Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
File:                     3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          Y6ErucVpK2L1iV7cczYMHwssDQZWXZ2HsPlGljnoV/Y=
Subject key identifier:   77:B7:40:6C:BE:C0:95:E5:FA:0F:93:80:66:04:D3:76:B8:59:14:63
Certificate issuer:       /CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Certificate serial:       46B4DBCE90963FFD24449C4B4DBAE5527F42BB00
Authority key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
Signing time:             Wed 31 Jan 2024 15:50:01 +0000
ROA not before:           Wed 31 Jan 2024 15:45:01 +0000
ROA not after:            Wed 29 Jan 2025 15:50:01 +0000
asID:                     11432
IP address blocks:        200.155.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b4:db:ce:90:96:3f:fd:24:44:9c:4b:4d:ba:e5:52:7f:42:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
        Validity
            Not Before: Jan 31 15:45:01 2024 GMT
            Not After : Jan 29 15:50:01 2025 GMT
        Subject: CN=77B7406CBEC095E5FA0F93806604D376B8591463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:a9:60:63:fb:63:82:1f:08:c8:df:4e:3d:
                    98:9f:57:f5:f3:4d:16:c8:bb:b2:66:99:c3:c6:db:
                    bb:32:a0:7e:c3:04:39:e8:8c:55:9c:15:85:d2:66:
                    88:bd:50:4c:52:16:99:8c:28:b2:a2:fd:26:1c:b1:
                    84:ff:9a:cd:15:89:09:d4:80:c9:f9:f7:70:31:c5:
                    1f:d0:a3:84:ba:18:7e:ed:42:ac:c8:8c:16:3a:da:
                    64:ec:87:3e:c8:bb:7b:85:9c:30:1e:d0:dd:a6:73:
                    35:47:0a:1f:fa:78:8e:5f:87:95:c5:a0:5f:80:9c:
                    94:d9:a6:69:fa:74:8c:64:aa:40:d0:5c:88:ac:d1:
                    51:8a:f4:ae:f5:a2:79:5c:75:34:d5:ea:0e:41:62:
                    9d:eb:c9:be:7f:36:35:14:0d:0a:84:e0:5d:b0:86:
                    7d:ac:e0:29:0f:19:22:2d:f6:82:9b:f9:59:e0:04:
                    b8:12:c1:6f:63:b0:66:25:21:4f:14:ad:78:ca:c5:
                    d9:20:93:43:94:69:60:0a:07:17:dc:77:f1:16:f4:
                    56:48:ef:77:5e:70:dc:93:d7:56:12:1b:83:a3:45:
                    53:bc:94:d0:2a:78:85:c2:6e:8e:73:de:f7:c1:ad:
                    d6:70:18:f9:e0:13:f9:ae:89:70:b3:3d:54:70:34:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B7:40:6C:BE:C0:95:E5:FA:0F:93:80:66:04:D3:76:B8:59:14:63
            X509v3 Authority Key Identifier:
                keyid:70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:ef:bb:bf:b7:5d:69:fc:22:fb:92:4c:41:e5:bd:45:8e:
         f1:2a:9c:a0:a8:15:42:e8:d8:23:46:53:8a:a4:6e:39:ea:26:
         8a:84:46:bf:d0:c6:93:cd:cb:ec:d1:6f:bd:f9:2e:3b:bb:f8:
         1c:3b:cc:2a:ca:e1:e3:3d:22:0e:ff:2c:d0:ae:9d:10:c7:c8:
         3d:f6:7e:f6:34:37:3e:2f:dd:2e:50:07:02:0b:7f:f7:b0:e6:
         f7:64:98:0f:38:a1:dc:09:50:a2:c6:10:07:56:4a:27:92:aa:
         e3:44:d7:f2:4c:2c:46:30:6d:97:c8:5e:d3:99:4f:5f:17:a9:
         5e:3d:b5:8b:81:16:3d:d2:c9:0b:6d:96:c8:61:d9:15:67:7c:
         71:e9:20:07:ab:98:9e:83:2c:4a:35:09:e9:c9:68:20:f5:31:
         45:54:23:9a:53:c8:f9:28:25:b1:33:fe:04:4c:e2:fc:b5:24:
         e5:de:a5:47:e8:02:22:76:f6:c3:6b:1b:58:94:c7:9b:0f:e6:
         2f:f3:87:91:58:b3:f9:ba:9e:74:a2:a5:22:ca:9c:4c:64:20:
         bf:01:1d:f8:45:4c:ac:e3:bf:fa:68:a1:69:98:34:31:0f:7a:
         23:d5:c9:1e:bb:e6:75:ac:e4:cf:94:b5:e5:e6:35:85:74:9f:
         78:06:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org