Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323732353439.roa
File:                     3230302e33362e3231392e302f32342d3234203d3e20323732353439.roa (raw, json)
Hash identifier:          l5LIRZf9wriclmUpwoUQcrJpKRViPjTQ+NwNndf/3e4=
Subject key identifier:   52:8D:73:40:F3:AD:4C:56:F2:A3:7E:5B:4E:4A:0F:12:8F:08:EC:34
Certificate issuer:       /CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
Certificate serial:       021B34359BA71E8516456AB0F9BE1F9FA3AF0BAE
Authority key identifier: 9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323732353439.roa
Signing time:             Wed 04 May 2022 00:30:11 +0000
ROA not before:           Wed 04 May 2022 00:25:11 +0000
ROA not after:            Wed 03 May 2023 00:30:11 +0000
asID:                     272549
IP address blocks:        200.36.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:34:35:9b:a7:1e:85:16:45:6a:b0:f9:be:1f:9f:a3:af:0b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC508BB9684B8837402E71D2AF4DD66B77F6C27
        Validity
            Not Before: May  4 00:25:11 2022 GMT
            Not After : May  3 00:30:11 2023 GMT
        Subject: CN=3082010A0282010100CC58222F79CE2BE48B33CA0F37E1604EA859FE420D302844588A34162C6C6C5FFF7F630A2842245952863A381223BBAE8947539E0FB294C2083E525DBB244D98522AE156B8AA5B0CE0EE401FA194BB89645FEA5914F6065B00A38A60100C73B011305BC8348DEAE4B27451B6FC8C48EE781A166E039CC1A9ACE24BEC1AD74FCBB475F9EA5AFFCCBFDAA45FBAEB35F655BAFC2FDFBB400921421FCE9AD180FD4883234AF40796BBB0077419AB9F48CA191356B2EB415077882A2A608DEF060934327C9A85B85829103A7609E8134AF8E6940E9C0A3B2162E1C66705AFD8247BC9663DBEAED3040A3C0FA310411A1EF9748FA36004F93D318268AB5ACFFBD41FA70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:22:2f:79:ce:2b:e4:8b:33:ca:0f:37:e1:
                    60:4e:a8:59:fe:42:0d:30:28:44:58:8a:34:16:2c:
                    6c:6c:5f:ff:7f:63:0a:28:42:24:59:52:86:3a:38:
                    12:23:bb:ae:89:47:53:9e:0f:b2:94:c2:08:3e:52:
                    5d:bb:24:4d:98:52:2a:e1:56:b8:aa:5b:0c:e0:ee:
                    40:1f:a1:94:bb:89:64:5f:ea:59:14:f6:06:5b:00:
                    a3:8a:60:10:0c:73:b0:11:30:5b:c8:34:8d:ea:e4:
                    b2:74:51:b6:fc:8c:48:ee:78:1a:16:6e:03:9c:c1:
                    a9:ac:e2:4b:ec:1a:d7:4f:cb:b4:75:f9:ea:5a:ff:
                    cc:bf:da:a4:5f:ba:eb:35:f6:55:ba:fc:2f:df:bb:
                    40:09:21:42:1f:ce:9a:d1:80:fd:48:83:23:4a:f4:
                    07:96:bb:b0:07:74:19:ab:9f:48:ca:19:13:56:b2:
                    eb:41:50:77:88:2a:2a:60:8d:ef:06:09:34:32:7c:
                    9a:85:b8:58:29:10:3a:76:09:e8:13:4a:f8:e6:94:
                    0e:9c:0a:3b:21:62:e1:c6:67:05:af:d8:24:7b:c9:
                    66:3d:be:ae:d3:04:0a:3c:0f:a3:10:41:1a:1e:f9:
                    74:8f:a3:60:04:f9:3d:31:82:68:ab:5a:cf:fb:d4:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:73:40:F3:AD:4C:56:F2:A3:7E:5B:4E:4A:0F:12:8F:08:EC:34
            X509v3 Authority Key Identifier:
                keyid:9C:C5:08:BB:96:84:B8:83:74:02:E7:1D:2A:F4:DD:66:B7:7F:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9CC508BB9684B8837402E71D2AF4DD66B77F6C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/0/3230302e33362e3231392e302f32342d3234203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:ce:74:1f:b8:e6:07:c1:c3:54:0f:1e:0c:8b:09:d5:e9:
         8e:aa:39:87:63:67:4d:bf:95:05:d7:03:72:14:9e:fb:63:ba:
         3f:fd:0b:55:de:d8:e8:a8:26:30:53:cb:80:d4:97:5e:2e:6f:
         d1:6a:89:fc:c5:58:d6:8c:2b:56:1e:d9:9f:0d:63:da:ca:a4:
         5a:83:45:65:a3:b8:12:a8:0d:bb:76:aa:39:4c:98:77:fd:57:
         18:7f:d4:a8:1e:2d:e4:1c:ba:ce:80:1f:aa:92:12:a1:16:73:
         a3:31:c8:3c:2a:25:03:f4:1f:4f:d3:80:34:5a:05:55:a4:81:
         a7:5d:8e:ba:61:56:41:44:e4:af:2c:98:d3:1c:99:25:21:13:
         73:7b:c0:05:09:6f:1f:31:ea:9d:3f:ac:f8:63:45:43:40:fc:
         c3:7c:ac:dd:02:49:b2:3c:79:ba:92:1d:b4:6d:b2:5a:93:1d:
         aa:6b:aa:17:22:de:c5:a3:87:f8:ed:e5:1a:ef:36:de:52:35:
         e2:70:df:2b:8d:53:e5:1f:32:d2:b7:40:91:6a:a1:c0:e0:f4:
         8e:30:c0:35:88:be:1a:0b:d9:e1:dc:80:69:ed:fe:72:e4:1f:
         7e:ba:15:b9:37:a0:cb:a1:e7:13:b2:c5:02:4c:52:1a:74:4e:
         b9:4e:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org