Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa
File:                     3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa (raw, json)
Hash identifier:          uOFvaBP+0HdN5+K+OvlEPZ3X1IO/0Z1LfC0KCd5Vegw=
Subject key identifier:   D5:E2:90:F3:A8:2E:8C:1D:20:21:F5:6E:88:13:A5:F3:DA:B4:06:61
Certificate issuer:       /CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
Certificate serial:       65F3AEBCE8D88E259CF87ECD403A3C548857EB70
Authority key identifier: CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa
Signing time:             Mon 22 Jan 2024 12:36:41 +0000
ROA not before:           Mon 22 Jan 2024 12:31:41 +0000
ROA not after:            Mon 20 Jan 2025 12:36:41 +0000
asID:                     273412
IP address blocks:        200.196.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f3:ae:bc:e8:d8:8e:25:9c:f8:7e:cd:40:3a:3c:54:88:57:eb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Validity
            Not Before: Jan 22 12:31:41 2024 GMT
            Not After : Jan 20 12:36:41 2025 GMT
        Subject: CN=D5E290F3A82E8C1D2021F56E8813A5F3DAB40661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:fa:be:c0:ae:c4:64:57:f7:e1:c7:8c:61:
                    b4:10:4c:15:8b:63:70:24:65:6a:13:c1:a3:c1:57:
                    86:80:16:db:7c:83:1a:34:73:66:05:f7:83:d7:07:
                    2e:99:e1:a1:0b:ca:3b:47:ac:00:e0:d9:b1:fc:95:
                    88:b5:4f:ed:52:61:ac:9b:a0:94:3e:fd:d6:25:bf:
                    aa:4b:4b:c8:a5:eb:4a:63:b4:1b:43:e0:4f:9a:7f:
                    e5:53:7c:f0:20:15:21:76:c6:54:d3:d0:e8:68:d0:
                    c2:5d:2b:d4:30:cc:c9:16:5a:48:9a:e3:3f:1b:ae:
                    ef:a7:30:35:a3:5d:1a:a0:ce:ad:f6:c5:5d:5a:7e:
                    83:4f:b5:23:00:8b:ff:c6:28:35:7e:5e:6f:15:49:
                    33:dc:cc:3c:84:43:8b:ba:de:27:5f:41:2a:24:57:
                    e8:fa:d7:e4:50:da:ee:a2:f6:00:36:36:8b:80:12:
                    ec:0b:37:56:b8:87:f8:ab:93:f6:42:49:24:94:21:
                    8a:02:5b:fa:88:30:48:d4:c7:e4:dd:fc:56:77:61:
                    1a:54:f6:53:e8:11:a8:1a:d4:ef:5d:93:c6:34:c7:
                    95:cd:cd:22:02:da:a7:e6:d9:b0:c6:04:7a:e5:66:
                    cd:b9:30:af:47:02:ad:e4:80:4e:24:1b:23:41:fc:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:90:F3:A8:2E:8C:1D:20:21:F5:6E:88:13:A5:F3:DA:B4:06:61
            X509v3 Authority Key Identifier:
                keyid:CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e7:40:62:27:ff:4f:af:4a:d9:db:8e:6c:e0:f3:e9:83:51:18:
         4f:1c:a6:21:38:1d:f1:46:31:67:84:a1:0b:f4:8d:15:8f:18:
         1d:41:5a:20:09:bd:be:df:a6:eb:71:63:b4:4a:f4:5e:37:75:
         3f:1f:c2:4d:a2:7b:0c:fc:e5:16:da:81:19:c0:7a:23:6a:a4:
         b0:fd:04:8b:08:6e:77:ce:0f:57:8f:1e:f8:88:85:ae:d8:d0:
         1a:a6:90:61:7f:c8:de:83:5d:12:ae:a4:35:6c:12:70:2c:1e:
         81:f0:29:d8:d0:fc:54:0c:5d:5f:fb:b4:f3:c6:de:9b:d2:e9:
         e7:6b:79:c7:af:d1:a7:c8:79:75:69:cb:ea:f9:35:32:17:1d:
         a6:01:63:0a:90:f2:ef:88:4c:67:dc:ea:6b:ee:66:a1:60:ec:
         c3:42:e5:ac:1d:56:51:d1:9a:33:24:a7:1c:8b:b0:46:8b:21:
         7a:13:88:35:c2:f6:e4:6c:9c:62:1e:c9:70:97:c0:63:66:a7:
         f6:b2:08:e5:7a:07:76:fb:36:7b:a2:8e:03:97:21:8c:08:e6:
         0c:c4:1a:1d:63:b6:58:06:59:83:8e:c1:11:a9:7c:d6:53:7a:
         8c:f9:8a:37:8d:01:7e:b8:47:61:26:78:da:29:1b:77:2e:a7:
         26:84:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org