Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa
File:                     3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (raw, json)
Hash identifier:          GgBQ9BrqVJ8S1MVGHggnTop3c2TGQ3jd8FHufDdFobg=
Subject key identifier:   9A:54:35:34:64:44:6D:A8:36:68:8E:63:3F:D7:FF:BF:64:EA:C3:38
Certificate issuer:       /CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
Certificate serial:       532DE6282FC01317875ADFE969276750DDC67AAD
Authority key identifier: 91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa
Signing time:             Thu 07 Mar 2024 18:15:01 +0000
ROA not before:           Thu 07 Mar 2024 18:10:01 +0000
ROA not after:            Thu 06 Mar 2025 18:15:01 +0000
asID:                     270437
IP address blocks:        200.11.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:e6:28:2f:c0:13:17:87:5a:df:e9:69:27:67:50:dd:c6:7a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9153E8AC57500B9F6FAD7507DD47F690C821A068
        Validity
            Not Before: Mar  7 18:10:01 2024 GMT
            Not After : Mar  6 18:15:01 2025 GMT
        Subject: CN=9A54353464446DA836688E633FD7FFBF64EAC338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:31:00:be:d8:94:91:e6:eb:b4:fe:f7:a6:
                    d1:89:bc:4e:91:22:6e:c6:a0:20:43:d1:61:ae:c7:
                    5d:62:85:a8:9b:b2:f2:00:35:88:cd:41:18:d1:08:
                    ec:5c:69:aa:68:be:d5:56:76:0c:c5:e5:7d:cb:4b:
                    db:6a:14:24:63:c3:1c:10:4a:d5:27:b9:23:da:49:
                    0c:92:f3:ee:ad:66:b1:81:e1:9e:08:6e:1e:81:90:
                    25:88:37:a5:27:2a:c4:8f:49:05:3d:2b:1b:ff:05:
                    6c:31:85:86:28:30:fb:76:a7:cc:64:1d:6c:6a:3d:
                    1f:06:ee:52:fc:b1:d9:5c:06:ae:ec:ca:77:70:6b:
                    8d:37:de:ca:59:67:c1:f9:27:cf:2f:4d:36:74:d3:
                    a3:5e:0b:d7:67:f2:78:b4:77:3b:7c:4a:e2:e6:fb:
                    20:11:ea:42:17:18:4f:7c:73:72:26:06:01:fa:80:
                    1e:4a:34:da:0b:1d:d4:93:d1:ec:68:d2:71:be:bd:
                    43:40:44:e5:fd:ae:f0:29:0b:e3:84:00:68:46:b5:
                    a0:32:a4:48:49:fd:48:c4:f7:c2:74:ed:90:4b:37:
                    87:6d:04:0e:63:6f:52:cd:7b:a7:c8:0e:9f:1e:eb:
                    77:f2:e8:da:2e:57:9e:38:d2:c1:d0:e6:14:ef:dc:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:35:34:64:44:6D:A8:36:68:8E:63:3F:D7:FF:BF:64:EA:C3:38
            X509v3 Authority Key Identifier:
                keyid:91:53:E8:AC:57:50:0B:9F:6F:AD:75:07:DD:47:F6:90:C8:21:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9153E8AC57500B9F6FAD7507DD47F690C821A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:61:bb:a2:96:d8:fd:80:e1:1e:44:86:90:3f:68:7d:f9:de:
         49:47:4c:f3:cc:3c:2a:16:cc:e4:a2:4d:4e:c2:dc:eb:12:58:
         9e:bf:b0:8e:17:6c:9c:05:61:0f:9e:ea:0e:64:cf:5d:a9:a3:
         21:84:bf:55:51:af:dd:23:d5:4f:a8:d5:e3:30:8f:a8:02:65:
         90:92:2f:81:94:4c:eb:bf:58:0a:0f:10:11:ae:cc:22:51:d2:
         70:78:4d:5c:00:a7:75:e3:ca:7e:8e:e4:8e:1a:9e:cb:56:8e:
         9b:c3:a6:3d:66:4c:ba:68:07:fb:37:d2:ce:2b:d7:78:6f:ed:
         3f:26:a4:2f:71:2f:4c:89:78:4a:cf:70:64:c5:61:8a:b5:f2:
         f2:43:f8:49:19:b0:d2:de:a3:d3:de:c4:34:8c:11:5a:e4:26:
         d9:23:40:77:84:18:8b:5d:92:8a:27:ea:84:e7:46:b2:b2:7c:
         7f:5d:fc:24:61:b1:ab:72:39:df:e1:62:3a:cd:3c:0c:72:ad:
         1f:d3:45:9d:4d:f5:e3:da:8e:63:23:f9:ae:26:1b:6c:65:6b:
         de:5c:68:e4:2b:cf:e5:94:c9:0f:bc:5d:53:6e:44:a1:8b:c2:
         3c:7f:2c:6d:6b:87:71:f3:96:a2:54:06:3b:c7:79:f1:97:40:
         b4:2d:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org