Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          F25jhc5m4/5HThKZaDHvqsX1tYhO0pkcQF3qU5lDBVE=
Subject key identifier:   E3:CA:1F:9C:5B:95:A7:34:CC:4C:80:6C:43:7C:00:2C:DF:39:F4:BA
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       28FA253B5F238237CDEAA39B3E1722DB932A8067
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:58:56 +0000
ROA not before:           Mon 08 Apr 2024 13:53:55 +0000
ROA not after:            Mon 07 Apr 2025 13:58:55 +0000
asID:                     265303
IP address blocks:        200.150.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fa:25:3b:5f:23:82:37:cd:ea:a3:9b:3e:17:22:db:93:2a:80:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:53:55 2024 GMT
            Not After : Apr  7 13:58:55 2025 GMT
        Subject: CN=E3CA1F9C5B95A734CC4C806C437C002CDF39F4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:1a:f4:ec:41:f3:84:da:31:46:3f:a6:b1:
                    a7:4d:80:29:09:6a:79:a6:49:a4:f5:d9:15:86:77:
                    f6:4a:66:80:1b:4a:30:36:d3:02:40:be:82:3a:60:
                    6f:d0:c8:cb:c1:50:0e:27:9b:b9:f1:fa:b7:04:48:
                    bb:c3:8a:22:0e:cf:f5:fa:e8:89:9c:0c:50:0f:80:
                    db:f6:1d:46:d4:22:1c:9a:a9:a7:6d:8d:ee:95:9b:
                    9f:91:ee:f3:d9:03:fa:dc:09:12:d7:46:04:21:15:
                    3b:0c:e9:eb:69:74:b5:30:d1:a2:01:43:58:0c:2e:
                    4e:bc:e0:15:a6:41:f2:7b:a6:6c:86:4e:88:a7:67:
                    af:ef:03:d2:26:d9:22:ca:c9:18:fb:71:d6:47:1a:
                    e8:50:02:b7:3e:80:90:cb:00:d8:ed:fb:1c:db:e3:
                    a9:3b:04:88:ff:98:88:6f:58:e2:eb:ac:a9:ea:1f:
                    ea:35:01:fe:51:7b:bf:d6:7a:1b:e9:be:ac:13:e1:
                    08:bc:ac:4c:ce:4d:79:6c:93:d1:8d:a4:38:59:aa:
                    df:14:4c:ad:e0:0c:0e:7e:bf:39:68:9e:bc:25:d1:
                    10:00:ca:e1:2e:b5:d4:09:16:52:24:8c:5e:5a:8a:
                    46:cc:1c:82:d1:6c:69:d0:4a:3a:74:9a:84:f3:ee:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CA:1F:9C:5B:95:A7:34:CC:4C:80:6C:43:7C:00:2C:DF:39:F4:BA
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3136392e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:af:27:59:e7:bb:0c:20:c8:fd:33:b7:d6:3f:5a:ca:a2:
         8d:ef:00:e5:8c:fa:ed:23:52:81:6d:f6:40:f6:fa:27:de:01:
         c9:22:46:0c:fd:2d:8d:cf:8f:11:66:08:9d:41:1d:61:53:6b:
         9a:0e:01:cb:aa:5c:ec:a5:ac:9c:63:b4:7a:a9:c9:e8:95:e0:
         18:8c:88:b4:10:f1:38:fc:7c:92:f9:28:d7:7c:0b:b0:97:a7:
         0f:0d:07:8a:c3:8e:95:2b:f0:48:33:9e:63:fc:9f:bd:0c:49:
         24:a1:60:18:a1:8b:1f:f6:13:ce:f5:a2:1b:41:f2:b9:e5:f0:
         d3:c0:6c:cc:9b:20:2b:f7:22:d1:b0:74:57:c8:32:1f:dc:a7:
         a8:dc:6f:11:a7:b7:96:2f:2f:1a:ea:e0:9b:cc:57:ab:33:21:
         47:1d:28:37:c7:ff:90:94:c0:2c:f2:c8:78:b2:52:48:10:df:
         dd:95:17:0e:29:57:da:d5:b2:ee:ec:26:eb:91:44:87:2b:0e:
         4f:b1:84:39:d8:ec:a0:0e:fb:b1:f2:84:fd:e4:e8:65:6b:1d:
         e8:3a:36:88:c7:2c:b3:fd:7f:ea:8f:c9:2d:8d:93:34:a5:5d:
         eb:16:eb:1b:a9:ca:06:5c:1d:d3:80:f4:8d:e9:65:de:05:f0:
         5a:75:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org