Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32342d3234203d3e20323731303736.roa
File:                     3230302e37312e38342e302f32342d3234203d3e20323731303736.roa (raw, json)
Hash identifier:          TDr7vvuhpGgE0C1h2yXawJR7JIIjC/hhYGG475BPx9o=
Subject key identifier:   6F:57:D3:4F:A5:18:4D:83:12:A8:DF:DC:EE:02:E8:07:60:6B:AD:E2
Certificate issuer:       /CN=D52232967406E705729EA909CBA1A57972539515
Certificate serial:       15984002CE99C80131E120A898C7F31D2F6F4304
Authority key identifier: D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32342d3234203d3e20323731303736.roa
Signing time:             Thu 21 Sep 2023 19:00:00 +0000
ROA not before:           Thu 21 Sep 2023 18:55:00 +0000
ROA not after:            Thu 19 Sep 2024 19:00:00 +0000
asID:                     271076
IP address blocks:        200.71.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:40:02:ce:99:c8:01:31:e1:20:a8:98:c7:f3:1d:2f:6f:43:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52232967406E705729EA909CBA1A57972539515
        Validity
            Not Before: Sep 21 18:55:00 2023 GMT
            Not After : Sep 19 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:fa:f0:57:f6:55:28:b7:95:82:59:81:45:
                    46:37:56:0d:7e:8e:d2:44:1f:74:c0:b1:99:6a:12:
                    56:e0:da:f0:b4:7b:ec:6d:41:9a:d8:af:9a:c8:c0:
                    a9:55:2c:19:3a:56:fc:35:2c:f0:1d:0b:96:86:03:
                    b5:0d:09:26:ab:b0:68:3d:3f:b1:05:5c:84:82:87:
                    47:60:68:2d:44:35:0f:d0:10:86:8f:99:9c:dd:38:
                    d3:b8:7c:36:e4:16:06:c0:4c:e3:b5:b3:c8:20:24:
                    e6:38:17:26:04:9d:6a:ed:f8:c7:3b:c7:a3:2d:74:
                    9e:18:c6:c8:2a:9d:4d:7b:b2:ed:32:37:27:17:92:
                    3f:ab:9b:e4:59:98:18:8e:2e:37:71:2d:41:9e:c8:
                    b7:0e:fa:36:0d:62:31:c4:6c:17:f4:59:49:c9:69:
                    bf:c3:de:5a:22:3b:24:31:f4:b7:59:ed:cc:cd:63:
                    a8:06:0c:de:9c:19:20:41:bd:fa:56:0f:8a:f6:da:
                    a6:9a:3b:fa:14:a8:06:fa:a5:81:48:ae:22:d6:78:
                    de:ba:63:49:5d:82:47:65:87:2d:b1:86:18:9d:47:
                    15:fc:4e:3c:49:0d:0a:6e:61:16:cb:d7:0e:01:f1:
                    43:5f:7d:3a:4e:d2:62:ad:4e:ae:65:36:27:e9:15:
                    90:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:D3:4F:A5:18:4D:83:12:A8:DF:DC:EE:02:E8:07:60:6B:AD:E2
            X509v3 Authority Key Identifier:
                keyid:D5:22:32:96:74:06:E7:05:72:9E:A9:09:CB:A1:A5:79:72:53:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/D52232967406E705729EA909CBA1A57972539515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D52232967406E705729EA909CBA1A57972539515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ah2ZyzoqhZt2ViaSscaAvxRaFYqrkmvCYDzQLV3bnpbR/0/3230302e37312e38342e302f32342d3234203d3e20323731303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:38:cf:39:d2:47:17:b3:de:65:43:71:1f:9c:3f:5f:48:a9:
         13:4c:8c:79:59:9b:ae:c0:d9:72:f8:80:64:20:2c:15:85:c5:
         07:19:a8:cb:8e:58:55:42:7c:96:c7:52:4b:11:37:68:1b:18:
         4f:cf:72:f8:82:97:2d:a9:7e:7e:64:7e:ea:a6:e5:02:7e:54:
         29:cc:10:bc:ce:74:d1:aa:08:f3:68:dc:43:9e:3b:9a:48:50:
         ed:5e:48:91:16:50:b2:44:17:86:fd:c7:f0:6a:a5:e6:a4:91:
         61:01:42:32:6a:f4:22:94:97:0c:3a:24:0e:3c:9e:6d:91:b2:
         02:c5:cd:cb:37:b2:c3:7d:16:49:c3:75:32:32:37:fa:ba:66:
         eb:15:b9:87:af:a3:77:f9:6b:b7:18:79:bd:13:50:28:ea:b4:
         ef:f8:fb:89:7c:f4:ce:3a:81:3a:f7:81:92:00:92:86:81:d9:
         68:d8:c4:ef:fa:b9:59:f1:75:f2:17:05:90:9d:b3:6e:6c:b1:
         be:99:2d:82:01:19:83:fa:9f:9c:d9:70:f9:5f:a7:7f:dd:bf:
         a4:6b:28:0b:cd:33:3b:4a:f2:db:c8:2c:03:3b:af:88:5a:06:
         b8:58:b2:50:e5:cc:97:f1:25:11:12:00:f9:4c:c7:87:93:b6:
         3e:8a:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org