     3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa (raw, json)
Hash identifier:          SZxx1rprv9Xy6yMiS36zqf7qIkuQoHKqO3hvXiV84aY=
Subject key identifier:   D0:21:73:FD:B2:C2:55:1A:CC:68:84:D1:5D:3E:F7:41:ED:D9:20:72
Certificate issuer:       /CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
Certificate serial:       5C1B0B3395F64C2F111E91C0EC8677250E8FD0FA
Authority key identifier: 1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa
Signing time:             Thu 04 Apr 2024 18:14:46 +0000
ROA not before:           Thu 04 Apr 2024 18:09:46 +0000
ROA not after:            Thu 03 Apr 2025 18:14:46 +0000
asID:                     271423
IP address blocks:        200.36.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1b:0b:33:95:f6:4c:2f:11:1e:91:c0:ec:86:77:25:0e:8f:d0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B98F44B9168C77B05AAB78D5A4528E229CA12C2
        Validity
            Not Before: Apr  4 18:09:46 2024 GMT
            Not After : Apr  3 18:14:46 2025 GMT
        Subject: CN=D02173FDB2C2551ACC6884D15D3EF741EDD92072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:4f:66:7b:46:b2:66:c3:04:a0:c7:19:66:
                    aa:c4:cc:db:82:a4:02:a6:9f:3e:4c:6a:4a:5f:bb:
                    b8:27:7a:f6:01:d6:0e:8a:39:b9:d4:56:c8:e5:15:
                    28:da:bf:28:d0:22:a9:72:40:bf:57:5c:d7:50:95:
                    5f:be:8f:74:a6:45:7f:34:3e:01:2a:fa:ee:a5:bb:
                    6e:ea:5d:0f:58:72:22:bd:d1:d8:18:9d:dc:16:dc:
                    b2:43:42:a7:d3:92:d6:89:d3:41:b4:ff:32:74:6e:
                    f2:4c:44:fa:53:21:7e:39:39:2d:41:68:ea:9b:92:
                    c4:75:ef:6f:91:af:e5:82:23:70:fd:54:19:c7:aa:
                    92:b2:7a:76:e7:2b:c3:d2:ab:29:5d:45:d6:72:15:
                    e3:c3:cb:90:d9:db:d3:01:a1:dc:74:14:1e:a3:a1:
                    c6:d7:ef:be:9b:0d:ba:4d:79:42:3d:02:04:1e:e6:
                    a6:45:a6:2c:97:d1:5c:54:0f:79:c8:3f:4b:6d:15:
                    77:a7:44:db:f2:5b:ff:28:bb:4a:20:92:eb:21:4d:
                    a3:92:a7:d0:27:2e:9a:e3:b0:99:43:a7:63:e0:2a:
                    e2:c3:90:31:e0:4e:ee:67:fb:43:5f:c8:48:9f:28:
                    62:d0:c1:ce:04:ee:31:2b:e4:8d:86:b7:5e:cc:86:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:73:FD:B2:C2:55:1A:CC:68:84:D1:5D:3E:F7:41:ED:D9:20:72
            X509v3 Authority Key Identifier:
                keyid:1B:98:F4:4B:91:68:C7:7B:05:AA:B7:8D:5A:45:28:E2:29:CA:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B98F44B9168C77B05AAB78D5A4528E229CA12C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/1/3230302e33362e3139372e302f32342d3234203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:ae:b4:13:e8:86:d3:5f:96:1c:ee:3e:a1:aa:20:07:9b:
         fa:3b:3e:3f:1b:84:1e:5d:a3:82:d7:19:e3:4e:42:b3:67:86:
         e5:6e:1f:88:b8:b1:cd:84:a9:f9:eb:5a:20:03:99:34:c3:03:
         97:b5:fc:5c:f2:7b:93:ad:b6:07:6d:6d:6a:64:6f:95:55:9f:
         e8:85:19:2b:ba:d7:b2:ed:c2:d5:ec:ff:4a:08:59:6a:72:49:
         a7:a8:0c:a4:fe:bd:eb:79:1b:9b:cf:8d:cc:ab:4b:28:f5:81:
         95:ab:1d:cc:f8:88:e7:72:9e:c1:91:b3:4d:1e:40:47:13:c8:
         a9:76:2b:10:7d:dd:35:94:f4:e3:ea:69:76:74:f0:0d:18:be:
         32:89:2b:3c:c0:35:bf:f4:2b:2e:5d:96:a5:c6:f3:df:e0:4e:
         4e:bb:dc:b7:b5:af:49:c5:fd:ff:5d:67:35:4f:e6:30:7a:44:
         1d:56:2c:32:1e:8d:17:90:68:44:da:89:4b:3a:39:f8:4c:ea:
         01:31:87:a1:b4:f3:46:cd:f0:e7:0f:cd:f8:ad:cd:22:d5:03:
         b1:d5:56:f1:c8:6d:b2:85:0b:a4:26:85:a7:6c:93:3d:46:b3:
         b6:a1:12:50:ff:d7:6c:f0:91:4d:f0:b8:70:a3:ae:77:f7:f0:
         c7:28:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org