Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
File:                     3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          6mBpfV5MxK/ZZGa1P5xVVnCDiR1skBHbEUtFTM/QIr0=
Subject key identifier:   6F:8C:F2:A5:BC:79:F7:7C:80:41:F8:80:B1:7D:B3:61:32:94:51:6D
Certificate issuer:       /CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
Certificate serial:       2017F551B863696669424A874AE4CEBEB2AA4C44
Authority key identifier: 70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa
Signing time:             Wed 31 Jan 2024 15:50:02 +0000
ROA not before:           Wed 31 Jan 2024 15:45:02 +0000
ROA not after:            Wed 29 Jan 2025 15:50:02 +0000
asID:                     11432
IP address blocks:        200.170.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:17:f5:51:b8:63:69:66:69:42:4a:87:4a:e4:ce:be:b2:aa:4c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07
        Validity
            Not Before: Jan 31 15:45:02 2024 GMT
            Not After : Jan 29 15:50:02 2025 GMT
        Subject: CN=6F8CF2A5BC79F77C8041F880B17DB3613294516D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:46:ac:e6:e8:ac:2c:2a:ce:87:64:a5:a5:
                    1c:4f:f0:11:9b:67:61:1f:71:f0:43:26:14:64:a1:
                    4e:fd:cf:05:2f:c0:a7:0f:27:1d:3e:b3:5b:97:e3:
                    f2:4c:99:84:fd:ce:af:03:63:dc:69:f7:4b:1a:bd:
                    e7:91:60:50:0c:77:ee:c2:3b:73:dd:ff:ae:ec:ae:
                    98:46:e0:29:18:4d:7a:f1:3f:f7:47:67:ae:61:a9:
                    bd:0a:6f:44:9a:7c:9b:2e:b7:c8:7f:9c:89:2c:0e:
                    99:0e:55:b1:d1:e3:3d:0a:78:67:7c:61:0c:9d:93:
                    8c:c3:fb:5e:d4:9b:78:19:06:6b:5e:3b:7f:f8:b4:
                    a5:e8:ee:28:ee:44:1b:63:b1:df:43:83:de:3c:5e:
                    d8:2f:1b:d2:b0:44:df:08:f2:a9:80:a1:40:0d:8f:
                    9e:9f:a5:bb:2f:50:66:7b:0a:e5:02:65:22:d3:b8:
                    0d:82:bc:ba:7e:58:85:60:2a:93:0d:a4:5f:18:7b:
                    49:a7:e3:b4:be:2a:6d:66:69:8b:c5:e3:fa:60:0b:
                    c4:db:d4:58:fe:75:27:79:7d:45:f2:ae:6c:02:1c:
                    22:6a:dc:88:e6:fb:e5:56:d1:a1:2b:3b:48:e8:11:
                    cc:ca:53:21:41:f8:01:5e:56:15:11:25:3f:7d:85:
                    c6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:F2:A5:BC:79:F7:7C:80:41:F8:80:B1:7D:B3:61:32:94:51:6D
            X509v3 Authority Key Identifier:
                keyid:70:DA:72:42:E1:48:C2:B1:BB:EE:8A:A2:22:CA:F3:FE:B3:BC:DA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/70DA7242E148C2B1BBEE8AA222CAF3FEB3BCDA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3137302e3139322e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:33:6d:13:8b:9d:51:73:16:c2:fa:53:5e:a1:95:28:bf:c0:
         78:08:9c:36:bf:b7:91:9d:09:bf:99:7b:f9:9f:98:72:e4:47:
         67:f3:54:15:2b:87:fe:00:b3:ad:e0:14:42:35:ca:c7:ab:74:
         c6:65:d4:5e:2d:ca:e7:96:0d:70:2f:04:49:8d:7c:80:a6:9a:
         3f:4d:8b:af:35:4b:a0:b6:0e:5f:26:87:6a:e5:ad:8a:20:6a:
         c5:1d:d5:27:8e:ee:c8:4f:7d:66:98:03:f3:53:c8:f6:2b:c3:
         d7:59:c9:55:0f:fc:e6:7a:6b:63:b3:85:67:f8:ff:b8:79:e4:
         5b:52:9c:ff:20:4d:1e:bb:53:94:26:3a:ab:b9:4e:e9:01:a9:
         f5:11:7a:84:3c:54:c0:15:f7:28:52:24:90:42:52:2e:4c:0f:
         4b:59:06:54:42:4b:2f:20:60:d2:95:37:69:f4:ad:31:ba:e6:
         67:88:c5:c3:19:24:5a:a0:7a:8e:09:45:d5:fc:f6:c6:fe:92:
         a2:e6:0c:3c:08:c2:19:34:09:b6:a5:5f:44:d4:75:f7:4b:a2:
         8d:64:5e:6a:b3:08:92:14:aa:c3:50:df:80:8d:41:52:1e:c9:
         1e:8a:c6:45:3e:25:fe:96:33:1c:15:a0:4a:75:b2:f0:25:36:
         9a:7c:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org