Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/3230302e302e38392e302f32342d3234203d3e203631353731.roa
File:                     3230302e302e38392e302f32342d3234203d3e203631353731.roa (raw, json)
Hash identifier:          XUjLzBw0ZRXh6e1h+CnNRyL1/7fr1SIgEw1pUe7subQ=
Subject key identifier:   F7:32:94:2D:5B:20:38:30:D9:BF:96:1F:F0:08:FD:A2:C9:C8:57:90
Certificate issuer:       /CN=A1F3B986BE342BBD942C2BD3B1365D87CE66DB04
Certificate serial:       3CAD2163CA9F087C5B7C2C0B170CC953A51A4D93
Authority key identifier: A1:F3:B9:86:BE:34:2B:BD:94:2C:2B:D3:B1:36:5D:87:CE:66:DB:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/3230302e302e38392e302f32342d3234203d3e203631353731.roa
Signing time:             Wed 01 Nov 2023 19:20:19 +0000
ROA not before:           Wed 01 Nov 2023 19:15:19 +0000
ROA not after:            Wed 30 Oct 2024 19:20:19 +0000
asID:                     61571
IP address blocks:        200.0.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ad:21:63:ca:9f:08:7c:5b:7c:2c:0b:17:0c:c9:53:a5:1a:4d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F3B986BE342BBD942C2BD3B1365D87CE66DB04
        Validity
            Not Before: Nov  1 19:15:19 2023 GMT
            Not After : Oct 30 19:20:19 2024 GMT
        Subject: CN=F732942D5B203830D9BF961FF008FDA2C9C85790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:77:b1:c3:51:a8:c0:f9:6b:9a:bf:dc:ac:
                    2d:a2:22:5e:5d:19:53:32:6e:34:c3:c0:6b:4e:90:
                    b5:76:fd:36:5e:dd:97:2c:5f:38:d2:e3:2f:9c:32:
                    c1:20:00:c6:7c:3a:c9:ed:92:3d:f9:ea:69:0d:f1:
                    96:b6:42:a9:aa:6c:84:83:ab:9c:7c:5b:ff:f9:d9:
                    ab:2d:14:84:93:57:36:a4:e6:98:61:0a:fa:09:b6:
                    79:13:e3:f6:ee:d5:94:32:51:8f:db:77:f6:ce:54:
                    1a:6a:0b:d2:c7:8b:5e:55:40:f9:25:92:c5:79:da:
                    bf:8b:ad:d5:0d:65:b9:42:ed:f5:bd:f9:e0:f1:e1:
                    f1:50:1d:3f:ea:d1:5a:8c:fc:87:c5:fd:fc:d8:c9:
                    b2:d2:1f:92:bb:b0:be:c3:b8:f5:23:2f:e6:64:ec:
                    05:24:ba:8e:06:8c:cd:63:22:9b:68:bc:29:33:31:
                    ff:77:f0:84:4d:96:fa:65:90:11:fe:e2:3a:70:76:
                    3f:84:fa:2f:2a:8b:52:0f:4b:d3:83:28:1a:1c:0b:
                    db:19:c8:a9:8a:4c:a5:fe:dc:49:e0:86:0e:c9:4f:
                    75:b7:09:e4:fc:1e:47:6f:9e:c4:6d:f6:fc:f0:3b:
                    4a:ce:7f:7e:cd:ff:08:a1:0c:c0:5d:35:a4:eb:e5:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:94:2D:5B:20:38:30:D9:BF:96:1F:F0:08:FD:A2:C9:C8:57:90
            X509v3 Authority Key Identifier:
                keyid:A1:F3:B9:86:BE:34:2B:BD:94:2C:2B:D3:B1:36:5D:87:CE:66:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/3230302e302e38392e302f32342d3234203d3e203631353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:e2:18:33:22:b3:ff:2f:82:58:a7:17:95:cd:38:97:dd:
         ca:e5:81:13:fc:3c:a7:ad:57:3e:32:32:ea:3e:96:41:91:7a:
         95:5b:90:93:de:b2:24:6b:8a:d8:e7:bd:2b:31:29:1e:e8:d2:
         55:a4:54:0d:32:bb:57:fb:30:24:c1:1e:ca:d2:d4:a0:45:65:
         f3:5f:a9:8d:6d:0b:72:74:4d:c9:77:b9:51:df:36:38:59:00:
         df:de:53:4e:b1:49:26:35:37:43:b6:85:a8:42:e8:d0:17:da:
         0c:86:57:f8:ae:02:eb:83:0c:27:a2:e7:34:34:25:3b:0e:80:
         1c:bb:ce:5c:09:12:33:db:ee:33:5d:63:c8:db:31:99:db:f3:
         57:f0:21:33:d8:5f:17:9b:2c:7a:14:1b:16:48:27:92:f6:d2:
         0f:fa:b8:57:ec:fb:20:57:4c:81:da:1b:04:d9:96:a1:b0:34:
         22:a2:45:a0:5e:b5:9a:86:3f:3f:b3:8f:7b:0b:5b:60:d6:f2:
         e0:48:bc:e3:74:ef:b0:bd:26:4a:f5:38:72:e3:05:15:e4:72:
         13:02:e3:d3:bb:d3:7e:1b:6b:6e:54:81:6f:b6:db:aa:5e:1f:
         64:09:3d:30:2b:bc:db:88:f5:14:35:49:2c:c0:02:47:55:72:
         d4:05:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org