Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/0/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (raw, json)
Hash identifier:          SXCeEGe4VhdPARXkvmiRWUvYOaLAZfQbD1Np0Q5Obdg=
Subject key identifier:   DF:02:C5:D3:9F:2F:34:B6:41:8F:53:45:74:85:1D:8E:3D:FB:B7:98
Certificate issuer:       /CN=92171D635AE22A7F76B2ECC0FAEC668561631030
Certificate serial:       317372175D6855B2B43C3363F9653F6F206CC6A5
Authority key identifier: 92:17:1D:63:5A:E2:2A:7F:76:B2:EC:C0:FA:EC:66:85:61:63:10:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92171D635AE22A7F76B2ECC0FAEC668561631030.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/0/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
Signing time:             Fri 22 Sep 2023 03:52:42 +0000
ROA not before:           Fri 22 Sep 2023 03:47:42 +0000
ROA not after:            Fri 20 Sep 2024 03:52:42 +0000
asID:                     270682
IP address blocks:        200.187.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:72:17:5d:68:55:b2:b4:3c:33:63:f9:65:3f:6f:20:6c:c6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92171D635AE22A7F76B2ECC0FAEC668561631030
        Validity
            Not Before: Sep 22 03:47:42 2023 GMT
            Not After : Sep 20 03:52:42 2024 GMT
        Subject: CN=DF02C5D39F2F34B6418F534574851D8E3DFBB798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:75:62:79:cb:97:fc:9c:3a:25:14:08:14:
                    d0:88:84:99:da:97:62:db:96:d4:97:4a:b2:a9:30:
                    3b:47:d2:57:45:7c:2d:6e:eb:f8:1f:a0:75:06:43:
                    cf:4a:76:88:bd:2a:a9:55:a5:d0:39:c3:1b:ca:a9:
                    73:a0:9f:c5:00:68:9d:99:53:1a:9e:cc:45:27:47:
                    88:eb:74:e2:ab:2f:f8:82:0e:46:0f:64:46:f1:f1:
                    1a:45:a3:2d:65:66:30:ee:ab:7d:ce:cd:19:24:9f:
                    c7:6b:fe:c8:9f:12:b5:25:e6:17:9c:d8:d5:ad:8f:
                    d8:f5:8a:82:03:5f:1f:83:31:9a:36:d6:40:4b:f7:
                    d9:5b:41:22:7f:e4:3c:03:76:e4:c3:cc:17:01:27:
                    8b:5a:36:52:d7:00:da:f3:92:3b:ff:06:eb:31:a0:
                    a6:8f:02:35:b4:51:a6:58:1c:57:cb:a5:fd:16:7d:
                    b8:28:24:28:79:e1:cc:f2:d2:49:28:c3:70:99:a3:
                    18:b6:26:07:6f:53:1e:d4:40:ce:e0:38:c0:bb:56:
                    be:8d:d2:72:8d:b5:39:8b:ae:91:ef:56:e5:25:21:
                    ec:64:e1:43:8b:76:b0:db:b0:56:eb:0f:81:ce:ea:
                    cb:9b:6e:42:54:46:b2:4f:d4:4f:61:f4:27:82:71:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:02:C5:D3:9F:2F:34:B6:41:8F:53:45:74:85:1D:8E:3D:FB:B7:98
            X509v3 Authority Key Identifier:
                keyid:92:17:1D:63:5A:E2:2A:7F:76:B2:EC:C0:FA:EC:66:85:61:63:10:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/0/92171D635AE22A7F76B2ECC0FAEC668561631030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92171D635AE22A7F76B2ECC0FAEC668561631030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/0/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:67:cb:c0:95:27:a6:d7:61:45:b1:c2:e0:06:ca:0b:ae:66:
         6b:46:1b:dd:9b:9a:86:98:3f:cc:3c:35:0f:42:22:3f:4e:8e:
         c4:4a:04:2f:d6:c1:83:13:6d:3f:3b:a3:d9:47:ba:e2:35:e3:
         db:a1:11:14:db:36:21:3b:4d:70:9c:54:10:ca:eb:f3:17:8d:
         fa:24:9d:45:b0:0b:28:66:17:1e:30:f8:ab:f2:c8:0d:f0:6d:
         b0:ac:65:c4:29:da:a3:75:27:ee:73:70:9d:a2:1a:06:1f:b8:
         f9:65:05:66:0c:d4:30:9d:61:0f:1c:ea:0f:5e:c1:ce:83:47:
         c0:d0:29:63:e3:be:94:33:b4:d6:27:40:82:b3:01:27:00:2d:
         29:6d:16:0b:5b:b9:47:b4:be:39:8a:98:e4:dc:8a:48:f1:35:
         c0:ec:28:26:8a:42:46:7b:19:4d:f9:7e:7f:33:83:ae:57:f1:
         4d:d4:b2:72:44:05:3e:4d:c6:e5:55:f0:88:a5:1e:31:d2:1c:
         79:82:f1:36:4e:d2:54:96:04:9f:6f:ee:5a:93:60:38:cd:a5:
         af:a8:6c:56:a5:fc:7b:7e:c6:a3:e3:be:5e:2c:d9:4a:e2:9c:
         39:45:eb:97:ad:58:c8:67:1e:06:08:08:05:23:67:67:6d:67:
         dc:9a:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org