Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137322e302f32342d3234203d3e20323635333033.roa
File:                     3230302e3135302e3137322e302f32342d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          1F6RU3v+7bXHEd7i6+6EX4ri2Ot32Xfq4SNZ7xRSCj0=
Subject key identifier:   4B:81:91:EE:C6:5C:92:45:45:72:B3:F2:0C:AA:5D:04:8C:08:88:91
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       45631719BA94E58EC8F7AFCA83150C1C4B4214C0
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137322e302f32342d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 13:57:41 +0000
ROA not before:           Mon 08 Apr 2024 13:52:41 +0000
ROA not after:            Mon 07 Apr 2025 13:57:41 +0000
asID:                     265303
IP address blocks:        200.150.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:63:17:19:ba:94:e5:8e:c8:f7:af:ca:83:15:0c:1c:4b:42:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:52:41 2024 GMT
            Not After : Apr  7 13:57:41 2025 GMT
        Subject: CN=4B8191EEC65C92454572B3F20CAA5D048C088891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:7d:50:08:ba:f7:be:f6:56:44:b1:03:bd:
                    4b:4b:b8:82:1e:14:03:b4:59:ee:4e:29:de:58:13:
                    a6:40:e0:8a:da:d1:74:84:6c:43:2b:b3:77:49:06:
                    d8:48:ea:85:0b:9a:ac:d0:15:7d:93:60:47:e5:17:
                    f5:a1:a4:7d:1f:b9:43:cf:56:f8:4f:1b:45:5f:7a:
                    16:9a:79:d0:82:61:b8:39:15:ad:bd:7c:32:3c:3a:
                    9b:40:a6:00:56:0e:78:31:63:e5:6d:ba:f4:c2:fa:
                    f9:c5:ff:de:20:25:d1:aa:f0:74:ec:df:8b:58:c2:
                    b8:9c:30:f0:b5:f9:97:6b:e1:b5:06:a4:3d:08:8b:
                    fa:0f:60:3e:b6:1c:c3:d6:c7:a1:dc:fb:74:b6:e4:
                    3a:4a:e1:0b:35:30:d6:2c:3c:a4:4c:05:97:b2:95:
                    82:07:35:a3:9b:43:17:b6:a2:a1:d2:3d:98:64:df:
                    94:44:4c:b8:e1:f5:35:a3:f0:71:f2:87:82:01:06:
                    fc:00:a8:d4:b3:63:ae:42:44:4e:da:1f:2c:b1:0f:
                    09:3b:fe:a2:2b:a5:ed:d9:df:68:69:8a:22:2a:3c:
                    42:d9:b5:ac:ed:d8:14:09:ad:26:50:d2:ea:70:9c:
                    b5:e2:4a:c6:23:d2:06:e7:4a:df:e9:e4:16:6a:2c:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:91:EE:C6:5C:92:45:45:72:B3:F2:0C:AA:5D:04:8C:08:88:91
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e3135302e3137322e302f32342d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:0d:85:77:76:4d:bb:a5:2f:57:ba:19:7a:b8:6d:22:04:
         b9:0d:69:58:01:79:96:97:c6:3c:a8:9b:b3:bb:e1:58:47:0a:
         da:b1:0f:14:6d:f1:f1:bb:d4:b7:69:41:ae:a7:9b:5c:0a:77:
         86:8e:47:53:c2:e1:ce:b9:30:bf:9c:f4:c0:43:2c:00:28:0a:
         b9:df:c2:d0:ed:fc:a8:c3:4a:98:b3:63:a5:45:c0:f2:3c:66:
         89:ec:21:68:17:4d:ef:31:57:e9:fd:8b:87:00:e4:da:a9:f8:
         9a:bd:ab:b4:80:0b:cb:e3:1e:4a:45:bd:75:35:ec:64:e6:58:
         d8:b1:2a:46:ce:b4:0e:f3:4b:7a:13:02:4e:13:1f:c6:b1:2a:
         d7:bb:2f:24:1a:94:fb:35:cf:9b:ff:58:bf:68:88:63:8b:f1:
         f5:a6:04:f8:ec:67:37:90:1f:e6:5c:31:f4:a4:a1:4c:63:d7:
         5e:c0:11:7e:bb:d4:a5:a8:18:cc:52:2d:b5:6a:b5:5b:34:06:
         37:58:24:ff:f6:9c:6a:bf:60:5e:27:2f:cf:81:30:3a:57:19:
         f0:6b:0d:e9:02:02:4a:12:a3:0e:cc:d2:85:ac:7d:64:17:14:
         d7:33:e9:f2:7f:0f:b0:e0:04:4d:1e:90:21:e4:ba:4f:c2:ca:
         78:d5:3a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org