Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa
File:                     3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa (raw, json)
Hash identifier:          C2HDkwIoAsAXWwI5gc0pC6Pbos2T1a13/LVHwRKsBaQ=
Subject key identifier:   B0:CD:9F:9C:70:7D:C8:D5:D2:B5:63:B3:D0:F1:43:C8:21:85:DF:0C
Certificate issuer:       /CN=D2F7452DD5564A2585DD665D38AD7886662B208D
Certificate serial:       03AF79012D87885696E1F87754D5210EA706A816
Authority key identifier: D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa
Signing time:             Fri 20 Oct 2023 00:21:26 +0000
ROA not before:           Fri 20 Oct 2023 00:16:26 +0000
ROA not after:            Fri 18 Oct 2024 00:21:26 +0000
asID:                     271641
IP address blocks:        200.194.188.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:af:79:01:2d:87:88:56:96:e1:f8:77:54:d5:21:0e:a7:06:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7452DD5564A2585DD665D38AD7886662B208D
        Validity
            Not Before: Oct 20 00:16:26 2023 GMT
            Not After : Oct 18 00:21:26 2024 GMT
        Subject: CN=B0CD9F9C707DC8D5D2B563B3D0F143C82185DF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:78:df:ab:be:82:c9:b3:15:2c:23:55:96:
                    4f:9c:f8:99:57:42:2f:98:85:81:4c:f8:2f:2e:be:
                    55:ec:de:b2:17:43:40:cc:32:bd:1f:bc:f5:f5:a8:
                    3c:2f:e0:db:da:1e:68:67:d1:3f:36:4b:8d:eb:f2:
                    90:d7:c9:d2:d0:06:bd:81:54:fe:89:83:d3:f9:b7:
                    24:21:69:09:ba:89:df:66:c2:eb:dd:4c:09:6a:f3:
                    c6:fb:ca:54:15:ef:98:59:33:c7:df:62:19:96:ed:
                    3c:09:dc:ae:41:41:3a:27:c2:ee:ca:e5:a9:81:7d:
                    f2:02:e8:d3:89:a1:91:c8:ab:ed:f6:85:6d:f9:e0:
                    74:94:33:86:4f:21:0a:ca:57:30:cc:a4:a6:8e:1b:
                    e6:b4:9c:23:d1:ee:2d:35:d8:47:85:69:55:09:c5:
                    c4:c9:57:bd:92:8c:61:00:ff:68:1b:60:52:4e:9f:
                    1b:5c:92:90:8f:f1:13:3b:b4:0f:de:27:8f:c2:28:
                    6b:c5:c5:2d:79:0d:88:f0:26:5d:05:3a:70:5e:e7:
                    6e:f5:8b:6a:de:7b:7f:1c:58:2c:7e:6d:2b:e7:e1:
                    38:b3:2e:6d:5c:61:8e:fd:55:db:b8:a6:12:ef:fd:
                    63:94:b9:cd:6f:9f:ce:b2:2e:59:90:a1:24:64:0e:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:9F:9C:70:7D:C8:D5:D2:B5:63:B3:D0:F1:43:C8:21:85:DF:0C
            X509v3 Authority Key Identifier:
                keyid:D2:F7:45:2D:D5:56:4A:25:85:DD:66:5D:38:AD:78:86:66:2B:20:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/D2F7452DD5564A2585DD665D38AD7886662B208D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2F7452DD5564A2585DD665D38AD7886662B208D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/0/3230302e3139342e3138382e302f32322d3332203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:52:08:c1:d6:70:fd:7a:8e:64:8a:43:f3:0c:8e:f5:c1:
         7a:49:cb:87:ec:12:a9:b3:28:b2:d2:b0:28:c3:70:c3:e6:09:
         bc:c5:f6:61:92:7f:8c:f3:18:c8:d6:5c:0f:2d:04:84:a1:8e:
         bf:0d:fb:08:06:38:ec:9c:33:56:dd:87:79:3f:c9:b6:7a:68:
         f4:6b:94:3c:00:70:2b:62:d2:7b:b4:10:85:eb:0b:92:97:f3:
         ec:ec:73:63:68:78:a1:e5:f1:8f:09:8d:0d:db:b3:6f:2e:a6:
         e2:78:ba:81:bb:a7:90:a3:2a:38:23:9c:b4:aa:58:14:72:78:
         36:cc:62:b7:65:82:68:52:42:8d:10:2f:58:f6:fd:2e:5e:ac:
         18:df:1b:6b:a8:75:4d:b6:b6:be:02:8c:73:62:fb:d2:c3:45:
         41:11:12:c0:09:8e:8f:57:32:38:84:90:f1:6c:3b:94:0e:51:
         fe:54:46:91:34:ae:e2:4e:79:d8:af:a1:34:70:bd:04:39:3f:
         16:2f:24:b1:82:b5:6c:c2:36:29:2d:dd:ba:95:83:23:87:05:
         86:6d:29:78:3a:0a:26:e4:5a:9f:f7:30:6a:7c:c1:44:0c:7f:
         d7:6a:11:d8:4e:4b:06:cc:c3:f3:c3:f1:22:7e:b0:25:95:84:
         c1:2e:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org