Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
File:                     3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa (raw, json)
Hash identifier:          J8Lg7RnQfPu5U3gYHIivB4bQArZY6glbkIcem38PQXI=
Subject key identifier:   9C:E1:DE:F9:CF:47:09:52:ED:B6:EA:02:96:CB:85:F1:BD:7B:54:1C
Certificate issuer:       /CN=93AB60A7B848F96D2A032D245D7866DD3F2465CE
Certificate serial:       410DB66B23A97AE759060768C1A492368AC73C93
Authority key identifier: 93:AB:60:A7:B8:48:F9:6D:2A:03:2D:24:5D:78:66:DD:3F:24:65:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93AB60A7B848F96D2A032D245D7866DD3F2465CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
Signing time:             Thu 04 May 2023 22:44:34 +0000
ROA not before:           Thu 04 May 2023 22:39:34 +0000
ROA not after:            Thu 02 May 2024 22:44:34 +0000
asID:                     23289
IP address blocks:        200.160.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0d:b6:6b:23:a9:7a:e7:59:06:07:68:c1:a4:92:36:8a:c7:3c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AB60A7B848F96D2A032D245D7866DD3F2465CE
        Validity
            Not Before: May  4 22:39:34 2023 GMT
            Not After : May  2 22:44:34 2024 GMT
        Subject: CN=9CE1DEF9CF470952EDB6EA0296CB85F1BD7B541C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:41:ba:6e:c8:5a:fb:9e:c5:51:53:cf:70:
                    29:47:1b:4d:d1:15:04:13:60:fb:a9:5f:05:0b:62:
                    f8:8c:f7:ed:c2:ef:ea:96:11:2d:2b:f1:26:cd:ca:
                    7f:2c:04:c1:ee:c6:68:94:d5:55:ab:35:3d:0a:80:
                    89:e0:40:7c:bc:67:71:8f:78:2a:67:30:e9:af:db:
                    b6:0e:bc:a6:1e:0d:36:da:99:cc:3e:9b:40:fd:47:
                    f3:77:0f:be:6d:05:28:f0:29:e6:f6:10:ba:e0:e1:
                    58:50:c9:14:ab:d6:a8:65:56:75:29:f6:cf:03:c1:
                    8b:fd:7f:c5:92:b7:43:04:88:c5:2b:75:8b:20:e1:
                    2f:5c:1d:26:f7:ea:57:79:de:69:0c:10:c1:d1:ae:
                    ed:19:69:5b:eb:6e:7f:10:af:63:53:4a:ac:8e:fc:
                    59:46:c9:93:3a:a0:0b:bc:89:aa:e1:d1:67:9c:f4:
                    97:e8:26:6a:85:95:16:4f:7a:7e:36:b0:df:f0:e7:
                    31:ae:54:d2:52:3f:6c:05:b3:2b:aa:fd:44:81:95:
                    34:44:b5:14:64:7d:96:b3:d2:76:60:20:87:cc:cb:
                    4d:c4:eb:1e:94:9f:f7:0b:34:62:0a:a6:f6:81:03:
                    5d:66:19:ef:c6:31:82:ff:c5:2a:85:2b:9d:73:96:
                    65:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E1:DE:F9:CF:47:09:52:ED:B6:EA:02:96:CB:85:F1:BD:7B:54:1C
            X509v3 Authority Key Identifier:
                keyid:93:AB:60:A7:B8:48:F9:6D:2A:03:2D:24:5D:78:66:DD:3F:24:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/93AB60A7B848F96D2A032D245D7866DD3F2465CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93AB60A7B848F96D2A032D245D7866DD3F2465CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:fd:b6:0b:45:b5:82:04:6f:03:87:60:ed:fb:cb:03:f4:ce:
         37:c8:0a:aa:05:59:4a:30:f0:16:77:67:d9:f6:da:43:be:e9:
         83:26:61:73:d9:7a:6d:e3:73:6f:c3:be:af:b1:24:d6:01:86:
         52:12:92:d5:b0:ab:e7:b1:94:a3:9c:fa:33:5a:27:c0:c6:4a:
         40:da:95:c7:7b:6c:08:9c:80:f6:99:1c:39:3e:b8:bb:50:0f:
         eb:4b:9b:eb:03:64:f9:9c:61:11:91:91:b1:19:c1:e7:5c:d4:
         6e:9a:b1:cd:84:8f:7d:c1:58:c2:cc:cc:6d:84:12:50:c2:1c:
         5f:9a:e5:33:e4:5b:5d:9e:37:47:9e:7f:6a:48:93:12:e5:03:
         28:bc:1f:86:69:1c:d2:9a:59:21:47:82:cc:74:cc:c9:f4:6b:
         43:e6:e6:f9:78:a9:63:49:9f:d7:2d:f0:ba:b3:39:74:82:2c:
         7b:17:cf:fc:f5:3d:25:b9:cb:78:64:94:a3:da:e1:e0:fc:83:
         96:3b:a6:88:fd:44:68:1b:58:ad:0d:b8:c2:d7:0c:ae:fe:29:
         11:85:a7:3b:23:dd:4e:4a:11:a3:67:31:b8:44:ef:21:a9:7a:
         5c:7f:65:56:ec:e4:72:f2:b5:91:6d:99:97:75:77:9b:e5:75:
         df:be:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org