Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa
File:                     3230302e33392e34342e302f32322d3234203d3e20323731343235.roa (raw, json)
Hash identifier:          NolPB+4NZnyFS+Jz87/iXu0agLHiy0edVqYrpuhObQw=
Subject key identifier:   1E:CD:87:0C:0D:95:25:9B:CD:B8:63:B0:B7:51:CE:D3:85:81:02:80
Certificate issuer:       /CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
Certificate serial:       5307C2E330ED59DD4FF731C5B223B3B9C60650A9
Authority key identifier: 3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa
Signing time:             Sun 27 Aug 2023 14:08:10 +0000
ROA not before:           Sun 27 Aug 2023 14:03:10 +0000
ROA not after:            Sun 25 Aug 2024 14:08:10 +0000
asID:                     271425
IP address blocks:        200.39.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:07:c2:e3:30:ed:59:dd:4f:f7:31:c5:b2:23:b3:b9:c6:06:50:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
        Validity
            Not Before: Aug 27 14:03:10 2023 GMT
            Not After : Aug 25 14:08:10 2024 GMT
        Subject: CN=1ECD870C0D95259BCDB863B0B751CED385810280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:83:83:59:f1:f7:60:9c:8f:74:11:3c:ff:
                    49:79:7f:00:e3:01:e9:e5:2f:f7:bc:f5:b4:9f:99:
                    94:a2:a8:e7:bf:cb:fd:a0:89:85:d4:93:d7:a2:6a:
                    78:4d:0b:0f:ae:39:eb:5c:be:9a:c3:d7:f2:be:80:
                    84:b0:63:ca:57:ab:c1:c2:d0:53:28:98:81:d0:df:
                    87:7a:85:a8:0f:a5:46:ff:99:e8:b1:bc:5b:d3:b1:
                    15:da:38:4e:95:c1:e5:9b:67:fe:ab:46:bf:17:8f:
                    bf:1b:97:0f:52:7e:d0:21:a0:41:7c:06:6b:09:26:
                    0c:af:f4:d1:69:48:57:4c:88:6b:d0:84:d1:6b:71:
                    f3:b4:f9:86:80:c3:8b:61:1e:f8:3f:10:be:d6:52:
                    e3:ba:27:9e:5a:70:33:22:e7:bc:92:92:2a:25:77:
                    6a:14:00:80:73:8e:44:5f:ee:94:b6:1d:cc:30:d1:
                    b3:0e:e1:90:1a:49:4c:f2:75:4d:b2:56:ff:08:ff:
                    b8:3d:db:5f:86:2d:7e:14:c9:24:8d:00:da:21:97:
                    e8:ad:b4:c8:f4:e9:07:39:0d:21:86:99:c0:ff:57:
                    b5:42:30:0d:ad:b1:8a:83:28:17:65:ef:b8:1f:77:
                    37:bd:1e:1d:c7:6d:91:5e:27:92:8e:aa:6b:94:2a:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CD:87:0C:0D:95:25:9B:CD:B8:63:B0:B7:51:CE:D3:85:81:02:80
            X509v3 Authority Key Identifier:
                keyid:3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:ca:fa:a6:d0:73:64:91:55:75:f2:b9:81:a0:30:ed:06:
         73:b4:6c:10:c6:ed:64:96:9a:85:6a:49:9c:d2:b2:67:fb:66:
         8e:b2:5f:17:1c:4b:c3:1d:3d:a8:34:bf:3b:08:b9:7a:2b:d4:
         69:03:73:14:b2:36:d5:bf:5a:ef:76:f5:79:79:1b:31:1e:ad:
         a4:8d:9d:3c:47:67:9e:8d:c0:3a:54:a7:ff:a6:a6:9a:9e:0d:
         66:0c:d0:e5:58:4d:74:b1:41:d0:40:10:5b:c5:cd:0f:55:c5:
         50:66:de:49:f4:43:23:ea:e6:fb:d5:82:40:f2:c1:c0:d6:19:
         6a:d1:ee:fe:41:20:5b:9d:71:39:9e:3d:04:91:e3:42:27:23:
         75:c3:07:eb:e9:c7:de:a1:6a:93:44:8d:c1:87:be:06:14:ac:
         b9:ee:e6:ca:dd:0e:ca:19:12:15:c5:54:50:d9:5f:e6:4b:29:
         21:09:de:d6:39:c6:3e:86:a3:91:f4:cb:ff:6c:15:89:5b:a4:
         98:e3:d1:3a:8c:50:56:05:8d:be:9e:8a:68:c0:37:8c:6b:78:
         de:4c:f2:01:0d:d9:01:d0:55:7f:cc:96:b0:b1:8d:fd:68:df:
         85:ad:a8:49:72:d1:52:4c:20:fa:86:a4:a7:6f:e1:f6:ca:9a:
         22:af:00:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org