Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          iPoJFeyv9iWbPhGj/DFoW3JtSn8ywiMgIEB6zcpY+S0=
Subject key identifier:   82:A6:AE:2D:FB:C4:91:CF:75:75:09:41:94:69:18:23:E1:C3:0D:B1
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       34EBE053D213A6323D31CAC351044A210AB369A2
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 16:25:12 +0000
ROA not before:           Tue 12 Dec 2023 16:20:12 +0000
ROA not after:            Tue 10 Dec 2024 16:25:12 +0000
asID:                     61776
IP address blocks:        200.196.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:eb:e0:53:d2:13:a6:32:3d:31:ca:c3:51:04:4a:21:0a:b3:69:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:20:12 2023 GMT
            Not After : Dec 10 16:25:12 2024 GMT
        Subject: CN=82A6AE2DFBC491CF7575094194691823E1C30DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:d1:62:37:00:a9:45:e7:46:4b:9a:4d:88:
                    a2:8e:34:43:1a:3e:3b:70:10:ea:e4:c0:60:c6:02:
                    90:a4:81:1b:e0:88:0f:f3:ba:34:00:fd:96:78:ad:
                    80:cf:c2:ff:9a:27:11:35:e8:d8:75:6f:73:af:bf:
                    55:27:8e:45:1b:74:23:eb:ce:8a:cd:cf:df:93:b6:
                    e5:34:a3:71:dd:20:21:be:3f:c4:3c:07:fd:ec:aa:
                    d0:3d:df:c9:d6:db:3d:64:d9:2a:54:7d:e0:80:2e:
                    93:7e:a6:9f:7d:7d:23:e6:31:3e:43:d3:ff:b2:57:
                    ee:04:85:4a:49:6a:22:51:5d:92:b4:5b:4f:8d:52:
                    53:ff:b4:f1:26:a5:54:e7:43:ca:f8:74:07:00:79:
                    ff:c7:35:5d:70:b4:b8:7d:34:bf:67:e2:f1:2d:e5:
                    75:62:c1:03:bc:6c:cb:c3:94:75:c0:f3:da:17:db:
                    f4:31:81:7b:70:48:f3:6e:c2:9b:cc:7b:75:5d:13:
                    fa:c8:1e:8e:56:56:b8:63:57:a8:3d:5d:c9:19:3b:
                    69:73:0e:fc:2f:9f:fb:45:fb:15:1e:58:71:db:9e:
                    83:c5:98:9e:5b:3c:69:c8:57:a7:59:06:4d:0b:bf:
                    5f:9b:77:6d:0e:db:35:d7:41:99:58:4d:3a:28:b0:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:AE:2D:FB:C4:91:CF:75:75:09:41:94:69:18:23:E1:C3:0D:B1
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:11:d2:d9:a4:57:51:fa:8f:1e:94:f2:b5:ca:92:4f:34:29:
         a4:82:44:f5:79:a4:cb:85:76:06:c1:e1:d4:22:9f:a7:35:bb:
         49:e2:e6:fb:ea:42:ad:44:a4:a4:82:28:8c:10:9b:0c:00:3e:
         2a:bd:47:1a:ea:3b:a7:d6:1d:a1:59:b6:16:2c:6c:0c:01:19:
         f4:0e:b5:e2:25:aa:57:e6:fb:4e:3a:4c:c2:b9:30:30:17:a6:
         39:95:37:6b:56:86:2f:a3:69:26:b2:9f:e4:a6:e9:f0:31:35:
         88:10:1c:28:61:92:37:4b:9c:17:33:fc:b5:a6:15:d7:d0:b3:
         14:75:cb:f2:ec:a6:b4:0f:55:24:1e:c9:4c:92:5d:4a:c2:83:
         ff:d6:2b:30:cb:ba:92:ea:a9:95:fc:9b:a4:73:1d:09:69:2f:
         3e:0d:5c:6e:11:2f:28:1f:dd:44:46:c5:d8:ee:e9:8f:ae:65:
         aa:0c:51:9d:55:37:97:30:c4:fa:33:54:ad:19:c9:d1:8e:96:
         3e:70:13:ed:26:41:3d:fb:fa:09:94:1c:0c:06:12:7c:43:6d:
         d6:8e:13:96:56:ed:2e:da:fb:4f:85:a0:3c:f8:36:10:a6:6f:
         5d:ba:ee:20:83:4a:8e:81:2b:d8:45:4d:5b:88:18:6f:f7:95:
         ee:3b:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org