Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e31382e302e302f32302d3234203d3e203130373135.roa
File:                     3230302e31382e302e302f32302d3234203d3e203130373135.roa (raw, json)
Hash identifier:          jg8GMK6NcSc0hOH2xvAT8jG15xYLLHzNnPPnoHLQDOo=
Subject key identifier:   B7:2A:C1:0B:DC:BA:50:44:1C:34:3E:D4:01:D5:AD:F7:29:26:F4:AA
Certificate issuer:       /CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
Certificate serial:       436D7650C9CE71E87A340CCF5A80AA1EC7566FE4
Authority key identifier: 2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e31382e302e302f32302d3234203d3e203130373135.roa
Signing time:             Mon 25 Mar 2024 12:02:30 +0000
ROA not before:           Mon 25 Mar 2024 11:57:30 +0000
ROA not after:            Mon 24 Mar 2025 12:02:30 +0000
asID:                     10715
IP address blocks:        200.18.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6d:76:50:c9:ce:71:e8:7a:34:0c:cf:5a:80:aa:1e:c7:56:6f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE1F8738603CEBF287DD62540FEF561C1AF87C5
        Validity
            Not Before: Mar 25 11:57:30 2024 GMT
            Not After : Mar 24 12:02:30 2025 GMT
        Subject: CN=B72AC10BDCBA50441C343ED401D5ADF72926F4AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:71:58:4a:c1:91:94:c8:14:d9:10:2a:c4:
                    d3:ac:02:0f:c9:84:a8:41:62:9e:2e:64:99:9e:1f:
                    23:36:de:84:52:00:6d:aa:2f:b2:41:d4:db:c2:49:
                    db:88:93:a2:29:4a:90:f9:c6:f5:00:e1:47:50:ec:
                    0a:ae:bb:7c:1b:c6:21:60:c4:25:ac:cf:29:e9:bb:
                    1c:99:9b:18:aa:47:20:37:ea:5a:bf:83:5e:2a:b3:
                    70:fa:ad:fe:56:a9:49:4f:11:aa:5f:fc:93:40:2f:
                    af:68:b6:d0:98:8a:df:98:67:d1:72:a3:99:62:e1:
                    97:20:7c:df:15:bc:ed:26:89:da:38:96:45:83:6b:
                    b1:34:cf:77:6e:2c:ab:e5:16:ad:6e:32:94:12:3e:
                    ba:ec:c3:5a:41:44:26:d7:e2:65:c6:86:07:5a:9d:
                    b5:33:07:89:56:5f:38:9b:79:b6:43:19:5c:b9:77:
                    38:ec:10:72:61:45:e2:f0:a2:f7:1d:5d:c8:a4:94:
                    95:b2:09:f1:d0:11:9a:d9:d8:69:de:8c:97:64:78:
                    7e:f2:e2:4c:f1:61:ee:3c:3c:2e:9a:eb:5c:24:07:
                    98:0e:25:dc:c1:a6:33:ff:27:7a:ea:01:be:30:62:
                    50:64:90:d0:e5:d4:86:f4:71:e0:d3:b8:cb:26:38:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:C1:0B:DC:BA:50:44:1C:34:3E:D4:01:D5:AD:F7:29:26:F4:AA
            X509v3 Authority Key Identifier:
                keyid:2C:E1:F8:73:86:03:CE:BF:28:7D:D6:25:40:FE:F5:61:C1:AF:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CE1F8738603CEBF287DD62540FEF561C1AF87C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/0/3230302e31382e302e302f32302d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:2b:40:87:61:5b:ef:9b:b0:00:8a:3a:8f:59:73:4b:34:
         b6:1f:52:e2:7f:a0:16:52:d0:20:81:69:eb:93:d6:b2:7c:45:
         2a:dc:1c:12:89:4c:15:3c:af:39:a8:54:82:97:87:13:1f:ba:
         8d:84:0d:4a:dd:ad:6e:90:4b:19:21:76:18:85:14:69:52:fb:
         d3:47:3f:3b:e6:c2:82:ca:8d:3f:0c:15:71:9a:d0:7a:63:9f:
         cc:15:fc:c9:78:88:30:a1:d3:84:b4:5f:e9:58:78:40:d3:f5:
         96:3a:4d:e4:e6:60:cf:a7:a9:44:4a:55:d3:29:43:d5:4f:26:
         05:6f:23:40:a7:51:fc:9a:a1:48:54:54:5e:0e:be:92:88:55:
         0c:8b:73:0c:69:ba:80:f3:ce:3e:78:17:db:ad:c2:36:51:26:
         c9:04:74:19:ff:07:ae:7b:23:83:b4:fb:c0:67:22:d4:d3:5e:
         db:ad:88:8b:45:01:13:65:f3:25:d8:8f:6c:7c:79:c8:1a:c1:
         32:b8:19:d8:ee:d5:78:c3:0a:c2:ad:25:28:48:ed:9b:cf:29:
         e3:05:00:54:40:fd:42:85:f3:00:41:34:3c:9d:aa:20:12:37:
         86:33:ae:47:7a:0f:9f:b4:de:c9:47:ff:31:d4:5e:78:3f:9c:
         40:a7:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org