Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
File:                     3230302e35322e31362e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          BL8ZFfdvxYHjtLhnH2tz+pOSHxJPfQ3woB7CCu72SG8=
Subject key identifier:   88:26:26:08:9F:C7:85:95:D8:54:14:FE:AC:E3:DD:D2:33:B8:8D:F2
Certificate issuer:       /CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
Certificate serial:       1AE7F8276ACFB8ECB91F1575108DEEE9F8E5EA5A
Authority key identifier: 83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
Signing time:             Mon 22 Jul 2024 17:09:35 +0000
ROA not before:           Mon 22 Jul 2024 17:04:35 +0000
ROA not after:            Mon 21 Jul 2025 17:09:35 +0000
asID:                     262659
IP address blocks:        200.52.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:f8:27:6a:cf:b8:ec:b9:1f:15:75:10:8d:ee:e9:f8:e5:ea:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93
        Validity
            Not Before: Jul 22 17:04:35 2024 GMT
            Not After : Jul 21 17:09:35 2025 GMT
        Subject: CN=882626089FC78595D85414FEACE3DDD233B88DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:b6:b3:c3:12:e7:32:aa:16:0f:8c:50:89:
                    b2:ae:17:6e:b2:8f:c3:c6:b9:3e:4f:13:c5:73:7d:
                    b4:de:33:66:7a:8b:8c:01:87:43:07:a8:21:fc:c5:
                    62:e0:02:ef:5f:4d:77:96:5b:ff:34:7f:97:e8:7d:
                    6c:28:50:31:f0:1f:ac:f2:fb:82:53:51:07:89:41:
                    8b:5c:a9:f2:05:d9:66:33:9b:19:c2:5d:e0:51:9e:
                    ec:4b:d9:16:4b:b3:0e:71:fa:bb:ed:fd:fb:a0:b7:
                    e7:24:da:23:42:69:1c:91:5a:f5:e0:37:f5:06:4c:
                    37:3d:13:50:90:9d:bd:26:5c:e5:0a:a0:16:d9:73:
                    98:78:66:01:74:06:4a:c1:2c:0e:73:0d:b9:f2:4f:
                    1e:d9:1c:ca:6b:16:3a:eb:59:93:08:b8:82:8f:00:
                    07:80:6a:c1:bd:7e:ef:67:c3:c5:42:6e:15:43:cb:
                    a7:58:2c:bc:3b:4f:d2:88:07:d3:5d:b9:70:e1:8d:
                    b0:49:17:17:b6:de:5a:3a:61:01:0c:3f:cd:08:6e:
                    b6:9a:aa:a3:ba:92:14:c9:68:5e:db:32:d6:82:9f:
                    d5:85:73:c5:9d:b3:39:28:8f:53:d9:62:af:61:fe:
                    aa:76:fc:92:e6:4a:0d:ce:58:e3:fe:22:3a:df:bb:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:26:08:9F:C7:85:95:D8:54:14:FE:AC:E3:DD:D2:33:B8:8D:F2
            X509v3 Authority Key Identifier:
                keyid:83:42:F0:23:EF:F7:81:F7:DD:CA:9D:2F:B5:9E:4F:AB:5B:51:0D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8342F023EFF781F7DDCA9D2FB59E4FAB5B510D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:62:65:cd:f6:76:91:4d:37:3b:f5:5b:35:4b:f1:ea:71:
         70:19:ff:0f:e4:18:fe:ef:f2:9e:a5:32:9f:89:de:2e:4a:2b:
         d9:4c:24:c2:4d:a2:20:b4:31:99:43:fc:4f:b9:43:e6:60:64:
         a3:b7:7c:9f:d1:d6:66:da:83:5d:2d:5e:8f:2a:1c:a4:54:67:
         dd:91:eb:42:a6:62:e4:2b:5f:40:54:b7:c0:38:cf:68:0b:b9:
         d0:93:e7:08:0b:3c:55:4e:ab:5d:20:41:bb:fd:fb:36:6a:4b:
         d1:59:da:22:ee:44:90:02:fe:0c:c7:bb:03:8c:77:80:25:48:
         14:01:3b:77:00:e4:c1:3a:1c:97:35:9d:ff:ad:da:1d:46:6b:
         de:96:df:91:58:38:42:4d:56:c9:1d:74:39:1d:e5:78:8d:a7:
         c7:d7:97:ed:2f:12:92:28:10:a7:44:d9:d7:09:8a:fb:83:b4:
         c5:8e:cf:a2:49:7d:c3:d2:dc:83:68:54:7e:2f:7b:00:44:43:
         8c:1a:dd:6e:1d:38:52:de:ed:48:e4:38:bd:58:9d:ed:cb:e5:
         30:f4:ea:9b:1e:c1:93:42:a7:4f:7c:9f:71:cb:0f:bb:5d:8e:
         ab:11:ca:43:4b:7f:61:5d:90:1b:b4:76:75:9c:75:5f:f4:48:
         24:db:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 16:28:30 2024 by rpki-client on console-fra.rpki-client.org