Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa
File:                     3230302e3231392e322e302f32332d3233203d3e20323731303137.roa (raw, json)
Hash identifier:          BmbW6nQE8zlTisRHWNLV0UdXhO6+XDxluCAazadwOw8=
Subject key identifier:   F9:84:6F:D8:76:79:60:79:60:F4:87:E5:E0:FE:0D:56:2B:D7:DC:30
Certificate issuer:       /CN=227999345B6825C592F26D792A9A591CD758367B
Certificate serial:       0FB6879F9F6D9A45840874377B1D012AF1DCB312
Authority key identifier: 22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa
Signing time:             Thu 28 Mar 2024 18:51:21 +0000
ROA not before:           Thu 28 Mar 2024 18:46:21 +0000
ROA not after:            Thu 27 Mar 2025 18:51:21 +0000
asID:                     271017
IP address blocks:        200.219.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b6:87:9f:9f:6d:9a:45:84:08:74:37:7b:1d:01:2a:f1:dc:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227999345B6825C592F26D792A9A591CD758367B
        Validity
            Not Before: Mar 28 18:46:21 2024 GMT
            Not After : Mar 27 18:51:21 2025 GMT
        Subject: CN=F9846FD87679607960F487E5E0FE0D562BD7DC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:f7:42:4f:e2:0b:c1:52:7b:1f:ee:31:9d:
                    29:35:43:d7:ed:1d:9d:e6:fb:39:18:72:12:be:96:
                    08:7b:f4:6d:2a:16:67:50:c4:4b:8f:78:1d:69:02:
                    10:4e:1a:81:ac:53:24:69:8b:77:3d:f9:95:44:72:
                    98:cc:a3:c7:79:30:64:97:c0:95:fe:e5:f7:29:6b:
                    2f:8c:d0:80:38:84:a1:83:05:eb:61:c0:4b:c6:76:
                    81:63:10:c5:a1:7a:bf:2d:05:37:e7:20:91:da:7d:
                    1e:80:f1:e0:2c:bf:36:20:36:d7:ce:d9:3e:64:27:
                    6c:15:d0:98:ba:06:b3:a0:80:3d:d4:89:11:ef:77:
                    5c:16:82:e0:cc:15:6a:03:09:1c:17:31:0e:10:9d:
                    80:eb:f1:a2:f7:d7:ce:9c:bd:6a:5c:98:a6:d1:14:
                    da:f5:10:c2:5a:1f:f2:68:7c:bc:6c:59:18:6f:79:
                    a1:8d:11:0c:83:ab:19:98:86:26:d0:10:a9:4f:75:
                    48:39:be:29:f9:8a:85:49:4b:68:43:fd:3d:a2:f2:
                    7b:58:e9:90:b7:ac:38:66:65:ff:00:c3:15:7b:60:
                    f9:0a:8f:b1:94:13:4d:e2:93:21:36:9a:d0:63:db:
                    38:e9:27:c1:e3:38:b5:83:f7:da:86:98:46:d8:69:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:6F:D8:76:79:60:79:60:F4:87:E5:E0:FE:0D:56:2B:D7:DC:30
            X509v3 Authority Key Identifier:
                keyid:22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/3230302e3231392e322e302f32332d3233203d3e20323731303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:ee:07:56:a5:e9:26:e0:35:15:33:76:db:59:c2:e6:7a:
         e8:be:32:69:ed:47:86:3b:4a:e1:94:9f:21:f2:84:e8:b5:b4:
         f2:f9:23:2b:0a:de:21:12:84:35:af:f9:1a:cb:ad:e3:06:54:
         e9:6d:7c:9f:f2:ca:dd:2f:a4:fb:09:10:12:92:49:46:ec:8a:
         4a:ce:2a:b6:89:2d:be:10:45:a5:61:46:e7:9a:bf:f1:49:89:
         76:05:b0:7b:3f:93:d0:25:3d:df:1d:02:20:5d:c2:a9:9f:13:
         9f:69:af:5f:6a:d7:4d:0e:64:f4:d3:45:7a:82:72:da:db:bc:
         24:59:8d:91:64:50:8a:da:ca:fc:1c:89:c9:60:53:cf:4d:d7:
         27:1c:6c:37:21:2f:fa:0e:0c:f7:17:47:eb:b7:cb:3c:d2:b1:
         78:46:50:e3:cd:79:4f:9f:00:da:e6:0b:64:06:74:bf:5c:39:
         1a:e2:d3:17:36:85:32:d5:02:ea:72:bb:80:ee:2f:28:05:c1:
         1f:46:6d:55:98:a5:7c:f6:f3:6b:79:b9:cc:37:f8:1a:89:f5:
         d8:15:4a:d7:d9:09:95:60:2a:ce:4d:28:77:99:c8:d6:6a:e7:
         fc:0b:c9:9e:37:51:a8:d1:f2:b0:46:0e:ff:81:a2:2b:8e:4b:
         26:40:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org