Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32332d3233203d3e20323731303736.roa
File:                     3230302e37312e38342e302f32332d3233203d3e20323731303736.roa (raw, json)
Hash identifier:          3nvO+hQTiQvORC/4DPgGsSa/bHW9dHIEJrVq8gvz5wk=
Subject key identifier:   61:FF:8C:51:AB:5E:F6:81:0D:1E:00:E5:1E:6A:88:42:4B:44:0A:34
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       3B8632EA1B3271753CF6DAF9BC360F6D9D35C7C8
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32332d3233203d3e20323731303736.roa
Signing time:             Thu 21 Sep 2023 19:00:00 +0000
ROA not before:           Thu 21 Sep 2023 18:55:00 +0000
ROA not after:            Thu 19 Sep 2024 19:00:00 +0000
asID:                     271076
IP address blocks:        200.71.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:86:32:ea:1b:32:71:75:3c:f6:da:f9:bc:36:0f:6d:9d:35:c7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 21 18:55:00 2023 GMT
            Not After : Sep 19 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:c2:39:21:2e:dd:87:b9:4e:b0:31:1c:97:
                    d9:ce:7a:30:f9:b6:79:14:e5:5b:10:fc:82:5d:c5:
                    b8:83:32:2b:8f:4f:0d:88:8b:52:e5:9f:83:47:44:
                    20:ba:04:99:32:94:1b:f7:d5:46:20:52:61:f4:e3:
                    0b:7a:aa:71:8d:1a:42:07:81:f1:a5:dd:ba:79:b5:
                    0b:0a:50:06:dc:c2:97:97:1c:97:6c:17:fc:7d:67:
                    a1:c0:a0:eb:04:21:8c:82:55:02:62:66:b3:6c:24:
                    46:d4:03:01:68:25:cb:40:46:f1:54:ca:db:85:17:
                    b3:33:46:7e:8a:7a:0f:eb:49:64:ea:98:38:02:a1:
                    4e:cd:99:91:61:bf:58:c0:63:a8:4f:37:25:07:bd:
                    d7:8c:38:91:a6:ce:fd:3f:b2:1c:25:20:26:66:a2:
                    e0:09:7d:ed:d3:2a:a6:f5:b3:52:14:5a:d6:7e:7c:
                    b8:41:c9:ed:87:37:c5:17:da:ab:cd:2a:4f:5b:54:
                    57:28:eb:f7:62:e7:08:d2:86:87:06:5f:6f:d9:68:
                    86:df:1b:af:cc:65:1f:54:71:98:a6:df:fb:df:b9:
                    10:af:7e:08:aa:3c:f2:58:b0:4f:3a:2b:e9:23:fc:
                    9a:0d:b0:f7:69:09:6b:9d:ee:e1:ef:cd:dc:32:6e:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FF:8C:51:AB:5E:F6:81:0D:1E:00:E5:1E:6A:88:42:4B:44:0A:34
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32332d3233203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:e1:7a:e5:bd:96:28:fd:be:4c:04:39:ef:d4:60:46:43:a4:
         ca:30:1f:aa:2a:30:06:f8:bb:5f:c8:47:2e:fa:7c:f1:9a:00:
         33:8b:09:0a:ce:d5:71:54:83:af:98:62:b6:b9:69:4e:4a:1b:
         a9:bf:6e:1d:0d:f9:71:ae:9c:e4:cb:0d:b4:5e:6b:71:74:40:
         81:c6:e0:3f:5c:b9:8f:fe:fc:d5:96:b0:b5:49:16:71:89:4e:
         46:40:a0:76:a7:d8:4e:25:f7:24:06:74:d5:84:96:fb:e0:60:
         19:f4:7a:d9:cb:67:43:00:b4:07:5b:64:b5:05:c8:8c:86:9f:
         74:05:c0:dd:57:80:89:cf:a6:ce:2e:34:ed:1c:c0:00:62:0f:
         35:b6:ca:a6:be:43:99:1c:1a:dd:ff:ae:f1:f7:ec:7f:03:02:
         e7:43:7f:d5:9a:da:25:23:ef:56:f2:e0:d2:da:51:0d:fd:88:
         77:b9:94:df:56:c8:55:91:c1:e9:cb:0b:44:7c:16:59:93:86:
         ce:23:95:b8:e3:cf:6d:f6:ac:30:4e:2e:f0:1a:0d:88:fd:12:
         98:8c:07:54:26:7a:13:ee:f2:62:11:59:0f:2e:43:19:9f:c7:
         d7:a0:da:27:25:1d:4b:1e:ec:55:4b:93:7f:2a:90:a8:54:7e:
         14:33:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org