Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3232203d3e20323732363435.roa
File:                     3230312e3231362e3130342e302f32322d3232203d3e20323732363435.roa (raw, json)
Hash identifier:          pfMvADA8PiILbQWPQzZvbWkW6SBAMNXIYDgXd4ExGFI=
Subject key identifier:   D3:7F:C6:2C:29:01:83:38:AD:AD:42:4E:48:70:F9:26:25:7A:EB:A2
Certificate issuer:       /CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
Certificate serial:       3EF8BE22EEA9B07F61BDBF42DF33A5944B61ADFB
Authority key identifier: 3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3232203d3e20323732363435.roa
Signing time:             Wed 20 Mar 2024 23:22:19 +0000
ROA not before:           Wed 20 Mar 2024 23:17:19 +0000
ROA not after:            Wed 19 Mar 2025 23:22:19 +0000
asID:                     272645
IP address blocks:        201.216.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f8:be:22:ee:a9:b0:7f:61:bd:bf:42:df:33:a5:94:4b:61:ad:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C239DDBCBEAB3ACD0314F00BE09D87A3540822F
        Validity
            Not Before: Mar 20 23:17:19 2024 GMT
            Not After : Mar 19 23:22:19 2025 GMT
        Subject: CN=D37FC62C29018338ADAD424E4870F926257AEBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:c1:7d:bf:06:cb:1f:28:cf:dc:28:77:99:
                    00:bf:a0:3c:94:7b:c6:16:9d:6e:1e:a3:be:96:d9:
                    ac:7e:83:06:cb:6c:8a:36:a4:14:97:13:47:75:0e:
                    1c:95:f7:c2:d2:a3:5c:a6:fd:a0:14:5e:92:2b:44:
                    44:53:27:5e:a2:d1:52:27:a4:32:ff:ba:66:15:a6:
                    a1:8e:23:a5:30:29:d0:03:37:f3:49:63:e5:55:f1:
                    cb:3f:23:ea:a0:0a:3a:2d:be:90:66:75:55:96:dc:
                    5a:46:11:64:52:9e:53:99:7f:be:91:3d:7b:f0:85:
                    ab:0f:11:c2:c6:9a:cb:e1:4d:12:da:8e:fd:39:56:
                    e0:39:06:3b:9f:6f:ed:5f:47:2c:a6:58:01:ba:fa:
                    62:a0:f9:3f:81:70:c9:7a:b5:5f:e8:66:f8:33:17:
                    43:9c:7c:54:3b:a3:33:70:36:f4:9a:0c:a8:75:0d:
                    d3:de:91:6d:f0:4c:28:d8:71:bf:80:a2:73:93:f9:
                    c5:2e:8d:dc:df:3b:c7:42:6a:92:a3:8d:f4:ff:c1:
                    8b:21:ed:b5:88:ac:b9:25:86:57:be:c9:6c:0c:1a:
                    32:de:88:42:52:3b:e3:a3:41:38:58:b9:e1:ca:44:
                    8e:fd:4f:9a:3e:8b:12:7e:a0:53:95:c1:19:41:5b:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:C6:2C:29:01:83:38:AD:AD:42:4E:48:70:F9:26:25:7A:EB:A2
            X509v3 Authority Key Identifier:
                keyid:3C:23:9D:DB:CB:EA:B3:AC:D0:31:4F:00:BE:09:D8:7A:35:40:82:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C239DDBCBEAB3ACD0314F00BE09D87A3540822F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3232203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:52:ac:a5:50:32:2a:c8:09:5c:49:cc:f0:9a:b9:68:21:
         d2:1b:46:8e:5b:bf:c8:89:ac:54:ee:6c:6d:09:61:f4:5f:17:
         3c:c6:6c:ce:52:ae:f8:ea:ad:6f:41:bb:c1:8c:e8:3b:c7:10:
         16:66:f6:88:82:a5:95:2a:bf:49:12:ed:32:33:03:57:9f:45:
         2f:be:8b:aa:8b:f3:dd:6d:74:d9:39:e1:ae:43:57:bf:05:47:
         4c:bd:87:48:69:97:94:d7:b1:a1:b0:9e:3b:d4:9c:85:8b:ef:
         a3:4c:86:13:2d:43:6a:81:1b:f1:c1:9d:e9:a9:ec:7a:34:cd:
         8a:1c:3f:a6:2f:44:15:16:4b:e9:9a:38:7f:45:07:a6:00:ec:
         16:e1:d9:50:ba:9c:c7:0a:31:ff:44:5a:89:fe:c4:8d:63:5e:
         07:a1:55:61:21:59:a5:ab:f8:f6:bd:03:b1:fc:bd:af:f3:62:
         9d:5e:3e:e5:e9:aa:b8:71:f8:be:72:be:e7:c5:9e:ad:e3:73:
         ca:77:3b:3f:b5:8e:59:57:63:6f:11:ba:26:eb:1d:c2:df:a5:
         66:47:b5:33:84:73:ab:1c:89:8e:09:5f:78:1e:65:54:73:48:
         5b:55:6e:07:59:c7:93:8c:e6:47:ca:71:ae:f4:ac:e3:1c:87:
         a5:e6:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org