Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e31382e3131322e302f32302d3234203d3e20323632393037.roa
File:                     3230302e31382e3131322e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          uMsswx40f7Jt3I7Ch/t1mokDezyYy0QJ7P4eaycnDWc=
Subject key identifier:   D8:53:5B:E9:66:41:66:D4:E9:2A:25:F7:45:F3:C8:B2:F4:5A:AF:5B
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       FFB68F473EB6AEC4CB1CB4F1583B40B61540F4
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e31382e3131322e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     262907
IP address blocks:        200.18.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ff:b6:8f:47:3e:b6:ae:c4:cb:1c:b4:f1:58:3b:40:b6:15:40:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=D8535BE9664166D4E92A25F745F3C8B2F45AAF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:d4:e4:69:ce:d2:27:e1:f4:ea:59:d4:fd:
                    8b:66:b0:b4:7d:99:46:14:25:77:62:b8:d0:4f:60:
                    3d:e9:30:bf:5a:2b:38:e9:be:19:4b:98:f0:a7:89:
                    8c:cb:51:16:5b:42:88:46:21:02:08:e4:1c:29:18:
                    49:c7:22:18:bf:79:94:16:e6:bc:50:34:b8:6d:1f:
                    93:e9:63:1e:ee:bb:79:36:10:bd:d0:be:08:f1:07:
                    f3:a4:57:72:15:b6:9f:34:32:a3:47:81:dc:2f:84:
                    c0:a3:ff:63:4a:8f:b9:93:b8:3e:91:01:f4:68:62:
                    81:d8:cc:98:19:a1:f0:0c:f4:a2:36:23:ad:ed:43:
                    d7:bd:2f:1c:45:6e:d3:29:9a:22:fc:c8:59:00:1c:
                    8b:48:69:a1:48:63:26:9d:42:c1:c6:86:b4:c1:fb:
                    3a:45:79:38:1d:4f:32:53:c2:81:98:96:25:13:f5:
                    26:f0:6a:c5:c8:b4:3e:9b:dd:2d:eb:39:a9:32:05:
                    07:e9:ea:17:04:42:98:be:5d:4c:59:3d:ad:d5:55:
                    e6:47:f1:70:45:cf:9f:23:9f:68:5b:07:68:b1:da:
                    39:40:d1:df:ca:1c:23:e6:80:13:01:93:da:17:b7:
                    b0:5b:8b:88:43:0d:15:6f:6e:cd:bc:8f:22:c2:f3:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:5B:E9:66:41:66:D4:E9:2A:25:F7:45:F3:C8:B2:F4:5A:AF:5B
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230302e31382e3131322e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:cf:fa:a0:cf:70:30:b3:19:2b:f8:e2:2f:62:05:ca:16:
         85:f6:13:fd:e1:be:1d:40:2f:80:89:79:e2:e5:6e:14:b8:24:
         97:68:f8:6b:4a:87:a2:29:7f:7f:c1:80:43:c3:1d:8c:d5:7c:
         97:22:7c:63:af:f6:24:84:95:7e:48:d8:13:84:a8:90:5a:bb:
         40:d7:05:d9:9d:ed:e8:86:67:5d:c1:37:20:b2:3e:ed:e3:b7:
         4b:e3:ae:24:76:49:ad:94:74:26:d3:49:75:af:0d:60:a2:46:
         b7:38:b4:25:e2:b4:c9:a8:18:f3:e7:09:15:7e:3a:43:10:d8:
         2c:e0:01:8a:9a:bf:b5:79:5f:07:fb:87:ff:e1:67:4a:94:d5:
         f4:14:ef:9c:2d:fc:b4:58:23:29:4a:58:0e:da:f5:a8:de:20:
         2f:e4:2f:17:a4:7b:4d:00:65:85:3b:7f:8c:17:4a:cf:ac:22:
         6f:1e:55:3f:c8:71:d9:e9:94:8a:d1:22:79:d2:63:39:d0:91:
         cd:bb:b4:d9:1a:2a:45:6c:e4:a5:14:dd:f6:1f:8b:33:3a:b1:
         cb:16:5d:e6:11:f5:d5:b7:66:23:c9:7a:ac:2f:0c:cf:e4:9c:
         08:25:95:6d:93:e7:0e:2b:c2:33:cf:5f:25:80:f8:02:68:d6:
         cb:45:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org