Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BndX1qP7LFA6KX99zwKWEG8HduhxsEd8ZDQkzrfD7jCj/0/3230302e3233382e3139322e302f31382d3138203d3e203130343137.roa
File:                     3230302e3233382e3139322e302f31382d3138203d3e203130343137.roa (raw, json)
Hash identifier:          hSY2jqXskWZn/1CcRKB7g1MhyKxzDf0i9LMLMSHyqO0=
Subject key identifier:   B5:C7:CC:2E:B1:08:20:35:3C:0A:6B:A6:B6:19:B1:AC:5E:50:BB:E9
Certificate issuer:       /CN=F95E33C6304D5A98C5798B86A0586BDD2FE4A148
Certificate serial:       167C36449DA5C7210B9CCCEA86FA66C6CE1994AA
Authority key identifier: F9:5E:33:C6:30:4D:5A:98:C5:79:8B:86:A0:58:6B:DD:2F:E4:A1:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F95E33C6304D5A98C5798B86A0586BDD2FE4A148.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BndX1qP7LFA6KX99zwKWEG8HduhxsEd8ZDQkzrfD7jCj/0/3230302e3233382e3139322e302f31382d3138203d3e203130343137.roa
Signing time:             Sat 16 Oct 2021 15:00:00 +0000
ROA not before:           Sat 16 Oct 2021 14:55:00 +0000
ROA not after:            Sun 16 Oct 2022 15:00:00 +0000
asID:                     10417
IP address blocks:        200.238.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7c:36:44:9d:a5:c7:21:0b:9c:cc:ea:86:fa:66:c6:ce:19:94:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F95E33C6304D5A98C5798B86A0586BDD2FE4A148
        Validity
            Not Before: Oct 16 14:55:00 2021 GMT
            Not After : Oct 16 15:00:00 2022 GMT
        Subject: CN=3082010A0282010100D454BD074D1FC40486592DCF82998B0151F127CB9B204F7A2BFDEA9592CCF03D82B1AF0B1756110CD771E44EFD8C39897B755DE38EEB06ED08F63FCAF268252E61E30A92579B4AAA0AA1AD3A7D2382B23A0F3FA9F19D792616E563FF84C239F7988021C0365708F37D9674D1E0B8A328BE546B5510838D1514EE8E1E40484E208C31F5DF18D28B3DA0167AF6B3952AB6F8044F3BAE86455397DEA0CC52CEFAABFB30D39B5F2E43D5310463656740377D347CEEB0BFA828A417DA6B6F49C2455DF2A9C6429CDAA9D89101CC6CA92ED1743A3CFD42455A94197CA33D164675171C8A425E53BC46D13BB3CEAC071123453549209EDCC3B2CF96E4024A934D12B3250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:bd:07:4d:1f:c4:04:86:59:2d:cf:82:99:
                    8b:01:51:f1:27:cb:9b:20:4f:7a:2b:fd:ea:95:92:
                    cc:f0:3d:82:b1:af:0b:17:56:11:0c:d7:71:e4:4e:
                    fd:8c:39:89:7b:75:5d:e3:8e:eb:06:ed:08:f6:3f:
                    ca:f2:68:25:2e:61:e3:0a:92:57:9b:4a:aa:0a:a1:
                    ad:3a:7d:23:82:b2:3a:0f:3f:a9:f1:9d:79:26:16:
                    e5:63:ff:84:c2:39:f7:98:80:21:c0:36:57:08:f3:
                    7d:96:74:d1:e0:b8:a3:28:be:54:6b:55:10:83:8d:
                    15:14:ee:8e:1e:40:48:4e:20:8c:31:f5:df:18:d2:
                    8b:3d:a0:16:7a:f6:b3:95:2a:b6:f8:04:4f:3b:ae:
                    86:45:53:97:de:a0:cc:52:ce:fa:ab:fb:30:d3:9b:
                    5f:2e:43:d5:31:04:63:65:67:40:37:7d:34:7c:ee:
                    b0:bf:a8:28:a4:17:da:6b:6f:49:c2:45:5d:f2:a9:
                    c6:42:9c:da:a9:d8:91:01:cc:6c:a9:2e:d1:74:3a:
                    3c:fd:42:45:5a:94:19:7c:a3:3d:16:46:75:17:1c:
                    8a:42:5e:53:bc:46:d1:3b:b3:ce:ac:07:11:23:45:
                    35:49:20:9e:dc:c3:b2:cf:96:e4:02:4a:93:4d:12:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C7:CC:2E:B1:08:20:35:3C:0A:6B:A6:B6:19:B1:AC:5E:50:BB:E9
            X509v3 Authority Key Identifier:
                keyid:F9:5E:33:C6:30:4D:5A:98:C5:79:8B:86:A0:58:6B:DD:2F:E4:A1:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BndX1qP7LFA6KX99zwKWEG8HduhxsEd8ZDQkzrfD7jCj/0/F95E33C6304D5A98C5798B86A0586BDD2FE4A148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F95E33C6304D5A98C5798B86A0586BDD2FE4A148.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BndX1qP7LFA6KX99zwKWEG8HduhxsEd8ZDQkzrfD7jCj/0/3230302e3233382e3139322e302f31382d3138203d3e203130343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:95:dd:03:88:dc:cf:24:7a:ca:60:f2:8a:7c:28:71:e8:
         fd:09:2c:f3:37:c5:7e:ee:8d:80:85:18:c4:f2:eb:a2:b8:8f:
         ce:35:c7:9a:96:43:60:54:0d:f9:b7:bc:53:10:92:95:14:9a:
         2f:b7:63:37:b4:3f:cd:7f:f0:59:9f:5d:c6:0a:10:39:14:d5:
         f0:c4:2f:00:ff:1a:40:3d:8e:47:78:cb:a2:8b:c4:b7:79:17:
         6a:53:18:c0:ed:1a:4e:5a:8f:68:b5:a8:ec:6e:c9:90:2b:9b:
         e6:2e:b6:85:3f:55:26:a1:1a:50:d3:2a:b4:84:cc:1f:35:e4:
         f6:55:54:b6:93:0a:19:e6:d5:62:2f:1d:2b:51:09:2b:44:00:
         ab:38:3a:85:0a:5d:9b:4d:88:ad:6d:2b:e0:5c:69:ae:43:9a:
         b4:0f:6c:64:36:d5:13:25:a7:10:28:4a:9c:a0:ef:ca:12:83:
         11:85:e0:05:91:60:23:b7:96:81:bd:01:b2:db:59:30:fb:15:
         07:5f:8d:d3:f8:6e:4f:56:6f:da:ee:b4:40:7f:4f:aa:da:fb:
         39:4d:3d:4d:89:c3:76:45:e6:f3:12:f1:ec:f1:df:9d:3b:22:
         6c:52:d2:ec:1f:cf:d9:11:06:bf:71:73:da:89:9e:a9:e9:63:
         61:98:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org