Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3234203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32322d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          zjorTJhvJrl2A/VKkm7nBMV/Bl9hV+1l6R2CUKCH604=
Subject key identifier:   97:2C:E4:21:B7:1C:54:59:8A:19:3E:FE:FB:AB:E2:F7:8A:A5:1F:63
Certificate issuer:       /CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
Certificate serial:       58A815CFABD617572E531A6EEDB3A655C6549FDE
Authority key identifier: 8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3234203d3e20323635333030.roa
Signing time:             Mon 24 Jul 2023 22:00:51 +0000
ROA not before:           Mon 24 Jul 2023 21:55:51 +0000
ROA not after:            Mon 22 Jul 2024 22:00:51 +0000
asID:                     265300
IP address blocks:        200.106.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a8:15:cf:ab:d6:17:57:2e:53:1a:6e:ed:b3:a6:55:c6:54:9f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
        Validity
            Not Before: Jul 24 21:55:51 2023 GMT
            Not After : Jul 22 22:00:51 2024 GMT
        Subject: CN=972CE421B71C54598A193EFEFBABE2F78AA51F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:37:b4:d9:6d:32:ed:68:3d:cd:9c:41:10:
                    dc:e2:30:cc:bf:4a:d1:46:8b:fb:ac:aa:68:2a:41:
                    6a:06:6a:73:8d:12:68:f1:18:e2:c8:a6:6a:2c:fd:
                    6b:af:31:56:bc:3a:60:a4:64:38:ea:e9:bc:d6:53:
                    ce:3f:48:73:a1:98:2c:a3:09:f9:31:f7:7b:bc:57:
                    1d:aa:f9:5a:15:11:86:22:14:11:d9:4b:44:52:0d:
                    09:9a:01:56:90:7d:af:3b:7a:de:61:f6:ce:52:3d:
                    89:de:b2:49:04:d7:a3:a3:10:7d:48:bd:a8:fc:77:
                    54:2b:99:be:2d:25:7a:e1:97:9e:d2:9c:35:1a:ea:
                    03:98:4a:b7:1d:1a:d5:04:95:18:6a:1b:e3:68:b5:
                    80:f9:9e:c6:bd:eb:5e:d0:1b:74:31:1e:4e:d0:f1:
                    5e:0e:91:ae:e9:ea:c6:63:97:1e:88:6a:70:af:a3:
                    3a:1b:aa:a7:ad:05:01:1a:7f:71:4a:72:6e:5c:d5:
                    39:00:97:c6:0a:d6:b3:b6:f7:7e:6e:8f:65:69:ea:
                    ba:47:99:39:78:e2:c1:d8:72:78:bb:38:ce:a9:7f:
                    59:ff:3b:b1:09:fa:54:78:67:1a:e1:3b:13:17:4f:
                    a1:f2:60:cf:e9:f0:b7:77:17:f9:34:1a:21:1b:1f:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2C:E4:21:B7:1C:54:59:8A:19:3E:FE:FB:AB:E2:F7:8A:A5:1F:63
            X509v3 Authority Key Identifier:
                keyid:8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/3230302e3130362e3133322e302f32322d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:14:7b:07:b1:e8:22:d7:af:3f:d4:6b:1c:ab:3a:c0:76:
         94:b1:69:9c:0e:8e:18:7b:fd:84:f0:c4:6a:22:79:0f:fe:e1:
         6a:3d:04:1a:02:9f:ce:1d:2f:3d:e0:19:45:e2:84:ae:13:cc:
         31:d0:be:ff:ff:2b:f2:67:21:67:22:02:9b:ac:09:d9:9f:8e:
         77:8c:50:28:b8:3a:74:8f:26:3f:70:0d:4d:b0:c9:18:1b:28:
         ff:2b:c5:f6:a7:f9:53:de:e9:b7:d3:9c:83:b8:81:76:b7:65:
         f0:80:2c:4d:be:50:91:30:2b:67:5c:ec:30:f6:35:be:b1:b3:
         69:71:fb:fb:6f:b3:af:96:8b:3d:08:dc:c5:8d:77:2e:fc:3e:
         1a:18:6a:74:ff:a4:b6:bd:4a:22:dc:ee:5d:e8:5c:0b:4b:a5:
         4f:cd:08:16:bd:61:dc:2b:69:a7:68:4e:e0:d8:b1:b6:c4:77:
         73:02:a7:e4:9c:34:82:96:bc:19:ac:c1:95:2e:5f:b8:3b:15:
         0a:04:2a:2e:45:68:c8:7c:60:82:dc:70:3f:e0:68:24:4b:b1:
         85:68:1c:8b:92:2b:64:69:7a:29:c9:ca:aa:29:0c:31:75:b5:
         76:f0:db:a0:f2:d7:47:13:52:c9:31:e0:b2:be:f2:05:98:78:
         e5:4b:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org