Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
File:                     3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa (raw, json)
Hash identifier:          Dibau1AfAznoQ3mnW9Yr/EF/U7KtTBE32vTtRf2vEgc=
Subject key identifier:   2F:9E:55:C3:18:6A:FC:60:42:F8:12:87:09:4D:86:DA:59:31:F6:F0
Certificate issuer:       /CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
Certificate serial:       6E01069DDB5514CD5BAC927109B9BA2C89B38E13
Authority key identifier: B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
Signing time:             Wed 03 Apr 2024 13:53:36 +0000
ROA not before:           Wed 03 Apr 2024 13:48:36 +0000
ROA not after:            Wed 02 Apr 2025 13:53:36 +0000
asID:                     270266
IP address blocks:        200.115.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:01:06:9d:db:55:14:cd:5b:ac:92:71:09:b9:ba:2c:89:b3:8e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8470C10AC644BEF4DF266924C4E0832C8FBA8A2
        Validity
            Not Before: Apr  3 13:48:36 2024 GMT
            Not After : Apr  2 13:53:36 2025 GMT
        Subject: CN=2F9E55C3186AFC6042F81287094D86DA5931F6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:26:bc:67:49:af:4f:f5:e8:5e:23:7f:3f:
                    1a:95:d1:be:bd:77:17:a1:96:ed:a1:88:45:40:47:
                    af:ac:05:76:0a:d9:d7:aa:bb:5b:ce:67:ec:06:f4:
                    e8:53:8c:03:a2:5d:07:c4:2b:2c:45:19:1a:97:0c:
                    a4:66:42:2a:d6:ef:16:a7:b7:75:bc:e9:bb:da:e7:
                    09:c3:03:09:d4:4f:32:ed:e6:3d:72:56:db:a9:e9:
                    c5:8d:d7:f3:cb:94:45:cd:df:42:07:c9:7b:7a:0b:
                    a2:14:67:53:6e:69:46:27:50:b7:3e:2f:90:bc:0b:
                    f4:13:b3:75:6d:5e:a7:8e:30:27:5e:ea:cf:90:ef:
                    05:47:84:a2:38:34:0a:07:55:d3:b7:57:ad:1e:20:
                    8f:fe:d1:12:44:62:cd:6c:d4:46:92:2e:54:cd:a1:
                    3d:0a:f3:f1:08:3a:6a:da:ab:89:6c:8b:de:73:65:
                    8b:7b:89:29:83:ca:11:8f:a2:f7:3c:fc:d7:48:9a:
                    77:e3:a9:18:03:29:61:4a:43:36:9b:60:d1:d5:ea:
                    bc:84:5c:0b:11:8a:b9:f3:df:da:b0:14:06:9d:d5:
                    b9:ab:6b:9c:11:c7:e5:eb:dd:64:04:95:fb:fc:e4:
                    cc:2b:9f:38:99:05:50:3b:8c:86:1d:5a:26:23:25:
                    d5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9E:55:C3:18:6A:FC:60:42:F8:12:87:09:4D:86:DA:59:31:F6:F0
            X509v3 Authority Key Identifier:
                keyid:B8:47:0C:10:AC:64:4B:EF:4D:F2:66:92:4C:4E:08:32:C8:FB:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8470C10AC644BEF4DF266924C4E0832C8FBA8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:69:f4:e7:33:ee:a4:b2:7a:35:3f:63:03:46:30:0e:f1:a4:
         65:85:f1:b0:fa:e4:30:4f:f2:c7:5b:77:10:c0:b7:30:24:58:
         ec:7e:c9:b8:c2:de:94:26:1e:27:b6:e0:9a:95:55:72:6d:91:
         1b:64:97:ee:5c:e6:06:bb:76:37:51:f2:85:91:63:b0:8a:60:
         e6:2a:5f:cf:54:cf:60:50:fb:c9:84:f0:88:60:65:8a:19:ab:
         53:8b:85:d3:0c:3c:2e:90:83:ea:81:18:84:55:0a:b8:e5:0c:
         e6:f6:ba:7d:e8:99:17:98:0f:4c:0f:86:ec:0e:0a:ff:7d:86:
         4f:e1:78:5f:a1:cb:3a:f0:4e:22:5e:67:f7:d5:a9:64:4a:a6:
         09:c0:81:df:6e:6d:99:84:e2:ab:c2:86:76:3d:69:6c:4c:a0:
         eb:18:17:12:f6:d4:a7:7a:56:ab:56:e7:31:aa:1e:9f:f9:35:
         41:ad:62:f7:4c:31:89:08:93:e5:03:2c:62:b9:79:77:2a:5e:
         de:7e:0d:50:dc:19:05:79:a2:df:4b:91:79:59:51:a6:12:c9:
         79:25:35:e3:ec:29:8c:36:e3:ed:0d:e0:9a:8b:0a:cf:04:aa:
         f0:df:32:8d:88:86:a6:38:82:46:e3:7d:d7:fe:60:13:c6:2f:
         04:66:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org