Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32332d3233203d3e20323733343132.roa
File:                     3230302e3139362e34302e302f32332d3233203d3e20323733343132.roa (raw, json)
Hash identifier:          UQuWla+2HrnxHZHcA2qyxm6gDXhRN5hfzSM16+o8vNo=
Subject key identifier:   F1:40:B6:23:14:0B:C6:53:90:35:12:7D:94:5D:00:3D:9E:0C:0F:BB
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       3EAC9EAB94B0040EBF6DA23D6A10CA64648CA419
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32332d3233203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 12:36:31 +0000
ROA not before:           Mon 22 Jan 2024 12:31:31 +0000
ROA not after:            Mon 20 Jan 2025 12:36:31 +0000
asID:                     273412
IP address blocks:        200.196.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ac:9e:ab:94:b0:04:0e:bf:6d:a2:3d:6a:10:ca:64:64:8c:a4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 12:31:31 2024 GMT
            Not After : Jan 20 12:36:31 2025 GMT
        Subject: CN=F140B623140BC6539035127D945D003D9E0C0FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:df:c6:8e:fd:8a:dc:25:34:87:2f:1d:9f:c5:
                    0a:7a:71:8b:75:0d:3b:d4:78:9e:96:0d:d8:38:3d:
                    4d:d1:46:f4:c4:73:84:1c:47:57:ce:64:9f:a0:62:
                    e1:a4:83:c5:f1:17:49:34:8e:a1:62:ee:0c:8e:da:
                    0f:b6:0c:72:df:53:c8:4c:32:e6:dc:e1:27:9e:52:
                    f3:c3:2b:0f:8d:ad:d3:44:9b:2b:02:0e:6b:f9:23:
                    6d:e5:5b:c4:d8:eb:aa:28:e9:0c:ea:82:62:e2:c0:
                    26:7e:c9:2b:8c:80:51:62:8c:2d:d2:12:60:af:92:
                    d8:49:e6:fb:b4:de:c6:de:76:6a:ac:e1:ab:69:e8:
                    88:ed:c1:fc:4d:eb:f0:26:19:2c:d0:8d:88:29:3f:
                    81:8e:51:d6:21:41:95:d9:d9:b3:76:92:09:c5:e2:
                    b0:b3:91:12:b4:53:83:00:b5:07:a5:ab:1f:d7:91:
                    e2:87:c3:81:55:1c:ff:23:43:99:eb:c0:ea:e0:cd:
                    b3:46:53:06:0e:f4:cf:d0:63:fa:7f:e7:94:56:44:
                    78:50:6c:01:42:fa:6e:7f:33:13:1d:d7:17:a3:d1:
                    02:16:f7:28:51:c5:2e:27:cb:44:47:5c:f3:97:35:
                    47:5e:76:f7:2a:b9:d9:16:dc:e5:8c:53:e5:17:2e:
                    33:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:B6:23:14:0B:C6:53:90:35:12:7D:94:5D:00:3D:9E:0C:0F:BB
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32332d3233203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:8e:d2:2d:6b:e2:c2:fa:69:06:02:d6:2c:fb:b7:c4:54:62:
         6c:18:74:db:3a:2b:ca:a5:6d:a0:d5:c7:ed:13:53:05:8a:1d:
         46:79:a8:70:38:d5:c1:40:96:ca:07:31:6c:72:cf:0e:8d:be:
         df:aa:f7:55:78:30:f8:83:21:30:61:d2:8b:86:e2:28:af:14:
         65:7e:9d:b5:5e:30:60:b5:81:bc:2e:15:3c:71:53:97:e2:cb:
         68:2e:43:7f:71:39:47:89:3d:c9:e8:de:56:a2:70:1b:2f:a4:
         b5:36:fd:f4:49:19:22:dc:97:81:0f:96:44:f2:4f:fc:81:76:
         28:cb:c7:44:4d:14:e6:3f:a0:c3:f6:a3:4e:b5:19:83:2a:29:
         c2:9e:62:77:7f:26:2c:74:bd:81:e5:82:84:9e:2e:2c:d2:2e:
         ef:2a:eb:a1:7d:2c:0f:a0:be:94:56:46:13:a7:41:79:fa:1a:
         3b:ec:57:21:63:31:6a:17:29:79:88:95:01:04:4a:43:e5:d0:
         2c:1c:94:00:96:44:05:d1:49:27:4b:40:2e:b4:3d:2c:d8:23:
         e5:b7:b1:c5:8d:7b:66:ed:34:a4:61:2f:dc:e3:4f:cb:25:b6:
         aa:b3:d1:28:2b:48:6e:0d:67:1e:64:b4:6c:bf:3d:9a:37:29:
         1d:0e:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org