Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa
File:                     3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa (raw, json)
Hash identifier:          KGd20eCG96TyV/DRl92NCu7wWYEm0YAfTwHR4dtinM4=
Subject key identifier:   A2:71:29:0D:F0:EA:B8:3A:1C:A6:61:84:74:F4:0F:9C:61:76:6B:89
Certificate issuer:       /CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
Certificate serial:       6B3A98677F8F3C3614F299CB5744205225472FFE
Authority key identifier: 0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa
Signing time:             Wed 03 Apr 2024 18:30:39 +0000
ROA not before:           Wed 03 Apr 2024 18:25:39 +0000
ROA not after:            Wed 02 Apr 2025 18:30:39 +0000
asID:                     28576
IP address blocks:        200.220.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3a:98:67:7f:8f:3c:36:14:f2:99:cb:57:44:20:52:25:47:2f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=A271290DF0EAB83A1CA6618474F40F9C61766B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:f2:f6:c6:67:fc:12:89:30:d2:34:97:da:
                    8f:45:1f:49:74:ff:14:16:61:2d:5b:ce:4d:07:9a:
                    fb:44:b3:0b:a4:a6:93:4b:cc:89:bc:4b:29:1d:70:
                    94:af:04:6e:b6:07:96:97:e6:af:7d:bc:7d:d1:9b:
                    f3:e7:3d:57:97:45:42:0e:fe:79:1b:ac:81:62:aa:
                    1d:84:bf:3b:6e:4f:fc:a3:2a:23:f0:84:17:67:99:
                    c8:9a:b6:cf:5f:5f:e7:e6:ce:07:17:6d:64:ca:8e:
                    80:e6:8f:cb:4d:7a:50:06:a9:1c:95:d4:32:d9:91:
                    cb:8a:91:0b:92:9b:bc:36:d1:67:d3:c6:d4:8d:83:
                    02:4f:ac:48:87:17:e9:94:13:34:43:bf:83:8a:26:
                    d8:01:cf:70:9a:49:b5:b2:36:89:55:d9:50:0f:4e:
                    42:49:1f:c0:b2:d6:87:4d:6c:55:e9:ae:00:29:a3:
                    25:54:ee:3a:6e:56:39:87:b6:0e:16:52:4a:c6:35:
                    f4:e4:e3:b6:1a:0d:9c:b0:e3:bc:b3:c0:85:66:9a:
                    1c:0d:a1:e6:54:cd:58:ba:cd:6c:01:1a:08:9f:22:
                    82:d7:75:e7:c9:66:d7:78:1f:59:9b:0a:c2:49:5e:
                    b9:7c:88:e6:a1:ea:59:a2:93:d4:8d:1d:73:a3:dc:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:71:29:0D:F0:EA:B8:3A:1C:A6:61:84:74:F4:0F:9C:61:76:6B:89
            X509v3 Authority Key Identifier:
                keyid:0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3230302e3232302e3134342e302f32302d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:12:cb:57:8b:15:8e:11:9a:dc:b5:18:a0:d6:3a:84:3f:
         af:56:f3:86:d1:c2:20:55:3d:39:ba:a1:9f:8c:45:13:a0:d5:
         c8:71:66:ab:42:a2:6e:e4:c0:9e:51:26:9d:84:51:e0:b3:e4:
         3f:5c:12:c7:72:aa:79:c4:77:cd:30:d1:72:7f:b2:a9:61:b7:
         1f:a6:61:94:74:05:2a:df:3a:ec:64:63:c1:4f:af:0a:19:27:
         64:93:36:00:40:81:d4:64:48:98:28:5f:2a:b9:4b:c9:4c:f2:
         6d:fc:de:cc:60:87:6f:a0:ad:fb:60:2d:43:dc:0f:c7:2e:72:
         e6:66:ab:c9:96:9e:16:fa:1f:f7:fb:c2:4c:16:7f:a3:dd:a6:
         74:81:d3:35:b7:47:35:52:77:04:53:26:70:e7:0d:62:92:38:
         06:8e:db:9f:d9:01:65:39:09:be:a3:d0:8c:0f:10:6b:b3:e8:
         bb:ba:5b:33:72:fa:84:a5:ea:c0:98:21:08:e2:8c:39:94:74:
         e5:72:20:09:17:28:03:91:03:0c:0f:e1:70:f0:81:e5:89:94:
         0b:26:92:25:2b:98:9c:c1:a0:9a:c6:43:04:70:43:72:52:5d:
         44:f5:52:15:5d:2a:f4:36:b1:4a:d8:b3:27:dd:81:4b:29:c9:
         40:f1:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org