Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa
File:                     3230302e392e3136302e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          VuXYuF/IutT3xijTsh9tKWh6LalvCKdM3PGE1a4s2go=
Subject key identifier:   66:CE:40:0A:9C:72:E8:8F:83:A0:78:45:0F:F6:9A:81:F6:03:FD:DF
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       6D768C95DBF8C9048207D3C92517CC5BA930648C
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa
Signing time:             Tue 15 Aug 2023 18:15:44 +0000
ROA not before:           Tue 15 Aug 2023 18:10:44 +0000
ROA not after:            Tue 13 Aug 2024 18:15:44 +0000
asID:                     268323
IP address blocks:        200.9.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:76:8c:95:db:f8:c9:04:82:07:d3:c9:25:17:cc:5b:a9:30:64:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Aug 15 18:10:44 2023 GMT
            Not After : Aug 13 18:15:44 2024 GMT
        Subject: CN=66CE400A9C72E88F83A078450FF69A81F603FDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:90:76:b0:9d:ff:cc:23:72:4f:4b:08:82:
                    62:60:bf:0d:ac:56:13:33:e4:68:78:8c:9b:ab:0f:
                    ac:17:b8:43:38:8e:fb:36:75:09:0b:eb:68:03:65:
                    c7:74:85:c5:2d:13:6e:c6:66:cb:64:5a:0c:f9:d0:
                    03:b1:0f:b8:66:1e:3a:ca:95:93:11:09:42:81:ee:
                    55:f0:77:7b:71:b1:6d:44:06:63:d3:04:4f:26:24:
                    bc:df:13:d6:4e:6f:ad:7f:1c:39:cb:dd:60:67:24:
                    e5:ab:e8:4a:91:0f:68:04:6b:3c:21:5e:07:32:2f:
                    e1:bf:e9:99:79:1b:0a:9e:4f:a6:e9:34:3b:88:9e:
                    26:4c:f0:27:67:5c:9d:59:66:2f:5c:61:68:cb:6c:
                    60:eb:22:16:88:47:56:1d:91:8f:0a:74:12:24:71:
                    aa:4f:21:5e:06:ad:dc:2b:ea:c5:65:e6:d9:f2:a1:
                    4e:70:3a:f4:e5:d0:3a:5e:09:53:57:c9:c0:9f:34:
                    02:4c:5a:76:c5:f2:ce:04:1d:0f:a8:24:97:60:33:
                    5a:ba:64:10:e3:23:36:09:43:88:2a:a8:85:73:b8:
                    58:51:06:fc:29:ae:ca:f7:55:6f:0b:ed:a4:ce:c9:
                    71:67:c3:67:b7:f3:b4:fb:28:9a:69:3a:5a:71:a3:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:40:0A:9C:72:E8:8F:83:A0:78:45:0F:F6:9A:81:F6:03:FD:DF
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3230302e392e3136302e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:d2:5a:61:7e:d6:a3:7b:82:75:20:9d:c2:e4:55:50:eb:bf:
         8b:87:4d:73:d1:d8:48:db:5c:76:bb:cf:77:8a:8e:cd:cf:9b:
         3e:6a:75:fa:9a:77:23:ce:92:25:1e:a6:ac:e5:76:ec:dd:22:
         2c:e0:2e:12:03:82:e4:7b:9d:e4:06:ee:be:63:3e:d8:c5:37:
         53:4d:8d:fb:9c:63:59:24:c5:10:08:e3:15:3b:3a:f2:de:5d:
         cc:01:42:d8:b0:2f:93:18:12:34:04:79:e8:36:db:36:a4:60:
         29:e7:e0:f4:4d:f6:6f:d2:70:76:5a:24:f7:0d:b9:22:c8:ec:
         8e:ce:d7:59:e9:4e:62:23:2c:e6:38:c2:65:4e:52:66:87:b0:
         43:f5:3c:c4:c8:3d:4d:d8:9b:ef:94:50:42:a0:06:00:20:1c:
         0f:79:4f:3e:ad:7d:56:11:87:ab:07:27:13:60:3e:d2:72:22:
         d4:44:11:b0:47:68:a1:07:29:d4:6e:ab:a5:ef:6c:7f:7e:d3:
         9a:20:a4:c6:28:e2:29:80:82:41:43:d1:d4:6b:fd:5d:df:35:
         5b:8a:31:ac:28:43:7f:89:39:ab:a6:ce:b1:90:73:1d:d5:bf:
         4b:80:36:73:8d:d0:32:67:ec:9e:60:a3:5b:59:47:0b:de:a7:
         2b:1a:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org