Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32342d3234203d3e20323733343132.roa
File:                     3230302e3139362e34302e302f32342d3234203d3e20323733343132.roa (raw, json)
Hash identifier:          Fh16NvFjEvLlEDXkZUaeXNpCMCpLQwMOI3PUaX/N/uM=
Subject key identifier:   54:AB:03:D6:A1:69:ED:32:68:83:FD:F2:5A:1F:F6:9F:0A:02:BA:92
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       51693E8C6EA5BBE4FD057B33962D764C512A2F37
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32342d3234203d3e20323733343132.roa
Signing time:             Fri 19 Jan 2024 00:18:55 +0000
ROA not before:           Fri 19 Jan 2024 00:13:55 +0000
ROA not after:            Fri 17 Jan 2025 00:18:55 +0000
asID:                     273412
IP address blocks:        200.196.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:69:3e:8c:6e:a5:bb:e4:fd:05:7b:33:96:2d:76:4c:51:2a:2f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 19 00:13:55 2024 GMT
            Not After : Jan 17 00:18:55 2025 GMT
        Subject: CN=54AB03D6A169ED326883FDF25A1FF69F0A02BA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:d4:0f:19:97:6c:72:bb:d8:49:6d:ed:52:
                    1a:e5:b2:7a:01:19:a5:2f:2e:a3:8b:d9:d8:bc:05:
                    f0:c1:28:86:1e:cc:9a:14:62:43:06:0f:43:7a:01:
                    c9:da:02:f0:5a:2a:ca:e9:ad:f6:41:19:69:c5:2d:
                    7e:d4:ec:83:be:99:68:dc:5d:d7:4b:6f:8f:12:68:
                    9d:0f:4c:1d:70:f7:ef:6d:f1:b8:bb:74:7c:ce:fb:
                    14:17:d4:2a:08:66:c4:12:36:d0:e4:8e:e8:8e:27:
                    00:2c:18:06:fa:55:05:a6:48:a5:02:1a:96:10:1f:
                    9c:9c:f2:33:e9:4c:54:32:2d:4f:9f:bf:f6:1a:8c:
                    59:03:a4:e4:11:a8:5c:7c:32:b4:75:97:59:f8:ca:
                    e7:82:4f:d6:3d:ea:cd:79:c6:dd:3e:7d:bd:70:2f:
                    4b:68:71:50:e6:fc:2a:bd:90:4c:2d:af:b0:55:e9:
                    58:3d:3f:4a:95:9f:c3:82:5a:a3:55:ef:a8:11:17:
                    b3:20:cf:3c:9f:4d:ad:32:84:45:5b:3a:09:af:d6:
                    5d:fe:7e:95:91:f6:63:70:83:40:6b:97:99:db:70:
                    f4:15:58:14:42:66:04:a6:49:58:75:93:84:36:6c:
                    ef:5b:0b:da:ee:94:c6:e3:df:0a:7b:98:3e:dc:a0:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:03:D6:A1:69:ED:32:68:83:FD:F2:5A:1F:F6:9F:0A:02:BA:92
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32342d3234203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:73:9d:14:de:d5:1f:54:09:0f:86:79:58:63:16:bc:3b:
         25:55:92:87:a1:1a:4f:4f:38:8b:d5:37:35:af:7e:e6:a7:b7:
         67:7b:39:76:66:fa:63:c9:59:72:0a:ed:0d:a6:2e:78:d4:7b:
         64:d2:4e:f4:36:3b:3b:82:3d:5c:bf:ac:15:04:cb:63:d3:c9:
         5f:01:ae:a3:37:fe:ab:9b:47:a3:a5:ea:bc:01:9d:d1:f5:b7:
         cc:ac:d9:dc:c8:99:28:9b:ef:53:17:14:d2:2e:86:1c:3c:44:
         0f:e2:97:99:8e:93:f1:8c:27:ce:d0:fb:3f:e0:eb:be:91:84:
         b9:e6:97:65:86:d6:ab:43:d3:0f:dc:da:0f:be:44:94:6c:e6:
         99:71:6b:52:09:c7:63:ec:25:05:a2:d9:dc:6d:c5:d5:95:1f:
         28:3f:96:8a:d3:fe:b7:69:21:a4:e0:73:42:d1:3f:79:5e:85:
         b5:00:bc:09:23:fb:3c:59:c0:0f:5d:93:76:e0:13:f6:b3:6f:
         00:d2:d9:06:5f:6e:ac:9b:db:9a:89:4b:2a:19:19:81:7d:77:
         ab:2c:be:86:80:64:0a:90:b3:18:45:43:8f:b8:d8:ba:95:46:
         a4:70:a1:70:45:a6:49:1e:12:cc:4c:66:64:b3:5e:a7:a2:0b:
         61:2c:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org