Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
File:                     3230302e33392e36342e302f31392d3234203d3e203533303436.roa (raw, json)
Hash identifier:          3Ph55yser26WJ/FvkLedip5wgMNA8/nw/y+4Is3OyQA=
Subject key identifier:   29:5C:67:C7:AB:50:C7:8C:D8:40:2F:CA:86:FD:E8:BE:C8:68:CB:94
Certificate issuer:       /CN=D518634D88143C0017F61EB6C5447D28D1D13616
Certificate serial:       7BE045432678580BF56E03D90AC670EA75F19703
Authority key identifier: D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
Signing time:             Thu 04 Apr 2024 04:00:19 +0000
ROA not before:           Thu 04 Apr 2024 03:55:19 +0000
ROA not after:            Thu 03 Apr 2025 04:00:19 +0000
asID:                     53046
IP address blocks:        200.39.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e0:45:43:26:78:58:0b:f5:6e:03:d9:0a:c6:70:ea:75:f1:97:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Validity
            Not Before: Apr  4 03:55:19 2024 GMT
            Not After : Apr  3 04:00:19 2025 GMT
        Subject: CN=295C67C7AB50C78CD8402FCA86FDE8BEC868CB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:20:d5:8b:85:96:68:bd:0d:4f:ec:59:9d:
                    4e:01:ad:4f:ef:4c:3b:25:76:a7:a6:35:27:af:d8:
                    84:b4:15:8d:ea:7c:90:46:07:3f:31:8c:00:e3:d5:
                    ce:f1:45:09:b6:f5:18:d1:92:cb:f1:7e:00:32:de:
                    74:54:b9:31:83:db:fa:43:3e:98:2c:4f:66:c1:17:
                    73:3a:3f:8e:29:7d:db:51:b5:50:aa:f6:22:c9:af:
                    0c:6a:90:36:55:bb:7c:10:c7:6b:e9:3d:b0:57:18:
                    b3:78:d8:39:c2:c6:32:87:76:8a:0e:80:8b:26:4d:
                    fb:26:30:9d:98:a3:d6:7b:7b:60:f3:66:b6:8c:4a:
                    41:e9:a6:d1:44:53:b3:55:09:e4:1b:54:dc:10:2e:
                    1c:f4:0e:4f:3e:c1:3f:f1:57:ca:83:e7:d3:4f:c4:
                    0b:03:18:d3:3a:60:26:cc:ca:af:bc:c5:2b:72:59:
                    2c:ee:dc:86:2f:33:dd:f0:9b:9a:c7:a5:eb:dd:f4:
                    49:78:66:f6:be:6c:27:e9:c7:44:c2:8a:24:b8:6f:
                    b0:08:c0:35:95:40:cc:5d:0d:70:b8:af:1f:37:30:
                    9d:2c:ba:3b:63:ed:01:fd:5d:06:4e:2c:ae:03:c3:
                    ec:3d:e4:9c:ec:10:d7:ba:c9:7e:fc:f9:db:ee:3c:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:67:C7:AB:50:C7:8C:D8:40:2F:CA:86:FD:E8:BE:C8:68:CB:94
            X509v3 Authority Key Identifier:
                keyid:D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3230302e33392e36342e302f31392d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:d5:cd:49:a9:c5:24:9f:88:ec:ca:86:52:70:34:fc:07:
         c6:50:1f:7b:91:e7:02:8f:34:e7:4d:96:85:e2:03:c5:05:8f:
         cf:82:f5:1a:80:ef:b0:9d:88:b7:15:45:66:df:03:02:f3:41:
         2c:f9:cd:ef:fa:cb:2f:9c:93:6a:5f:b8:c3:ce:22:5a:27:eb:
         83:ba:56:c7:4d:c9:68:ac:43:01:51:c7:64:ce:e1:e7:e4:b3:
         cf:c4:82:5d:ba:9b:6f:52:f3:d0:9b:f3:c5:88:bf:ce:17:f4:
         e4:63:05:ba:3e:8c:ba:56:b6:33:c2:26:c7:bc:55:ba:01:13:
         ca:fc:b9:80:89:9b:9a:20:83:d9:db:04:ea:12:fc:19:c1:57:
         01:bd:18:9d:e1:e8:0f:42:21:53:1d:9b:83:ab:b9:95:3a:2e:
         40:c3:1a:4b:26:6a:7c:d6:e1:84:c7:ce:f4:ef:cc:eb:27:8c:
         48:39:a5:81:d2:eb:79:99:39:1b:c5:53:e8:68:5e:97:14:05:
         a0:6d:26:0c:2d:e4:2d:6b:7e:dc:9d:3a:c7:d6:56:50:93:5d:
         d8:58:dd:7a:51:fe:56:67:44:35:3b:a3:91:c0:fd:1f:c6:f4:
         e2:69:aa:a6:3e:c9:c3:a9:d1:5b:fb:b1:6b:86:72:1f:c8:0a:
         41:71:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org