Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3232203d3e20323730373537.roa
File:                     3230302e33392e3133322e302f32322d3232203d3e20323730373537.roa (raw, json)
Hash identifier:          PFiUTjt77L/FElIVrA/W8qS9knl0Dfryw4e3rDl5/Rk=
Subject key identifier:   21:4F:AB:8D:3D:2C:9C:AB:EF:A6:7F:EA:CA:21:3A:86:40:2C:86:FD
Certificate issuer:       /CN=978C058CACCF9405ABB1475ABC54573C186268F7
Certificate serial:       0318404F9B0A17ECBBFAB345A3D5E17ED1BD77DF
Authority key identifier: 97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3232203d3e20323730373537.roa
Signing time:             Sat 04 Mar 2023 17:16:15 +0000
ROA not before:           Sat 04 Mar 2023 17:11:15 +0000
ROA not after:            Sat 02 Mar 2024 17:16:15 +0000
asID:                     270757
IP address blocks:        200.39.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:40:4f:9b:0a:17:ec:bb:fa:b3:45:a3:d5:e1:7e:d1:bd:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978C058CACCF9405ABB1475ABC54573C186268F7
        Validity
            Not Before: Mar  4 17:11:15 2023 GMT
            Not After : Mar  2 17:16:15 2024 GMT
        Subject: CN=214FAB8D3D2C9CABEFA67FEACA213A86402C86FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:d0:d2:cd:64:2e:2c:dd:88:40:f5:db:fb:
                    04:b2:55:ce:f3:32:7d:9a:13:28:b6:3c:8e:68:c9:
                    fd:5b:fb:e6:52:b6:0b:94:93:02:78:ba:44:c3:aa:
                    c4:43:a7:b7:f7:1d:c0:9c:cf:5a:28:87:04:07:dd:
                    90:77:90:bd:7c:42:8a:97:72:3a:03:a2:54:6a:71:
                    0f:99:2f:7b:24:c3:e9:d4:76:cd:ff:ca:ca:11:f3:
                    0f:50:41:3e:cd:06:93:ea:7c:23:62:8e:67:8a:82:
                    74:b8:48:2c:2f:68:93:6d:28:f3:98:06:5a:fd:1d:
                    3e:4e:2d:e6:e8:8c:3d:c3:17:26:ba:24:17:cd:10:
                    73:6b:0a:4e:49:0c:fe:41:25:3b:2b:78:86:25:46:
                    14:b6:6f:a0:98:fd:04:a6:61:91:59:45:dd:60:97:
                    d1:ce:86:36:ea:74:a8:4f:f6:d1:29:40:49:86:2c:
                    4a:93:d7:5e:70:ff:a3:77:8b:68:78:02:40:cf:d4:
                    c1:42:aa:be:81:6f:df:1b:8d:85:25:fd:72:28:ae:
                    7e:6e:77:a5:f9:68:fd:63:18:49:35:ae:ca:64:15:
                    76:96:22:5a:73:64:e9:a8:92:b2:fa:61:f1:4f:26:
                    2b:76:35:53:bb:36:6e:bd:78:76:86:eb:40:fc:64:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:AB:8D:3D:2C:9C:AB:EF:A6:7F:EA:CA:21:3A:86:40:2C:86:FD
            X509v3 Authority Key Identifier:
                keyid:97:8C:05:8C:AC:CF:94:05:AB:B1:47:5A:BC:54:57:3C:18:62:68:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/978C058CACCF9405ABB1475ABC54573C186268F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/978C058CACCF9405ABB1475ABC54573C186268F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3232203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:82:8d:ce:02:95:20:a9:1f:f0:87:49:97:14:eb:df:cb:
         ab:99:18:53:f7:81:f3:90:93:a0:64:0e:17:ae:75:bc:db:cf:
         8e:fd:3c:db:1e:d8:b9:ef:7b:37:b4:36:1b:85:fd:3f:bc:7a:
         bf:c3:8c:a3:ce:97:cf:3a:e2:e0:12:c2:71:be:bb:07:e7:23:
         8d:2e:cf:2d:7e:a1:bf:0b:c7:80:e9:03:48:79:ad:b6:98:2e:
         0c:37:6e:52:69:66:30:2c:07:73:bf:77:1c:60:d9:12:de:73:
         58:ba:a8:e0:4b:48:c3:fc:bd:b0:4b:42:46:69:76:ed:6b:35:
         9b:45:cf:54:0c:ea:cc:2d:af:fa:e5:fd:01:bc:61:b4:d5:8e:
         27:e9:c2:8a:37:8c:68:69:bf:65:56:e8:46:10:52:77:fe:1f:
         b4:1a:3f:9d:c7:5d:ba:7d:b1:c4:5c:e1:57:02:4f:ff:d6:2f:
         bd:4b:47:ad:5b:b8:fb:90:d0:c7:26:5a:9e:e4:7f:11:3f:ee:
         f1:7a:07:01:f7:e7:8b:25:bf:eb:98:4e:77:6c:ef:f8:5f:72:
         10:9e:0f:8a:a9:61:3e:dc:c1:50:ce:8d:32:84:10:45:57:ce:
         a7:a8:56:66:4d:01:ca:b7:53:d9:03:fc:ce:29:06:07:00:7e:
         b3:4e:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org