Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3234203d3e203631393339.roa
File:                     3230302e37352e3137362e302f32312d3234203d3e203631393339.roa (raw, json)
Hash identifier:          xKDT7jXC4SThv18UI1Zmy/0IlXRgWz9FiZOpruuQzUo=
Subject key identifier:   40:09:8A:BF:35:A7:5A:72:A1:1F:7A:47:C0:62:48:E9:8B:DC:A1:47
Certificate issuer:       /CN=D769065CB690A94EF60FECB5E5169D5B8619D711
Certificate serial:       5C9EBF82D0C38E412E05402F56B117558D93425C
Authority key identifier: D7:69:06:5C:B6:90:A9:4E:F6:0F:EC:B5:E5:16:9D:5B:86:19:D7:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D769065CB690A94EF60FECB5E5169D5B8619D711.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3234203d3e203631393339.roa
Signing time:             Fri 27 Aug 2021 13:36:00 +0000
ROA not before:           Fri 27 Aug 2021 13:31:00 +0000
ROA not after:            Fri 26 Aug 2022 13:36:00 +0000
asID:                     61939
IP address blocks:        200.75.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9e:bf:82:d0:c3:8e:41:2e:05:40:2f:56:b1:17:55:8d:93:42:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D769065CB690A94EF60FECB5E5169D5B8619D711
        Validity
            Not Before: Aug 27 13:31:00 2021 GMT
            Not After : Aug 26 13:36:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:56:6b:62:c7:0e:26:27:29:b0:fd:00:0e:
                    d5:51:97:f9:f8:cf:af:1f:d0:b1:05:ed:51:08:5a:
                    ad:52:fd:5f:7a:92:1f:f0:54:92:e4:b7:0d:63:c2:
                    46:61:65:c7:ef:38:7b:4c:79:0a:29:99:a0:c9:bf:
                    2f:d0:8f:03:71:bc:f4:75:f2:ff:f5:bc:9a:cb:60:
                    64:75:9f:97:a7:ae:a2:28:78:d0:b3:04:2c:8b:80:
                    88:67:ed:2a:15:10:50:bd:c3:68:3a:24:ee:bb:e9:
                    49:49:ee:81:9d:b7:a3:e4:62:78:47:fb:1a:86:da:
                    95:35:8b:56:f4:ec:c8:51:bd:77:33:b0:69:53:24:
                    91:a3:4b:2e:e1:4a:4a:cf:2c:65:94:9a:a2:05:cd:
                    0a:56:07:2f:a3:b6:aa:c0:5c:1e:f1:76:28:cb:2b:
                    92:d2:29:7e:0a:9a:d4:c5:ef:83:fd:eb:8a:db:f5:
                    f3:fe:ba:a4:af:51:4b:d6:97:23:cf:ee:c7:b1:fb:
                    58:4a:fe:f5:ef:ae:7d:f5:12:89:92:78:3a:ec:8e:
                    25:50:9a:bb:b0:71:19:d1:a8:d2:1f:fb:f8:ed:b6:
                    ab:1a:31:b5:e1:c3:2f:97:b1:6d:03:55:79:b9:68:
                    1b:8b:a6:d0:16:d3:e1:60:95:fb:c3:06:f8:ae:9b:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:09:8A:BF:35:A7:5A:72:A1:1F:7A:47:C0:62:48:E9:8B:DC:A1:47
            X509v3 Authority Key Identifier:
                keyid:D7:69:06:5C:B6:90:A9:4E:F6:0F:EC:B5:E5:16:9D:5B:86:19:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/D769065CB690A94EF60FECB5E5169D5B8619D711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D769065CB690A94EF60FECB5E5169D5B8619D711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3234203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:33:70:fe:87:f3:01:65:dd:46:ca:20:67:a1:f7:f4:c9:
         9c:5c:08:9c:7a:bc:1f:3b:84:61:64:14:98:47:4e:8c:8d:65:
         9b:b5:72:c8:3d:cf:d5:de:8a:fb:71:69:34:2b:b7:07:b6:3c:
         c2:6a:0e:fe:5a:07:35:f5:da:ca:b3:f0:96:1d:9b:85:e6:14:
         c4:7e:ca:cb:4b:56:00:11:13:1d:55:7b:a2:22:91:6f:ff:dd:
         2c:3b:fb:64:ec:4e:19:4c:e3:18:de:4a:f8:e3:6b:34:89:15:
         21:6a:f2:9e:c5:38:aa:00:d1:c4:b2:3e:95:96:0b:c8:e7:9a:
         77:16:f7:f5:93:5c:b4:aa:88:68:85:43:e9:53:44:dd:fe:30:
         fc:bc:29:01:bd:fc:80:c2:91:b0:ff:b3:a6:13:dc:e0:2b:52:
         2f:a4:1d:6e:fc:06:0d:32:ba:96:b3:ef:25:c0:77:e2:b2:e3:
         5a:6c:f4:13:a6:d8:e9:b7:91:ec:56:4b:e2:91:a0:e2:6f:8d:
         03:55:96:15:65:3a:15:01:68:8d:1e:31:dc:ea:80:3a:0a:0d:
         b3:c0:18:15:eb:83:f4:de:cc:2c:7a:c1:02:75:7d:56:8e:90:
         e4:f1:0c:c7:87:1c:05:72:d0:2b:cc:80:f7:ed:c8:1f:ea:6e:
         89:37:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org