Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323731363735.roa
File:                     3230302e33362e3231392e302f32342d3234203d3e20323731363735.roa (raw, json)
Hash identifier:          vSrwFEs6F64rOEdnzv6VbOxCvbbowRaVEEoPybq7N70=
Subject key identifier:   8D:12:34:17:F7:05:D4:46:93:E2:75:27:42:5C:83:D9:9C:52:96:83
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       343F0D6C404690B7010D9F7D2CD6156A38929B7C
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323731363735.roa
Signing time:             Sat 12 Mar 2022 15:53:42 +0000
ROA not before:           Sat 12 Mar 2022 15:48:42 +0000
ROA not after:            Sat 11 Mar 2023 15:53:42 +0000
asID:                     271675
IP address blocks:        200.36.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:0d:6c:40:46:90:b7:01:0d:9f:7d:2c:d6:15:6a:38:92:9b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: Mar 12 15:48:42 2022 GMT
            Not After : Mar 11 15:53:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:c6:3e:76:f5:b8:64:d0:fe:48:12:9f:9a:
                    43:a3:64:81:29:40:91:d6:05:c5:37:73:7e:c3:01:
                    16:7c:83:03:14:c4:ca:e2:b7:6f:bd:70:99:06:0e:
                    88:3e:67:90:24:97:db:89:d8:5d:7c:48:24:fc:a0:
                    35:dc:1d:58:1a:d8:53:ce:23:77:7a:88:59:f8:73:
                    6b:3b:1e:34:80:2f:4f:10:bf:74:12:08:39:be:1d:
                    a9:46:7c:1f:d6:97:b0:38:9b:68:f2:25:78:66:62:
                    f0:21:9c:0c:31:4c:02:5f:2c:54:16:0e:43:66:36:
                    ac:4d:c3:a6:93:3d:3b:63:1d:d3:f3:ad:0d:e9:08:
                    8f:d1:80:92:6a:ff:ce:24:e8:0a:e3:45:df:fa:48:
                    32:94:c0:96:3d:11:69:60:13:a7:1d:5b:81:32:ba:
                    83:62:e4:f5:f7:cc:da:7f:3e:57:00:1d:98:e5:9c:
                    40:b9:d3:02:fb:42:a3:7c:9e:73:a6:b4:9f:46:97:
                    3c:c4:c8:c0:56:fb:e3:25:cc:9e:02:24:60:46:f1:
                    e4:47:16:88:c7:72:1e:56:90:bb:11:b6:c8:58:1c:
                    94:67:82:05:53:8c:44:2c:3b:bd:7e:55:8d:fd:db:
                    e3:b6:40:2a:4a:5a:9e:5e:03:bf:27:a4:66:df:96:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:34:17:F7:05:D4:46:93:E2:75:27:42:5C:83:D9:9C:52:96:83
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323731363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:63:c9:38:cd:f3:b7:b4:55:a9:29:9a:cc:6f:40:60:c8:18:
         0b:43:27:a2:50:5b:bf:fd:bc:0f:49:76:70:b6:0b:84:13:75:
         c4:c3:d3:0c:09:ec:bb:9d:a8:11:7b:0a:3c:e9:3b:db:8e:ab:
         b4:88:a3:ba:5d:14:01:8e:69:ff:fe:21:85:72:de:1e:04:d6:
         0b:b4:44:96:e0:99:ec:d8:61:05:a4:03:15:d1:3b:06:6a:30:
         7d:bf:ff:6f:77:89:ab:04:ad:4f:91:23:d4:15:2a:9b:cd:7e:
         74:dc:a6:ec:5b:d2:e1:b7:3d:35:09:0b:88:fc:2d:8a:4c:87:
         05:8b:c8:da:bd:94:c5:ad:3c:81:2c:15:04:0d:05:6b:cd:6d:
         be:13:b6:46:6b:ba:ea:c2:99:3d:19:e2:e0:93:b7:91:6d:67:
         5c:94:e8:4b:c5:2c:62:bf:e8:5d:75:91:ff:81:d4:92:63:29:
         4f:2b:30:ba:20:56:cd:37:94:57:e7:db:6c:af:c2:f4:3f:1c:
         3c:4f:c7:51:d0:36:4e:9d:af:a2:bc:0f:76:bf:6f:64:b8:ae:
         0c:4d:ef:8d:7e:be:24:22:6a:f2:b4:c4:6a:c6:0d:e9:ba:c6:
         cf:ba:d0:98:f2:33:2c:9e:ff:ce:dc:89:5b:1c:ce:25:3f:2c:
         ef:24:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org