Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/3230302e392e3134342e302f32342d3234203d3e20323731353036.roa
File:                     3230302e392e3134342e302f32342d3234203d3e20323731353036.roa (raw, json)
Hash identifier:          cnjGSRF+fOtLYdIHtViz9rVSAYxaalqZMSiVBW6/WR0=
Subject key identifier:   CD:B2:E4:3A:11:20:C3:F9:B5:F2:C6:1C:AC:57:67:D2:B4:8F:BD:2E
Certificate issuer:       /CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
Certificate serial:       40B06DDE66D5B782A5B260E2D587D4CD17621035
Authority key identifier: 9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/3230302e392e3134342e302f32342d3234203d3e20323731353036.roa
Signing time:             Fri 03 Mar 2023 14:52:00 +0000
ROA not before:           Fri 03 Mar 2023 14:47:00 +0000
ROA not after:            Fri 01 Mar 2024 14:52:00 +0000
asID:                     271506
IP address blocks:        200.9.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b0:6d:de:66:d5:b7:82:a5:b2:60:e2:d5:87:d4:cd:17:62:10:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D
        Validity
            Not Before: Mar  3 14:47:00 2023 GMT
            Not After : Mar  1 14:52:00 2024 GMT
        Subject: CN=3082010A0282010100C24C529717AC1DDE510E87C0EAB5D189743BA8461BC56A70833B94B13E3988C11BC1485A5AB836AA7A5BF78F97DC27C79CACA1440F7C5A9E28F9ABD3F8D7ED3809BDF8B805724D69A2841FD4174D6CF613A8CE43CC428A5792AE6B4B0017448AE887CAC61AA6A926F2CA8CD6EDDC2C4413E2EF93F2562C3A5E219D3707B955E416EF7F8D29CBE69B92D0EF65004765FE27BB4706610DF13C392CECD2E19EC8F122E40B3700A38A2F949A195EDEFB8BF94E5E5E2512318D84A806659435866B3ED3057A7B8D3946C6E8001C93EB7CAC2EBC869112458CA0B8805BAB1368F34F7373CFC20765CA60A9F4E496D662ECD63BE0A3CA80CC74B9DC7FD57DB2516BCA8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:52:97:17:ac:1d:de:51:0e:87:c0:ea:b5:
                    d1:89:74:3b:a8:46:1b:c5:6a:70:83:3b:94:b1:3e:
                    39:88:c1:1b:c1:48:5a:5a:b8:36:aa:7a:5b:f7:8f:
                    97:dc:27:c7:9c:ac:a1:44:0f:7c:5a:9e:28:f9:ab:
                    d3:f8:d7:ed:38:09:bd:f8:b8:05:72:4d:69:a2:84:
                    1f:d4:17:4d:6c:f6:13:a8:ce:43:cc:42:8a:57:92:
                    ae:6b:4b:00:17:44:8a:e8:87:ca:c6:1a:a6:a9:26:
                    f2:ca:8c:d6:ed:dc:2c:44:13:e2:ef:93:f2:56:2c:
                    3a:5e:21:9d:37:07:b9:55:e4:16:ef:7f:8d:29:cb:
                    e6:9b:92:d0:ef:65:00:47:65:fe:27:bb:47:06:61:
                    0d:f1:3c:39:2c:ec:d2:e1:9e:c8:f1:22:e4:0b:37:
                    00:a3:8a:2f:94:9a:19:5e:de:fb:8b:f9:4e:5e:5e:
                    25:12:31:8d:84:a8:06:65:94:35:86:6b:3e:d3:05:
                    7a:7b:8d:39:46:c6:e8:00:1c:93:eb:7c:ac:2e:bc:
                    86:91:12:45:8c:a0:b8:80:5b:ab:13:68:f3:4f:73:
                    73:cf:c2:07:65:ca:60:a9:f4:e4:96:d6:62:ec:d6:
                    3b:e0:a3:ca:80:cc:74:b9:dc:7f:d5:7d:b2:51:6b:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:E4:3A:11:20:C3:F9:B5:F2:C6:1C:AC:57:67:D2:B4:8F:BD:2E
            X509v3 Authority Key Identifier:
                keyid:9E:9B:34:E6:6E:A4:1B:1D:67:A0:A0:3F:CF:EC:C7:46:38:C5:C5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9E9B34E66EA41B1D67A0A03FCFECC74638C5C50D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Axo1hFGmaQbZr5sGLQjxFyhjQpuTxgxkVJpBpJgv6mud/0/3230302e392e3134342e302f32342d3234203d3e20323731353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:a7:fc:22:a2:1a:47:6b:24:df:8b:45:c2:cf:ab:6b:39:5a:
         b1:dd:83:45:94:66:68:52:ec:ab:d1:74:9f:04:d0:46:b0:99:
         f5:42:56:53:fd:cd:c9:84:34:7e:4c:e8:fd:b2:2a:96:72:53:
         7b:b6:d1:e5:73:5e:9f:ea:82:fd:43:da:41:3d:4f:b1:df:04:
         73:87:16:ba:b1:08:65:dd:c9:8a:72:51:fe:2e:24:15:4d:5d:
         79:4e:f9:88:08:ee:eb:78:3a:e4:65:41:e8:87:35:a7:d7:c5:
         9b:da:0a:76:0a:0d:5a:27:0f:f0:00:9f:2a:40:00:ef:4c:5f:
         ff:02:1b:84:91:df:e5:b8:96:60:1b:66:dd:63:05:05:e9:ec:
         42:f9:27:cb:ee:b9:c1:ff:78:5e:0b:93:87:e0:f7:7e:58:b7:
         bb:94:fb:04:70:83:aa:c4:a1:05:a3:de:ba:34:0e:3e:8d:63:
         1f:07:58:84:73:72:86:2a:6d:d1:24:d7:aa:74:49:e4:8a:6b:
         b7:5c:8e:72:3d:61:72:6e:86:0a:3b:a1:e7:34:22:e2:31:7a:
         8c:6e:18:5b:cd:9e:cd:60:89:46:f0:e6:30:ad:44:57:f7:fd:
         7b:07:e6:50:09:21:0c:ee:2a:0f:08:41:31:77:6b:98:14:b5:
         89:dc:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org