Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
File:                     3230302e3135352e33322e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          J9Uc6U6Chx0k7a+Q85va/KRxX2lKyQ2+CTqvmWfh1JU=
Subject key identifier:   63:69:AD:FF:49:13:2F:C4:7C:29:B3:D5:9E:29:AB:7A:93:B4:77:93
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       17BAA9EC129AA8D33041B75138609AF779488C48
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:18:01 +0000
ROA not before:           Fri 27 Aug 2021 14:13:01 +0000
ROA not after:            Fri 26 Aug 2022 14:18:01 +0000
asID:                     22689
IP address blocks:        200.155.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ba:a9:ec:12:9a:a8:d3:30:41:b7:51:38:60:9a:f7:79:48:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:13:01 2021 GMT
            Not After : Aug 26 14:18:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:b0:87:0a:ca:65:c5:da:bd:31:b3:42:2e:
                    a4:2c:ce:d8:87:30:a4:56:37:7c:92:3d:2e:b6:c9:
                    ae:b6:6a:76:98:2a:99:42:82:b7:7c:f8:b7:9d:48:
                    1a:43:88:50:64:33:b3:bb:bd:b9:54:ed:10:14:15:
                    fd:80:52:d2:a5:25:99:d9:70:d2:4f:bc:93:cc:da:
                    fe:9b:76:d8:e5:29:c9:a1:04:b2:45:85:1c:70:49:
                    ac:69:e9:db:82:45:8d:86:b5:e0:58:dd:2b:d4:d1:
                    bf:49:13:ea:8b:a8:b9:36:a9:2e:45:80:f1:35:ad:
                    ac:3f:29:05:00:7d:db:a5:6f:c0:1a:51:c2:df:be:
                    13:a1:66:ff:43:fb:32:ef:4e:c6:35:39:b3:60:39:
                    df:0e:d1:6b:b8:ee:66:08:b6:f7:5e:89:7a:41:03:
                    f1:a2:9c:d6:25:b9:c0:cd:36:18:5e:79:95:d5:f0:
                    a3:e4:be:ba:c1:8b:6a:77:ec:91:48:97:5e:4a:80:
                    cc:ef:61:10:97:eb:c4:dd:b1:3d:bc:39:58:21:fe:
                    72:85:99:4f:21:ef:b0:55:74:e1:81:b1:15:d7:d7:
                    55:56:c7:c3:b2:06:6f:ba:d1:da:e9:16:91:c1:9e:
                    03:74:71:b8:58:92:70:e2:e9:a8:92:8e:f2:2c:ed:
                    e9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:AD:FF:49:13:2F:C4:7C:29:B3:D5:9E:29:AB:7A:93:B4:77:93
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:3b:b4:7d:01:3c:e3:43:e8:4e:66:dc:50:15:fe:02:f5:8d:
         c5:f1:28:a3:26:76:8d:78:79:a0:ce:b3:74:b4:b6:94:0c:12:
         af:5d:eb:f7:a3:45:ec:ce:56:5b:fb:9b:56:10:26:c2:fe:80:
         fd:0f:b5:08:3c:d0:1b:18:3a:2d:40:8e:39:33:dd:62:a7:86:
         37:47:22:f9:3e:f4:77:56:56:24:22:1e:41:e7:77:21:bc:7f:
         29:eb:26:53:18:13:74:80:e0:f1:e1:5e:5e:b1:f3:a4:79:76:
         78:e2:2f:0c:3b:3e:14:9b:b8:c6:91:3c:58:68:09:4d:10:b1:
         f7:7b:78:2d:e2:a5:ac:0a:75:ff:98:58:70:16:70:b0:17:9d:
         fa:5f:7d:7d:72:d5:bf:ae:52:68:a5:35:23:e1:33:ef:a7:5f:
         51:e4:8d:e6:85:21:f5:04:16:af:fc:41:7a:31:cd:24:04:8a:
         a6:c1:f1:84:d2:a4:8d:5c:c4:5d:d8:4d:1f:d4:33:0a:16:c7:
         ec:f0:32:d0:15:34:eb:13:f9:cf:a8:4c:c9:bd:30:8a:6c:43:
         ee:5e:84:ea:79:25:d6:d3:47:d2:9e:79:c0:63:16:13:ba:39:
         d6:be:8f:bb:3e:df:28:1a:22:3d:b6:d6:a5:4e:c6:2a:88:17:
         66:98:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org