Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34312e302f32342d3234203d3e20323733343132.roa
File:                     3230302e3139362e34312e302f32342d3234203d3e20323733343132.roa (raw, json)
Hash identifier:          V1BGF2zqbb8bjhO6yU7Qibqefng2x22Z9tTKlQ/fQRI=
Subject key identifier:   58:57:03:72:F3:EF:EA:01:CB:3E:06:F1:21:B0:AD:65:DD:E0:81:0C
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       08D0B0E162FD618592190DC7240B0779EA210CA3
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34312e302f32342d3234203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 12:36:19 +0000
ROA not before:           Mon 22 Jan 2024 12:31:19 +0000
ROA not after:            Mon 20 Jan 2025 12:36:19 +0000
asID:                     273412
IP address blocks:        200.196.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d0:b0:e1:62:fd:61:85:92:19:0d:c7:24:0b:07:79:ea:21:0c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 12:31:19 2024 GMT
            Not After : Jan 20 12:36:19 2025 GMT
        Subject: CN=58570372F3EFEA01CB3E06F121B0AD65DDE0810C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:28:3b:c2:d3:1e:9b:35:af:96:57:d2:2f:
                    27:33:c8:d2:f3:da:2d:11:83:69:a7:52:ac:a0:2b:
                    9b:3a:40:04:d3:ad:0b:19:a3:92:74:89:7d:52:c3:
                    31:b5:fd:ba:97:46:f8:15:ec:6b:8e:e4:f8:97:bb:
                    31:8c:85:9f:d0:35:5b:52:48:2b:50:1e:0c:60:5d:
                    0d:b5:e7:20:af:0e:3f:22:eb:a2:55:5a:07:69:00:
                    7d:4f:3a:1e:2c:e6:13:bf:f9:cb:13:17:62:01:42:
                    9a:8e:da:a6:ef:d4:8e:73:cb:35:94:c7:3e:3b:55:
                    41:74:1c:20:ab:ed:65:0d:2d:40:65:4d:10:0e:9a:
                    51:69:52:9f:fa:8b:08:46:e8:d1:a2:c2:17:45:0c:
                    c2:9b:3f:e8:1c:2d:56:42:fa:7b:e7:16:9e:bc:2a:
                    75:73:f6:b1:19:fe:20:97:e7:2b:e7:9f:b4:74:94:
                    fe:82:de:d0:30:69:93:a3:67:d7:e5:e6:9d:3e:5a:
                    d4:b0:44:af:ae:2a:f1:2d:97:29:24:e3:7a:9a:40:
                    d9:d3:38:a1:f8:7f:39:d0:24:9a:f3:e4:cc:21:01:
                    be:e4:8c:17:e0:7f:fb:a7:20:9b:44:bd:ea:44:81:
                    a3:1b:bf:ad:ff:3a:b2:24:00:b7:49:fb:b1:11:90:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:03:72:F3:EF:EA:01:CB:3E:06:F1:21:B0:AD:65:DD:E0:81:0C
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34312e302f32342d3234203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:10:15:3e:61:0d:4d:f4:02:1e:c0:03:1c:19:57:c9:9f:e4:
         c8:c7:d9:7d:95:cb:9e:cb:19:08:1a:d3:43:2d:f0:c0:c2:b9:
         35:f0:97:75:67:be:1c:1a:71:c2:4e:61:11:bc:df:9a:71:a9:
         9d:57:61:15:47:62:d2:72:a7:79:24:80:96:92:26:3c:14:55:
         c9:4a:36:67:35:2a:f6:67:b0:8a:ba:50:5e:9e:c2:2d:f1:c4:
         4e:ab:1a:1c:b1:6f:77:b7:05:a7:62:f0:58:c8:d5:2f:aa:e9:
         c2:86:91:24:11:e9:a0:25:ed:63:1a:49:ee:64:9e:7f:57:a8:
         75:32:b9:b0:a5:90:13:85:3d:2f:9d:f4:38:a8:35:1a:e1:87:
         ff:d0:2c:94:ba:4a:56:2e:35:07:6f:45:a3:c9:78:63:21:85:
         06:32:ec:a4:f5:8d:7a:a9:8e:bb:99:08:8c:5a:c3:2c:26:69:
         b2:a0:01:68:b2:1e:81:dd:49:0b:7e:63:7f:ae:3b:cd:23:00:
         06:2f:0a:0d:45:e0:88:88:47:e7:01:1b:7f:e9:a7:0c:be:c2:
         41:6c:65:96:46:d8:c6:17:c0:f9:f5:7c:ff:7b:14:4e:4a:39:
         b4:7f:c4:e2:81:30:f5:30:ce:ba:56:07:7a:8a:b5:4c:c2:f3:
         75:28:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org